Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/GnrSRJ9YSyGKSHrie5WRQPNr0-g.roa
File: GnrSRJ9YSyGKSHrie5WRQPNr0-g.roa (raw, json)
Hash identifier: BQa4fMsSey22VOK1yTQQycTUq6oJfL+Fsa2o+HYa7Dk=
Subject key identifier: 1A:7A:D2:44:9F:58:4B:21:8A:48:7A:E2:7B:95:91:40:F3:6B:D3:E8
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 018774BA234DA063F2B673C5CA875A09CCAE
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/GnrSRJ9YSyGKSHrie5WRQPNr0-g.roa
Signing time: Wed 12 Apr 2023 09:09:28 +0000
ROA not before: Wed 12 Apr 2023 09:09:28 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:187:4695:a68a/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:74:ba:23:4d:a0:63:f2:b6:73:c5:ca:87:5a:09:cc:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Apr 12 09:09:28 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=1a7ad2449f584b218a487ae27b959140f36bd3e8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:b8:dc:05:c8:24:75:0a:84:85:1b:54:ee:6e:
9d:a8:e7:44:a3:53:c0:ae:29:73:e9:f2:c5:b7:fb:
45:14:b6:eb:af:96:42:1f:69:b5:6b:f2:d1:dd:7b:
1e:d4:36:ea:a3:7f:29:ff:aa:2a:75:45:0a:8c:4c:
a9:2a:f1:e5:f8:cd:6d:77:d3:14:c3:bc:09:f9:86:
51:17:99:dd:67:4c:4b:a8:05:2f:4a:7e:ee:f8:38:
8c:f8:b4:39:65:51:88:18:2b:b5:82:1e:74:ea:dc:
04:0d:96:d2:53:3b:b1:d0:25:5e:7f:b9:59:18:71:
34:c9:44:9f:53:b2:33:c4:af:d3:16:19:bd:ed:0d:
97:16:cd:e5:7f:d5:05:ae:eb:90:13:76:e3:12:d9:
67:48:98:29:6c:32:76:35:b0:7a:10:ac:38:4e:39:
40:9b:18:82:3e:6c:e5:23:63:21:fd:88:a8:d6:94:
fd:0e:b8:74:a2:04:15:28:6e:a1:dd:8f:a7:87:70:
90:b5:2c:34:b0:49:10:3f:f2:08:92:e0:9f:75:7d:
4b:f6:dc:96:9f:73:5a:55:e0:59:c4:e1:2f:16:bc:
1b:90:29:1b:36:02:17:7c:82:fa:0d:16:8a:a7:5b:
d8:1f:d2:7f:72:58:a2:73:8b:e2:12:f9:f7:6d:d6:
53:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:7A:D2:44:9F:58:4B:21:8A:48:7A:E2:7B:95:91:40:F3:6B:D3:E8
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/GnrSRJ9YSyGKSHrie5WRQPNr0-g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
81:d4:18:38:53:3f:88:2f:1e:ed:aa:42:10:67:0f:3d:b9:69:
4d:ee:ab:eb:28:1c:59:8f:fa:00:f4:07:0a:a4:d9:15:ca:c3:
5d:31:3a:22:73:60:e7:f3:87:ff:90:9d:c4:6c:63:fb:db:9f:
97:97:f0:f1:bc:be:d7:ea:75:88:90:55:f4:fc:ab:28:cc:7b:
c6:14:2e:2c:a6:1b:3b:8b:41:b2:c2:3e:cb:66:d8:f2:bb:98:
d1:cd:80:e6:dd:59:1c:bb:59:e8:17:b5:ef:7a:be:52:81:8c:
24:03:9d:ec:28:a3:26:5a:bb:da:9b:90:40:3d:7a:11:76:0f:
1e:f6:32:c5:05:7b:83:79:5a:de:d0:f5:63:33:53:d6:38:b1:
5b:c4:52:50:54:15:71:97:7b:54:ac:2b:96:87:7f:49:79:20:
94:74:e9:e2:83:90:28:c0:2a:b1:b8:22:cc:7f:1d:8f:b6:4b:
92:77:1a:98:92:f4:e7:a9:90:4c:17:c4:95:15:2c:a5:63:05:
8d:2b:30:f9:62:ba:5c:80:8d:36:f5:a8:5c:08:b3:43:94:0e:
ee:b5:60:29:ff:63:76:a0:ad:9a:dd:fe:9b:9c:34:b2:fe:0b:
c1:08:d5:93:a3:c1:04:45:b3:71:d7:4d:30:91:cc:a4:c1:e6:
17:03:01:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 2 22:43:55 2025 by rpki-client