Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/GnlqpHAuahkvYiC3wZxGigiahZg.roa
File: GnlqpHAuahkvYiC3wZxGigiahZg.roa (raw, json)
Hash identifier: qFfVlz4mJSr8m3EUK500dDSttaH+2xw+Llvtt08DhJk=
Subject key identifier: 1A:79:6A:A4:70:2E:6A:19:2F:62:20:B7:C1:9C:46:8A:08:9A:85:98
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0186665B301F93C225A7FDA61268B8950CE8
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/GnlqpHAuahkvYiC3wZxGigiahZg.roa
Signing time: Sat 18 Feb 2023 21:08:17 +0000
ROA not before: Sat 18 Feb 2023 21:08:17 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:66:5b:30:1f:93:c2:25:a7:fd:a6:12:68:b8:95:0c:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Feb 18 21:08:17 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=1a796aa4702e6a192f6220b7c19c468a089a8598
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:ce:af:af:76:5f:10:b4:ae:79:aa:94:59:b6:
9a:3b:ae:74:f7:b8:fc:96:10:04:04:e6:a4:4a:32:
fc:bf:97:95:8c:b9:e4:6c:52:8a:49:18:ff:80:b8:
1b:a0:12:de:45:00:20:ed:80:55:fe:d5:f9:62:c5:
85:8a:57:43:cc:75:34:fc:1e:e9:9c:d3:2b:5a:59:
37:08:3c:56:57:6a:db:9d:d0:5a:7f:bc:9d:94:76:
23:e0:ed:cd:d6:cd:ef:f8:fb:10:9e:0b:95:b4:c1:
63:f5:7b:e2:14:5d:25:8d:ad:49:18:ca:e8:8a:23:
2a:4f:d9:70:07:08:cc:8d:b4:6e:7f:a6:16:da:3a:
fb:ea:dd:9e:f6:75:e4:10:c0:7c:21:9e:d1:a6:4f:
4a:7f:e0:ab:49:b8:4f:3d:c8:1e:30:03:48:80:c7:
a2:4c:26:16:9c:a8:5a:80:79:29:c9:87:1c:39:87:
76:0c:88:26:66:48:c6:9c:97:ca:5f:15:46:c4:5d:
56:7b:7b:a1:81:07:38:e0:d8:f7:98:ef:4a:86:10:
28:46:77:5c:d9:f8:55:fa:77:c8:21:ad:80:c9:1b:
ba:30:7b:d3:28:65:c1:3a:f5:91:f0:f2:50:54:36:
65:4e:73:c6:77:e8:4f:25:d6:ea:0f:73:a6:91:f4:
9b:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:79:6A:A4:70:2E:6A:19:2F:62:20:B7:C1:9C:46:8A:08:9A:85:98
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/GnlqpHAuahkvYiC3wZxGigiahZg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
a7:12:98:20:2c:3b:b6:a9:d6:1d:4f:84:15:ed:a3:25:02:82:
0d:1a:86:1b:20:0b:ce:8a:0a:59:8d:75:3f:45:b3:34:55:8c:
7f:24:f1:cf:6f:f5:fe:4f:6d:5f:1a:d6:a4:a2:70:8f:e8:64:
27:db:c5:5e:e8:da:55:d0:b3:28:87:1d:06:9b:50:69:56:d8:
2f:b9:1c:25:78:9e:d3:0a:1e:81:6e:87:c1:0b:b9:95:01:fc:
ed:84:2e:95:9f:2d:bf:22:39:e2:b6:d9:02:46:63:b5:91:3b:
c0:7d:65:22:7a:7e:4b:cd:2e:80:42:29:45:e1:bf:2f:4f:7f:
15:d0:87:93:79:dd:65:92:3c:2b:e6:78:15:bf:8f:ab:b8:25:
5d:1c:54:ff:ab:80:75:a5:28:e4:3f:00:f4:3d:e8:07:e9:0e:
3f:7f:46:cb:9c:ff:d5:ec:f2:bd:e4:fe:60:f0:dd:93:02:cb:
59:66:fc:55:a2:dc:6f:f7:8f:6e:00:bf:b1:ba:90:78:8f:2d:
5a:c2:80:8d:cf:43:75:b5:ff:11:ab:51:72:ed:93:94:07:d8:
8a:37:ac:e0:26:00:d8:8b:c0:3d:fb:1c:aa:cd:65:7b:9d:8a:
b1:69:ec:fe:84:66:b3:ea:f5:f6:f0:89:ec:24:12:95:15:1a:
69:04:0d:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 03:16:56 2025 by rpki-client