Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/GwA46-eE0VzGgr8XazbH4-w7ne0.roa
File: GwA46-eE0VzGgr8XazbH4-w7ne0.roa (raw, json)
Hash identifier: CRg/8vWS00BNyE9O7WymO3/dLj1q5jV2kj/1QZM3rm8=
Subject key identifier: 1B:00:38:EB:E7:84:D1:5C:C6:82:BF:17:6B:36:C7:E3:EC:3B:9D:ED
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0187F9FDFFD7F88801B49EA668F44781B185
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/GwA46-eE0VzGgr8XazbH4-w7ne0.roa
Signing time: Mon 08 May 2023 06:13:05 +0000
ROA not before: Mon 08 May 2023 06:13:05 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:187:4695:a68a/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:187:b2b8:a7dd/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:f9:fd:ff:d7:f8:88:01:b4:9e:a6:68:f4:47:81:b1:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: May 8 06:13:05 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=1b0038ebe784d15cc682bf176b36c7e3ec3b9ded
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:2e:3c:f5:10:6d:a1:0d:8a:a2:dd:99:4a:af:
36:bc:b8:b4:4d:d1:86:77:52:29:fc:0f:aa:ee:88:
57:38:39:63:a2:76:b3:0c:72:06:ea:03:34:67:ae:
b1:f7:89:98:f5:21:fd:40:6a:4e:1e:b5:06:3f:d2:
51:01:4a:3c:27:e1:0e:61:8d:52:56:46:c6:a0:39:
0f:27:18:bb:02:b0:38:2c:bd:e6:f8:fc:7e:f9:71:
3a:47:8c:36:9c:55:a5:c1:13:b0:03:d5:30:e9:01:
54:8b:a4:18:c3:7d:1c:63:71:4f:65:41:a2:05:1d:
a4:52:b8:a2:d8:a1:49:19:8e:4b:0d:83:5f:02:64:
72:0b:28:68:83:15:46:a2:f2:21:9b:32:f9:e2:d4:
48:e4:8b:04:2c:59:ab:16:3f:67:f9:4b:af:a3:3c:
9b:20:62:a7:fd:b0:d0:2f:46:6d:f1:71:c9:c0:54:
9d:71:c1:a0:8c:72:3a:69:d7:fa:85:d7:f2:3e:27:
40:7f:f5:b1:60:1e:8a:ce:b7:19:fb:64:e0:d5:21:
70:08:e7:39:39:57:7a:9d:09:cd:56:d9:6e:55:fb:
8d:d7:5e:bb:b1:f5:88:d0:23:d8:4b:72:36:a8:af:
ba:7d:de:25:26:39:8f:41:0c:75:81:6f:4d:7b:cf:
78:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:00:38:EB:E7:84:D1:5C:C6:82:BF:17:6B:36:C7:E3:EC:3B:9D:ED
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/GwA46-eE0VzGgr8XazbH4-w7ne0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
3c:b5:f3:29:42:86:ed:24:6b:45:32:ff:3b:d5:cf:7d:cc:30:
eb:66:fb:20:c9:7f:50:1d:9a:47:6c:e2:1b:8c:46:68:db:dd:
64:94:67:cc:8c:9c:4e:36:92:0d:15:e5:95:2f:1e:25:b3:28:
af:13:bf:fe:86:79:50:53:23:85:15:e9:8c:c0:26:00:60:40:
45:ab:ca:b9:1b:82:ed:a6:90:b8:df:ab:41:2f:cb:92:7b:74:
e3:fe:1a:0e:82:00:c9:12:fa:28:6e:ee:04:37:26:d0:a0:be:
b8:6b:4e:49:74:ec:c9:18:04:e9:da:79:7f:67:49:dd:1f:d1:
f7:81:20:f7:a5:1e:f0:cd:b8:96:d1:7f:e7:2b:61:a3:67:33:
93:55:9b:09:9b:7d:a5:8d:fb:63:34:8e:ba:f1:04:91:4e:2d:
c0:b8:f1:3b:15:88:39:91:2f:1e:5d:d6:47:c2:8d:cf:89:19:
c6:6f:39:f5:97:02:37:a1:ce:84:e9:3d:aa:75:ec:7c:8e:43:
68:a1:a9:1c:1d:fd:e1:1d:e8:2e:3c:36:36:de:d8:8b:d1:ef:
a1:af:f2:ef:7b:c6:76:a6:33:e8:02:7f:76:2f:4a:3a:3e:fe:
ed:94:6b:e5:a5:b4:04:a5:92:ae:c1:77:43:f8:9d:08:07:6d:
67:cd:2e:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 3 04:10:52 2025 by rpki-client