Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/GxbV-gs9EMld7OYE4Ll_OYCigDM.roa
File: GxbV-gs9EMld7OYE4Ll_OYCigDM.roa (raw, json)
Hash identifier: 5gFB3vf+Pb24jRtA0fSqU1NJxbIkYWYsFoVaxOW3QcE=
Subject key identifier: 1B:16:D5:FA:0B:3D:10:C9:5D:EC:E6:04:E0:B9:7F:39:80:A2:80:33
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 81061280
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/GxbV-gs9EMld7OYE4Ll_OYCigDM.roa
Signing time: Wed 04 May 2022 08:13:56 +0000
ROA not before: Wed 04 May 2022 08:13:56 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:180:466e:42dd/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:180:8961:505f/128 maxlen: 128
2001:67c:64:ffff:0:180:457:1e3f/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2164658816 (0x81061280)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: May 4 08:13:56 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=1b16d5fa0b3d10c95dece604e0b97f3980a28033
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:07:be:52:59:14:d1:9d:31:95:05:60:b8:ae:
11:90:85:93:7c:ad:44:8e:c5:c0:25:3a:3e:96:35:
d6:e5:3b:cf:29:dd:38:e1:d2:98:0f:73:20:58:10:
b0:58:1f:01:49:69:e0:c8:7b:fd:d4:47:e1:97:bb:
94:49:a8:43:11:db:b3:99:e4:ac:03:7f:aa:62:c2:
5f:17:82:3e:b2:6f:2c:4e:ed:43:ee:46:85:d8:95:
95:6d:ea:43:d9:36:5d:8c:ea:6e:7a:67:65:63:3d:
85:0c:c2:ea:0c:fb:a5:12:7f:1e:49:a8:f1:bd:43:
03:5b:a1:e0:82:29:0a:57:60:22:c5:17:36:93:cc:
93:92:90:fe:ea:36:3c:1f:90:2f:bb:97:e9:c2:c5:
43:88:0c:f9:6d:e3:7b:39:f0:ca:63:68:76:4a:d2:
f7:88:36:3c:94:45:82:af:f8:e1:2e:df:7d:6f:e4:
76:77:fc:ca:b0:ff:b5:7a:27:05:98:5f:bd:99:88:
d6:f1:65:db:ec:4d:b1:96:bf:70:4f:42:a2:be:7a:
e4:29:a7:87:39:54:8f:5d:d8:b0:38:60:b1:ed:2f:
88:30:38:74:7f:89:11:6b:59:85:18:b8:bc:7a:9d:
97:35:99:91:ff:6a:97:8e:db:5e:a1:0b:e4:ac:f7:
ff:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:16:D5:FA:0B:3D:10:C9:5D:EC:E6:04:E0:B9:7F:39:80:A2:80:33
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/GxbV-gs9EMld7OYE4Ll_OYCigDM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
1e:ad:bf:2b:71:96:dc:65:a6:e1:15:d0:28:5d:f9:a9:b9:35:
af:df:b7:b9:26:31:33:dd:f5:98:10:d0:4d:94:51:4d:78:cc:
32:e8:9d:fa:45:73:46:26:a0:03:14:2c:1a:51:1c:f9:e2:3b:
b9:d2:3c:c0:02:87:ca:bb:5a:02:f0:4c:36:b4:f0:2f:ff:df:
30:09:60:48:3c:9a:bb:c4:e1:a9:a0:98:b3:e0:71:33:c9:50:
f5:f6:89:03:ff:ed:e9:36:26:1b:2a:7a:85:a4:f2:bd:69:fb:
52:62:3b:78:71:63:70:a7:82:74:5e:9e:3e:14:ac:ab:de:be:
ff:d3:7c:92:2c:c8:0a:8f:77:d7:5e:81:d5:e8:e9:8f:ba:9a:
2c:39:b8:44:55:99:0b:8f:74:df:b2:bd:c8:15:6a:72:c5:14:
3f:b8:91:e2:06:00:2c:ba:d6:9c:2c:25:f4:be:97:94:f2:fe:
70:bd:4d:5c:84:8f:99:4c:98:80:db:0f:8f:91:06:c4:da:e2:
aa:90:0f:7e:94:b5:9b:09:21:3a:e2:3a:5c:3d:ec:2d:7f:cb:
54:c1:93:a3:03:2a:08:d2:d8:de:59:4f:c2:ee:d3:f4:11:e0:
e2:4e:bc:d7:4b:a3:1f:80:26:6c:b5:6d:ff:a8:50:4d:1e:b0:
94:65:09:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 18:44:34 2025 by rpki-client