Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/GuXzOlG3u9Vvy3e--LrpiGU1WEU.roa
File: GuXzOlG3u9Vvy3e--LrpiGU1WEU.roa (raw, json)
Hash identifier: dMF04q+PGtX7CArE7XE95CxdQS5iKQRlHaYXYF5zMbc=
Subject key identifier: 1A:E5:F3:3A:51:B7:BB:D5:6F:CB:77:BE:F8:BA:E9:88:65:35:58:45
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 018A12A656434B7C2BF83A9C5E9D4CA379D8
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/GuXzOlG3u9Vvy3e--LrpiGU1WEU.roa
Signing time: Sun 20 Aug 2023 11:13:25 +0000
ROA not before: Sun 20 Aug 2023 11:13:25 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:188:7858:a003/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:189:a0e4:5c7d/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:12:a6:56:43:4b:7c:2b:f8:3a:9c:5e:9d:4c:a3:79:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Aug 20 11:13:25 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=1ae5f33a51b7bbd56fcb77bef8bae98865355845
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:9c:9c:c7:2a:db:48:56:7c:a7:43:3b:00:ec:
3c:37:7e:19:9c:79:70:33:8f:d5:ff:fb:a7:f7:9f:
79:a0:47:f2:1c:12:41:47:21:ed:aa:83:13:80:a4:
c6:7a:62:a7:23:24:40:36:67:f0:f0:e2:d9:10:6b:
dc:83:b2:7b:c9:b7:e8:c0:6b:43:0f:19:4a:e6:89:
90:36:8e:84:ef:bb:da:de:94:d7:4f:31:4f:7d:74:
48:75:91:29:51:68:fb:b7:3d:7d:77:f5:c0:ee:d5:
0d:ee:bd:aa:8a:2c:59:43:b7:48:72:6b:df:31:ec:
b8:b7:0b:b9:55:8f:1e:f2:21:92:0c:df:9d:e8:de:
47:87:25:e8:54:fc:db:9e:9a:ad:c3:c1:f5:6e:df:
7b:82:0f:20:8b:2a:5c:c1:89:02:a6:30:7f:21:d2:
f6:39:38:c1:f2:1f:7a:a3:58:ac:b7:85:80:75:c6:
0a:2f:f9:83:fa:da:87:a2:0e:87:2f:63:7f:ff:d9:
fe:8c:3a:69:78:a3:d0:5e:50:d5:fd:fa:bd:01:14:
74:4f:2a:eb:e6:3f:1f:cc:1c:e8:79:88:6c:a9:c0:
3c:49:4b:84:c6:9f:97:49:a6:7d:1c:84:93:9e:ba:
33:b9:61:be:fd:7c:fa:90:c1:4d:ea:42:32:66:fb:
15:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:E5:F3:3A:51:B7:BB:D5:6F:CB:77:BE:F8:BA:E9:88:65:35:58:45
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/GuXzOlG3u9Vvy3e--LrpiGU1WEU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
73:ce:18:11:44:e1:3e:b9:e8:d4:bc:17:d7:30:ee:8c:2b:b3:
df:87:6a:1b:1b:bc:0f:aa:61:c1:bb:54:ed:2f:44:58:a5:39:
d9:44:5e:dc:47:16:71:d9:bc:71:ef:e7:ca:a2:01:cc:ee:f4:
da:f9:85:bd:ff:bb:33:7d:14:65:c2:c8:6e:54:a5:5b:bb:51:
8f:33:7f:f1:54:ce:45:bd:cc:c4:2d:60:33:96:0a:8c:36:d2:
67:df:9c:92:5d:eb:9e:c9:f1:9a:c8:f8:9d:fd:0e:04:35:ca:
cb:6e:21:61:bf:18:52:9f:fb:83:48:64:e6:d9:1a:f5:f9:6b:
40:4f:18:3b:86:bd:2c:69:83:af:74:cc:56:70:ef:ef:b1:04:
b2:2c:05:a2:cf:6d:89:98:28:8d:53:dd:2e:e1:63:00:37:65:
64:81:76:68:ef:9a:2f:c9:b5:ad:7e:74:e3:fc:64:4a:bb:49:
06:eb:3c:72:1f:e4:50:f7:1c:f4:4e:81:ea:f2:51:03:ff:2e:
d4:5b:ff:26:34:0a:70:e1:0c:d3:c7:dc:cf:e3:76:d8:4f:16:
48:18:b4:c2:ef:cd:d5:3d:46:b5:d4:04:f1:a8:a3:fd:56:88:
5e:2c:9b:bc:68:23:2a:ea:b5:85:e4:98:8e:e6:c3:b4:7a:b2:
b3:e9:87:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 23:30:43 2025 by rpki-client