Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/GlcxM8BBrmoQgT0yoIgDEg-7B0Q.roa
File: GlcxM8BBrmoQgT0yoIgDEg-7B0Q.roa (raw, json)
Hash identifier: pUrLGuxSVEarqKH7C3wSyQl+1NfNRceL+ZqmH5Tg2s0=
Subject key identifier: 1A:57:31:33:C0:41:AE:6A:10:81:3D:32:A0:88:03:12:0F:BB:07:44
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0184D8F7CAF9A42A5737F0954443BF7B08DC
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/GlcxM8BBrmoQgT0yoIgDEg-7B0Q.roa
Signing time: Sat 03 Dec 2022 17:10:28 +0000
ROA not before: Sat 03 Dec 2022 17:10:28 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:d8:f7:ca:f9:a4:2a:57:37:f0:95:44:43:bf:7b:08:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Dec 3 17:10:28 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=1a573133c041ae6a10813d32a08803120fbb0744
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:e8:a9:f6:07:e5:b6:cf:68:35:c2:9d:57:3a:
94:36:c9:a1:37:ad:9f:7c:4a:44:d9:63:48:c1:35:
37:20:23:15:69:21:e0:2b:68:fd:e4:74:b9:7d:ef:
ed:b2:3b:3e:55:f5:d5:95:59:68:ed:67:bf:9e:9e:
43:14:e7:bb:a0:df:be:e3:7b:7a:34:ee:6c:a6:f7:
d7:82:58:e7:cc:4b:ff:95:76:27:ba:08:16:9a:a9:
db:c2:be:14:83:87:dc:b1:0b:76:4c:32:c4:4e:3e:
5b:f0:1c:19:23:0d:fc:31:92:e8:98:72:8d:fd:b7:
71:54:65:7b:fd:9d:3c:dd:6b:1d:6e:44:91:cd:8c:
c0:b5:a1:04:59:21:ec:6b:c4:e0:c7:b3:46:3b:75:
6d:b8:63:74:23:bf:1e:39:14:13:dc:bf:da:52:33:
c7:4a:94:fb:f0:b6:36:a2:9d:f9:ad:ff:45:2e:42:
a3:dc:24:df:95:01:ea:62:c5:b8:2e:95:1d:74:c4:
2d:b4:68:04:4d:b3:47:15:fa:03:48:af:0c:b6:58:
ce:7d:2b:cc:94:46:0a:48:0f:f5:96:c6:34:6a:df:
54:d9:65:8f:d6:80:a3:74:0f:35:c2:f4:07:03:75:
83:74:5b:55:d4:4d:89:b3:fa:2d:75:f2:b8:e9:91:
cd:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:57:31:33:C0:41:AE:6A:10:81:3D:32:A0:88:03:12:0F:BB:07:44
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/GlcxM8BBrmoQgT0yoIgDEg-7B0Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
09:9e:3c:1d:11:9a:c9:c3:36:a0:14:38:33:5a:f0:27:20:d7:
06:d6:8f:47:02:11:67:8e:34:f6:22:5f:25:90:f3:88:74:84:
bd:ef:fb:3c:8e:0e:4d:6b:42:bf:b0:5f:54:2a:6d:18:55:61:
c7:69:f4:3c:47:21:02:8b:99:49:d2:da:ad:d0:4b:29:bd:74:
1e:e4:76:66:70:7e:fb:44:42:18:6b:3b:05:df:e7:6b:3f:e3:
ba:b3:21:3c:81:c4:43:03:e3:82:ca:da:83:d0:be:3a:19:3d:
8f:0b:b5:7e:17:c4:c9:ba:7f:45:a5:0b:2f:39:32:b9:c7:6c:
cf:a8:a6:7e:69:29:f1:76:7f:9e:0c:2d:27:d0:e7:33:1a:1d:
34:ff:17:b7:d0:6d:28:6d:01:d0:24:38:47:e1:22:22:81:f1:
ad:9b:ee:58:cf:f9:26:65:30:4a:ad:43:b8:de:e1:7c:f4:21:
c7:e0:b7:11:f8:8f:11:38:3f:db:71:82:1f:7c:d0:c0:5d:ef:
23:ff:98:22:cf:d6:75:c3:0c:0a:07:b5:76:e8:c1:9d:7f:1b:
21:b1:ff:33:fb:de:6a:f6:2a:d4:bb:5e:f6:97:e8:42:5e:ed:
77:15:45:ce:85:63:34:ef:be:d4:73:8e:fc:d6:0a:e3:23:b8:
a0:7f:f2:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 5 05:02:52 2025 by rpki-client