Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/GmTK_uzNlSkhahUF6CmOxwJjRM8.roa
File: GmTK_uzNlSkhahUF6CmOxwJjRM8.roa (raw, json)
Hash identifier: 6zhxIDZ1q4YwUSzAX7/EFSf9CxhO4tpNelCMTp3MRJg=
Subject key identifier: 1A:64:CA:FE:EC:CD:95:29:21:6A:15:05:E8:29:8E:C7:02:63:44:CF
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 018747E57C2E0E04341C77C9C25452C650DB
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/GmTK_uzNlSkhahUF6CmOxwJjRM8.roa
Signing time: Mon 03 Apr 2023 16:13:54 +0000
ROA not before: Mon 03 Apr 2023 16:13:54 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:187:4695:a68a/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:47:e5:7c:2e:0e:04:34:1c:77:c9:c2:54:52:c6:50:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Apr 3 16:13:54 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=1a64cafeeccd9529216a1505e8298ec7026344cf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:24:1c:c4:25:2d:eb:93:e2:e7:8e:e6:82:69:
a7:6b:3d:ca:ba:56:59:01:2b:07:b1:21:88:37:e2:
f1:2a:f8:d1:42:39:94:9a:2b:3e:0d:24:b1:56:c5:
b1:83:39:df:c9:84:6d:cc:4f:ae:4e:2f:5a:eb:c1:
ce:e2:ab:c5:dc:e2:ff:d0:fd:46:09:7a:03:b3:d9:
a6:c6:31:25:77:32:5b:66:f0:88:0b:4d:7b:72:46:
67:d7:16:fd:48:7f:f2:7a:a6:94:5e:94:43:fb:92:
63:15:7a:5b:4a:d3:c1:e6:6b:00:c0:3a:d5:1a:37:
69:aa:fd:1f:cf:b1:82:12:30:4b:69:ec:a9:e3:89:
23:63:3c:6e:71:02:9d:e1:34:e8:99:d9:04:15:fa:
ac:00:23:4a:ee:1a:6c:69:fc:fe:65:d8:d7:d6:50:
a9:bd:35:82:95:44:61:bc:c9:6f:85:e5:a4:b7:21:
09:be:2f:35:51:ee:b6:22:f7:6c:b4:c6:f3:00:11:
a0:80:cb:0d:50:98:7e:cb:5d:7c:62:0b:99:71:c1:
df:84:e7:46:29:05:d3:10:eb:3c:aa:b8:a7:66:bb:
6b:24:b1:1d:a6:35:9d:31:e5:fb:f6:1e:07:f7:e5:
15:a1:c2:62:94:c1:1c:1d:7a:00:00:b3:9f:da:9b:
4a:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:64:CA:FE:EC:CD:95:29:21:6A:15:05:E8:29:8E:C7:02:63:44:CF
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/GmTK_uzNlSkhahUF6CmOxwJjRM8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
4e:ea:72:23:2c:eb:bd:1d:d5:d2:1d:ad:69:82:4e:e2:dc:e5:
2c:d1:be:2e:21:4e:4f:4a:62:92:6d:9a:d1:fc:dc:fe:41:e3:
e5:2b:36:50:e1:49:46:8b:f0:e2:11:ce:65:fd:39:77:d2:79:
b0:f6:70:92:2e:38:f7:29:0f:d6:12:60:d2:eb:79:bb:9a:fd:
61:96:fc:b8:21:92:88:72:88:ca:00:b5:2e:3c:c3:7d:56:0a:
ed:e5:38:55:93:71:3a:6f:33:8f:c2:35:e2:c6:c6:fc:0b:5e:
af:f7:f7:99:e4:60:3b:e0:9b:22:6f:7d:15:35:17:da:7d:38:
63:15:af:8c:29:a4:99:17:a2:fa:71:c1:3b:a1:a3:06:90:e3:
1c:22:fa:ef:68:4c:60:d7:4c:7c:dd:16:37:e3:18:fe:ae:f4:
73:1b:e4:a3:72:82:10:c2:56:40:ff:36:01:24:40:93:e5:47:
3d:64:d2:22:5c:99:d3:b2:05:01:4f:bd:54:14:86:54:c6:94:
82:92:52:1d:2e:64:93:7d:26:66:5a:6b:5d:f3:d9:03:f8:d9:
df:d3:02:fc:3c:2e:f3:69:41:b0:d1:36:18:58:d5:5b:3f:15:
31:70:1e:4f:15:67:1b:ff:61:d7:f6:91:81:3f:50:7f:44:cb:
46:2a:d9:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 01:15:55 2025 by rpki-client