Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/GpB3LXQK4KO_uzBoKNYSMt8bD7M.roa
File: GpB3LXQK4KO_uzBoKNYSMt8bD7M.roa (raw, json)
Hash identifier: /iSzeO5J4DTb1hqGutW0bPzr9y62KMjoj35LXPKJCv4=
Subject key identifier: 1A:90:77:2D:74:0A:E0:A3:BF:BB:30:68:28:D6:12:32:DF:1B:0F:B3
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0184E5D89A2B0015B378186E685F491AB18B
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/GpB3LXQK4KO_uzBoKNYSMt8bD7M.roa
Signing time: Tue 06 Dec 2022 05:11:28 +0000
ROA not before: Tue 06 Dec 2022 05:11:28 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:e5:d8:9a:2b:00:15:b3:78:18:6e:68:5f:49:1a:b1:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Dec 6 05:11:28 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=1a90772d740ae0a3bfbb306828d61232df1b0fb3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:97:b4:92:72:74:ee:5b:9f:79:db:bd:50:ea:
16:a8:db:ee:88:68:51:5f:58:06:16:c7:e0:32:93:
f9:25:ab:e5:84:4b:4f:cd:0f:ed:41:2d:f1:d5:52:
b0:28:c9:1c:41:02:d0:cd:07:cc:72:30:25:6c:62:
c0:7e:5c:5d:4f:5b:b3:57:83:f5:c7:a7:f7:8c:da:
49:d3:b3:99:5c:60:0d:63:db:19:1b:5b:d8:b7:00:
6a:de:bc:41:03:02:f2:8b:43:97:4e:97:28:ea:a9:
a2:d7:3e:8b:a0:33:d9:c4:a8:73:44:bb:20:5e:44:
dc:5d:ed:c3:1b:68:8f:e1:f6:f7:81:8b:e0:f0:b3:
8b:76:4b:b1:e5:92:9a:4a:3b:74:c5:3c:a9:16:c7:
0f:3f:db:eb:87:ca:25:b5:e2:ba:c5:fe:09:68:c3:
18:ab:53:f7:dd:36:62:7e:bf:cd:a4:ad:a3:7e:d5:
cd:e1:13:2a:0b:c3:ef:94:02:46:f0:74:6e:f2:5e:
cc:d7:f9:37:7d:6c:72:26:30:aa:13:fc:52:35:0f:
fc:1a:78:5f:7e:3f:05:46:fe:bb:f9:79:20:19:90:
fe:26:97:df:57:03:7c:3d:10:6f:96:74:9d:a2:5a:
3d:12:28:b9:2e:92:5f:ea:77:03:64:e9:3e:b7:7a:
ce:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:90:77:2D:74:0A:E0:A3:BF:BB:30:68:28:D6:12:32:DF:1B:0F:B3
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/GpB3LXQK4KO_uzBoKNYSMt8bD7M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
00:a8:c3:63:67:61:82:e5:91:d2:ab:02:ff:23:d9:66:d9:18:
3d:66:c0:0b:39:94:9b:87:db:0f:41:c9:c9:73:24:45:97:ee:
94:85:95:7f:5e:a2:ff:5d:dd:b9:30:2f:1f:b2:35:0e:17:c9:
0c:f8:2f:5e:e0:7b:9a:cd:9f:71:01:ab:2e:b3:76:33:3f:46:
15:85:c2:c2:3c:9d:4f:58:5f:13:94:55:e1:f8:77:6a:89:f8:
53:da:ac:0a:00:61:2a:f6:21:cb:f7:57:66:92:05:3e:16:76:
d6:ec:ee:76:63:e8:cb:fe:9b:3f:8e:3c:b4:ca:b7:54:99:35:
fe:af:0a:7f:7c:87:2c:63:7e:94:72:c6:8c:4d:47:47:d4:fa:
fa:47:47:23:d7:22:ae:78:90:5b:d3:eb:16:13:4c:f4:d2:10:
d5:bb:bb:67:fc:33:3f:58:c2:4f:7e:56:8f:da:b0:89:67:fb:
ea:f8:f4:19:58:d1:7f:a7:da:d7:e8:ba:46:d0:d5:a9:d9:e0:
14:65:80:37:57:ca:ee:c4:e0:b1:f9:fa:b5:49:a1:45:ef:e2:
6f:59:eb:58:c5:31:1d:9c:a2:d2:f2:ad:56:ad:4f:55:a8:e7:
a4:2f:71:6f:cf:20:ab:f7:fd:26:33:f2:4b:61:1c:75:60:db:
97:e6:a3:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 08:59:45 2025 by rpki-client