Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/GyvLn4ooGohLpzUMGqP6eMOuuZA.roa
File: GyvLn4ooGohLpzUMGqP6eMOuuZA.roa (raw, json)
Hash identifier: RXYs+3LyRH3IHPi1h1lNlWDl56HSXpMrj91CE5APPHQ=
Subject key identifier: 1B:2B:CB:9F:8A:28:1A:88:4B:A7:35:0C:1A:A3:FA:78:C3:AE:B9:90
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 01851BB65F97FB2F8E0128F4B94A200088E9
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/GyvLn4ooGohLpzUMGqP6eMOuuZA.roa
Signing time: Fri 16 Dec 2022 16:13:34 +0000
ROA not before: Fri 16 Dec 2022 16:13:34 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:1b:b6:5f:97:fb:2f:8e:01:28:f4:b9:4a:20:00:88:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Dec 16 16:13:34 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=1b2bcb9f8a281a884ba7350c1aa3fa78c3aeb990
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:6f:94:97:b9:fa:e4:1c:d2:41:d9:a3:65:87:
09:c7:91:cf:ba:2f:8c:30:5b:3c:d5:a5:e8:d0:3d:
70:35:e9:05:09:5f:0f:0e:de:ff:48:20:b5:ab:4a:
64:a9:92:ac:cf:f1:3f:c4:83:ec:92:61:23:5c:ec:
ba:02:a7:c7:8f:01:18:ba:a9:a8:1e:61:4c:64:cb:
06:94:6b:c4:f7:e3:c9:cf:c8:7c:16:a4:84:2f:15:
c0:7d:80:24:d4:dd:ff:8c:29:1a:aa:9b:77:c9:c9:
39:32:f1:8a:17:be:f6:01:67:f5:7a:52:11:70:68:
6f:a8:c1:a6:5f:25:52:a2:6f:58:2a:6c:d7:e1:09:
80:51:4a:3d:7f:13:28:07:9f:2e:42:79:2e:ac:28:
f8:04:81:5e:64:c8:88:61:d9:54:25:b4:5d:d3:25:
2c:19:64:5b:e8:1a:3c:c8:74:1f:56:ee:14:2f:40:
48:bf:1e:1f:5e:3d:b0:5e:79:c2:10:78:3f:6e:48:
d4:3f:54:39:22:d9:0e:04:ae:1c:7c:8b:49:85:69:
28:2e:e8:d4:94:ba:dc:53:ef:92:c1:ab:ee:39:71:
e3:8c:a3:e2:f2:b0:8e:1a:45:92:56:b4:2d:76:e7:
24:fa:e4:31:ac:aa:66:ee:1b:56:85:51:2a:c5:c3:
d0:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:2B:CB:9F:8A:28:1A:88:4B:A7:35:0C:1A:A3:FA:78:C3:AE:B9:90
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/GyvLn4ooGohLpzUMGqP6eMOuuZA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
a8:ad:56:bf:52:be:07:65:ac:ea:ff:b6:0f:f1:77:80:39:2e:
68:73:e5:82:2c:ab:54:32:c3:fa:24:d0:c3:1d:ce:55:f4:97:
a6:3c:a6:81:e2:54:fc:d4:c8:28:50:49:16:2f:69:fe:7b:40:
36:51:c5:a2:71:42:2d:c1:73:70:20:ac:22:8f:15:5b:f7:78:
57:6a:75:5c:0a:b3:4d:31:09:07:02:16:e1:63:00:00:51:9e:
bc:33:58:2c:83:51:e8:dc:ab:07:e9:1e:6b:e2:a7:90:13:60:
ba:67:f6:98:5a:c9:a1:98:b4:61:e2:84:bd:b7:de:11:2d:88:
db:8e:e5:8d:51:ce:94:83:ca:bd:47:a9:9e:25:04:f5:9d:20:
04:a8:be:42:6c:77:b7:98:4c:04:c3:93:b8:dd:be:0d:f3:e2:
dc:97:08:86:0c:8f:56:5c:a7:5a:65:f7:c8:4a:77:01:55:10:
ed:fc:36:45:07:08:60:66:b8:6b:d9:f1:6e:67:63:23:df:bc:
89:60:21:f4:30:92:f2:8b:6f:ac:5c:66:35:f5:39:b5:51:13:
c3:b5:75:c6:c0:03:f6:54:95:82:6a:9c:ba:61:5a:e6:9a:cf:
61:62:8c:bd:42:3d:c5:fe:c9:97:b3:12:74:cf:61:11:1e:b5:
f8:13:42:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 21:29:18 2025 by rpki-client