Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/GrBV53uWMVzCKa2j2DIH7EVZ9a0.roa
File: GrBV53uWMVzCKa2j2DIH7EVZ9a0.roa (raw, json)
Hash identifier: MxWpOanSZIQb+IQxtfR1P/Ll/bmjH8sWHK7wf/2Za9E=
Subject key identifier: 1A:B0:55:E7:7B:96:31:5C:C2:29:AD:A3:D8:32:07:EC:45:59:F5:AD
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 01880A81F6956E57E8A89BBC2F4B4DA07885
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/GrBV53uWMVzCKa2j2DIH7EVZ9a0.roa
Signing time: Thu 11 May 2023 11:11:09 +0000
ROA not before: Thu 11 May 2023 11:11:09 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:187:4695:a68a/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64:ffff:0:187:fa9a:b088/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:187:b2b8:a7dd/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:0a:81:f6:95:6e:57:e8:a8:9b:bc:2f:4b:4d:a0:78:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: May 11 11:11:09 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=1ab055e77b96315cc229ada3d83207ec4559f5ad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:40:b5:ae:2a:34:83:3c:4c:34:a4:37:93:04:
bc:df:5a:6e:cc:f3:ea:d3:0b:4a:56:49:6c:bf:82:
0f:8f:ea:71:ae:b6:47:d2:9d:e4:f5:8b:d3:97:21:
b9:87:68:11:ec:2b:cd:91:ea:57:ad:c6:4a:ca:31:
bb:2a:ca:50:e4:7b:db:98:d5:08:b2:3a:6a:ca:2b:
c5:c8:81:d4:16:09:23:41:2b:e3:73:05:9e:03:94:
a0:b8:9a:55:36:b3:7a:6b:c4:46:b4:b4:81:6b:82:
d8:c4:46:9f:0e:35:21:2b:d4:d8:ad:6b:8d:32:26:
22:ef:b0:44:61:fc:eb:c1:d9:9e:d1:8d:c8:0a:07:
be:b4:32:68:4c:8c:1d:71:2f:e8:21:e2:84:a7:39:
7a:73:83:0d:62:b5:41:2f:63:97:b9:a2:1b:17:55:
3d:bc:d8:43:71:15:a5:6e:b5:d1:73:38:0f:21:8f:
dc:af:44:84:6b:dc:44:db:d1:9a:f4:04:c8:fc:30:
04:c4:90:77:ee:49:ef:fc:f0:45:a6:ac:b0:0b:89:
e8:81:2b:4c:d8:cc:db:79:9d:d7:8a:c2:b7:bb:e0:
0d:99:16:41:81:58:33:4a:60:1f:c3:1b:09:13:e9:
fe:40:9e:6a:54:84:a0:4c:bf:87:2a:62:2d:6c:f1:
38:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:B0:55:E7:7B:96:31:5C:C2:29:AD:A3:D8:32:07:EC:45:59:F5:AD
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/GrBV53uWMVzCKa2j2DIH7EVZ9a0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
3f:72:97:ea:15:92:f1:4d:22:81:a4:55:6b:f5:cb:d0:a1:3d:
92:8a:bf:3b:a8:4d:bf:72:dd:80:67:e3:1b:18:e4:91:b7:17:
15:39:34:b5:77:60:38:de:a1:c3:90:12:c9:04:4f:3d:95:10:
b7:6d:8d:70:aa:5d:b8:1b:d9:14:d6:54:13:78:e0:da:59:10:
ab:1a:94:94:ca:11:9c:a9:e4:d7:5d:6b:5d:cb:72:bc:6b:21:
3a:c9:b3:69:96:c5:0f:65:a8:f9:4e:c3:74:8f:22:a3:03:99:
cc:7f:63:ae:ae:4f:6f:06:7a:9d:ad:ff:78:34:a4:30:a6:1f:
32:d2:6c:82:ab:de:a3:8d:6f:60:5e:b3:e4:76:c6:20:c0:c6:
5b:a9:e9:b6:2b:d8:4f:b1:54:0f:4d:67:b6:80:d9:79:97:53:
e4:5a:25:46:e0:e4:e4:e2:31:79:4d:81:1f:13:ff:1a:6f:21:
a1:54:ca:48:13:5a:ea:92:2e:90:f2:99:44:05:50:a7:a9:29:
67:5d:65:35:a8:d8:0e:31:9c:69:21:46:47:bb:59:64:ea:c6:
66:cc:9d:b7:58:ad:02:5d:df:ba:bf:25:a9:e6:1b:b1:25:0c:
05:e2:d2:09:e6:91:fd:24:5a:21:30:5e:0e:11:f2:86:04:0c:
3b:f0:8c:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 21:50:32 2025 by rpki-client