Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/GtkFdTswtVoTN7Y9Vhz9RmP4MLw.roa
File: GtkFdTswtVoTN7Y9Vhz9RmP4MLw.roa (raw, json)
Hash identifier: 8N8tWIBlEjh7Gg0jOmSrkaQfMrQognecvGc2d5B1Xko=
Subject key identifier: 1A:D9:05:75:3B:30:B5:5A:13:37:B6:3D:56:1C:FD:46:63:F8:30:BC
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 01873B3D6EF576685D6348FAC8ADAA6E578F
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/GtkFdTswtVoTN7Y9Vhz9RmP4MLw.roa
Signing time: Sat 01 Apr 2023 05:14:54 +0000
ROA not before: Sat 01 Apr 2023 05:14:54 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:3b:3d:6e:f5:76:68:5d:63:48:fa:c8:ad:aa:6e:57:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Apr 1 05:14:54 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=1ad905753b30b55a1337b63d561cfd4663f830bc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:f1:dc:e1:f5:fc:62:44:58:36:38:c2:b2:f6:
b4:8c:24:98:4d:78:ed:7a:d3:80:33:c6:6b:7e:08:
03:42:db:6f:d3:5e:48:62:00:c0:e3:b7:ab:21:73:
0a:db:8c:57:e9:92:cf:f2:ee:aa:b3:5f:90:49:c4:
b5:e3:a7:87:b7:01:00:62:ab:04:cc:44:59:c2:54:
27:99:ff:c0:0b:7b:90:80:9d:9a:03:4d:75:bf:07:
13:c2:64:e0:07:a4:99:3d:3d:7a:1f:ce:20:25:9c:
bc:97:0a:15:79:66:de:31:8d:5c:b9:30:1c:8c:c6:
1d:4b:1e:73:6f:a1:a7:a8:cd:11:94:78:cf:d2:b0:
c6:f6:94:4e:d4:ea:fc:79:6b:df:ef:8a:8d:31:21:
eb:24:4a:cd:0b:38:49:27:6f:b6:0e:76:44:a6:dc:
3f:e4:a1:ca:f5:5e:17:56:d1:f8:6a:36:e9:cd:26:
c9:60:97:74:25:ed:30:94:d4:9d:67:a5:f8:57:30:
2e:a8:18:e7:9a:92:6b:86:de:9b:4f:4c:56:b9:83:
09:ae:4e:78:8c:cc:6d:33:3d:42:7b:2a:0a:07:96:
2d:53:de:8e:c0:12:6e:3b:6a:dc:35:5a:8d:be:cd:
4b:74:7b:3c:4f:72:2f:18:8b:9e:98:63:24:62:7b:
98:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:D9:05:75:3B:30:B5:5A:13:37:B6:3D:56:1C:FD:46:63:F8:30:BC
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/GtkFdTswtVoTN7Y9Vhz9RmP4MLw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
aa:54:14:21:a0:08:ed:de:44:03:be:10:f1:c4:cd:b6:f2:61:
7b:48:23:fb:6a:1c:94:ae:8f:73:83:d8:d2:57:92:c6:49:35:
3c:16:3a:da:3c:5a:27:5c:1f:82:39:c6:a5:17:55:c8:45:f4:
34:cb:1e:6d:a3:35:ad:fd:47:99:14:20:60:76:93:10:48:02:
5b:cc:25:10:63:57:c5:70:f0:55:1f:0e:31:f5:ce:bb:b2:e1:
e6:ec:f1:f1:60:ae:cb:38:9a:c7:d3:77:e7:8c:dd:7c:43:6e:
13:4c:22:89:43:7a:dc:ec:c2:fc:ac:23:36:d4:71:7a:1c:71:
3a:39:08:9e:82:45:f8:c4:b5:7f:47:df:d8:52:ab:69:fc:79:
48:ac:40:78:35:18:1d:94:f9:c7:71:61:04:61:5c:31:d6:38:
d0:7b:f7:a8:8b:6c:7e:a2:d1:5e:f0:35:4c:c7:a1:08:b5:a3:
6e:78:9d:5f:d3:3d:5d:51:b8:4f:e2:82:e7:06:d1:47:4d:89:
59:8d:29:9d:66:4a:07:4f:99:ef:36:68:8f:e5:e7:74:5e:4b:
f8:25:0d:39:20:3f:30:1f:e3:73:f8:4c:96:98:b4:ce:82:aa:
1c:14:54:ac:17:39:eb:03:21:d9:ad:c5:5d:d6:0a:a3:68:ba:
92:65:99:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 18:20:36 2025 by rpki-client