Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/Gixjtp63XK4fxBwDaUDCruz8zLY.roa
File: Gixjtp63XK4fxBwDaUDCruz8zLY.roa (raw, json)
Hash identifier: RadeJWRMUvlBY1W93lUqQzftMfBjbcAprmY/5N36zoI=
Subject key identifier: 1A:2C:63:B6:9E:B7:5C:AE:1F:C4:1C:03:69:40:C2:AE:EC:FC:CC:B6
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0186D1A23246F85392FCB2B2A8F39E1F052D
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/Gixjtp63XK4fxBwDaUDCruz8zLY.roa
Signing time: Sat 11 Mar 2023 17:05:13 +0000
ROA not before: Sat 11 Mar 2023 17:05:13 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:186:d1a1:504c/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:d1:a2:32:46:f8:53:92:fc:b2:b2:a8:f3:9e:1f:05:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Mar 11 17:05:13 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=1a2c63b69eb75cae1fc41c036940c2aeecfcccb6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:9e:ac:42:c4:ef:61:54:68:ba:39:17:e3:90:
c5:4a:7a:f3:bf:f0:95:e6:4f:6b:4f:7d:d4:b2:43:
01:d1:e3:c4:44:9e:7c:4d:9d:d4:aa:6f:c1:08:3f:
ad:fa:d0:37:3d:86:20:34:36:17:ef:f1:22:b7:e0:
05:5b:ae:35:68:3a:7b:4d:18:97:00:ca:80:07:88:
02:9d:c4:5e:74:56:0c:bb:41:bf:b6:5f:e7:91:4e:
44:96:fc:aa:6c:1b:8e:2b:d9:68:5f:a7:eb:e5:ae:
fe:74:27:51:68:96:8f:1e:16:5b:1d:65:ad:31:89:
5b:d8:be:70:e7:66:9e:0c:6b:42:ee:30:5f:3d:f5:
26:8f:26:17:0a:cd:56:6e:69:09:ea:a1:ac:84:e1:
89:4d:75:e5:09:e7:f6:02:11:c4:68:5a:96:6f:d4:
dd:c8:e1:7e:14:ca:2d:83:39:b5:1d:7b:f5:f6:61:
09:3a:37:eb:88:a2:50:69:a4:6d:b8:63:f1:b0:f7:
e3:4c:b5:27:0e:55:82:56:ac:18:34:d7:b4:9d:ad:
83:05:a0:30:94:26:56:5f:1f:76:19:6a:da:6c:8d:
f8:b5:34:bd:bf:1a:0c:38:9f:df:a1:ad:a8:99:e3:
85:38:2a:b6:e5:8d:ee:44:2b:b7:fe:b7:ac:e6:2a:
5c:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:2C:63:B6:9E:B7:5C:AE:1F:C4:1C:03:69:40:C2:AE:EC:FC:CC:B6
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/Gixjtp63XK4fxBwDaUDCruz8zLY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
48:d8:16:b1:8b:28:ad:27:44:02:97:8b:4e:33:3b:04:44:45:
e7:83:1b:59:59:87:76:1b:03:9e:fe:dc:88:45:5f:92:28:d3:
e8:ac:f5:b5:3e:3f:2c:22:f9:68:9d:37:a2:0a:e3:90:74:1f:
10:a9:f8:63:b8:3c:59:aa:06:c4:2f:42:8f:f8:e9:db:54:40:
65:46:dc:80:b5:e9:51:97:89:83:91:d0:ef:c2:84:3e:8a:4a:
11:8d:c8:a7:5f:8d:5d:5a:91:bc:bd:16:a8:c5:1e:16:15:ba:
7f:c2:b5:39:7f:48:46:57:41:9c:ea:e8:60:c0:78:15:d4:f5:
78:11:33:7e:b3:a1:f5:d9:a1:0d:cb:bf:39:9b:25:85:3b:4a:
8b:4f:9b:d2:ba:b2:d3:b8:0b:57:9f:35:93:d3:3b:c5:d8:ff:
85:b1:af:07:6f:45:3a:65:78:58:46:30:4c:36:4b:47:d8:e3:
7b:bf:b5:15:f6:46:81:a4:44:00:be:c9:6a:aa:dd:2c:d0:1f:
6e:0b:20:ef:1b:4b:5f:47:53:85:9d:c6:63:60:57:1a:b2:8a:
d3:9b:de:95:9f:3b:91:8e:12:8b:83:27:03:b0:c8:14:a4:f7:
c7:bd:51:a4:51:38:69:9b:4f:6a:1f:2b:a8:fa:fd:c3:b6:93:
b7:f1:db:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 17:33:22 2025 by rpki-client