Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/GxAogOlQhrUexRMAGyBXKMGyGr8.roa
File: GxAogOlQhrUexRMAGyBXKMGyGr8.roa (raw, json)
Hash identifier: Ix9TdV8PaZqxo9mrDL9GqJBG6cTqfUb5716BInJG0B4=
Subject key identifier: 1B:10:28:80:E9:50:86:B5:1E:C5:13:00:1B:20:57:28:C1:B2:1A:BF
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 9175137C
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/GxAogOlQhrUexRMAGyBXKMGyGr8.roa
Signing time: Fri 01 Jul 2022 11:09:25 +0000
ROA not before: Fri 01 Jul 2022 11:09:25 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2440369020 (0x9175137c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Jul 1 11:09:25 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=1b102880e95086b51ec513001b205728c1b21abf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:56:77:a1:75:75:da:76:98:76:d6:53:ad:99:
a5:6d:c9:dc:2b:c0:fb:2f:03:ee:cb:7e:9f:97:a8:
2b:d2:36:b2:c8:d1:52:e4:41:ac:25:eb:89:8f:7a:
95:13:ca:9c:f4:26:b6:6f:dc:eb:fc:36:62:81:87:
2c:ad:d4:47:90:bf:61:ab:76:20:c5:17:94:29:d1:
fd:b8:69:17:1c:f7:8f:b6:a5:8d:ed:e6:35:56:c9:
63:be:55:1f:29:4a:11:63:7e:6a:08:69:7e:95:81:
c3:c1:d5:93:0d:82:6d:48:ca:45:02:7f:ef:8f:2d:
30:df:80:48:3e:0e:77:36:6f:1c:93:71:77:cf:d8:
fa:34:1c:4a:a0:b3:f5:3c:de:ee:ea:8a:1d:89:16:
4f:0a:0b:d7:31:ad:d3:d7:f4:85:3f:1f:02:c5:61:
4d:fa:e7:a0:60:e7:d9:38:d8:8c:cf:3e:5b:eb:9f:
76:e9:03:f0:6f:ad:e7:eb:ea:bb:66:f0:c8:e3:7d:
a9:6b:03:49:6d:61:84:f1:06:13:f9:e4:f6:84:5c:
26:b6:98:3a:5f:4b:62:e4:f0:55:a9:00:e6:06:a6:
47:9d:b8:8c:85:26:01:a6:17:39:f3:31:ee:cc:07:
b3:9f:57:e0:15:12:9b:58:23:15:1c:c4:48:c4:11:
03:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:10:28:80:E9:50:86:B5:1E:C5:13:00:1B:20:57:28:C1:B2:1A:BF
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/GxAogOlQhrUexRMAGyBXKMGyGr8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
33:a7:08:d2:b4:ed:14:89:87:60:ef:07:8e:9d:4a:fb:93:d2:
a9:7a:3b:14:61:6c:4b:26:e3:3a:6d:84:48:29:fc:30:46:72:
f7:5e:ec:b9:ca:51:1a:21:f1:18:8d:9d:e2:0b:b8:62:a4:2c:
c4:52:59:b9:a5:fe:3d:73:80:5d:95:0f:90:67:02:fc:6b:e1:
ff:5b:8d:cc:21:d6:a2:b0:ed:e0:e0:70:1b:2f:54:bd:5f:76:
dc:40:25:40:6a:5c:d4:67:c9:2e:72:4a:0a:fc:76:fc:db:97:
3c:fa:52:3a:0d:79:e0:ec:a0:58:10:37:2d:5a:e5:f9:91:00:
fa:36:2b:2f:bd:9f:28:06:5f:e2:fc:2e:63:0c:2d:88:a9:1a:
36:e4:d2:20:48:5a:20:85:ea:98:df:d9:38:1d:4d:8e:50:5d:
eb:d7:26:0e:34:4f:2d:a5:a8:9b:3d:88:da:74:3f:d7:27:8a:
48:4f:59:f7:80:52:d4:c6:1b:f5:77:82:cb:e5:35:99:4d:aa:
8f:9b:2e:4e:a7:9e:4e:30:a6:8a:5e:88:66:f9:71:f4:b9:71:
d3:03:3b:7a:c9:d9:7a:a3:7d:8f:a1:45:52:93:3d:ba:02:08:
07:f0:b4:81:d8:ac:0b:98:47:b4:f8:10:30:ed:b9:ee:a8:6c:
e5:a4:9e:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 19:54:39 2025 by rpki-client