Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/GzRc-uFosTXghr1NO0pGp1g9-_Q.roa
File: GzRc-uFosTXghr1NO0pGp1g9-_Q.roa (raw, json)
Hash identifier: SYG82585QpZ69jc1c7xUdDb4aoBf8ciWJYyg0+0i7gU=
Subject key identifier: 1B:34:5C:FA:E1:68:B1:35:E0:86:BD:4D:3B:4A:46:A7:58:3D:FB:F4
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 018983852078AFE4D86A326A41200526E128
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/GzRc-uFosTXghr1NO0pGp1g9-_Q.roa
Signing time: Sun 23 Jul 2023 16:11:27 +0000
ROA not before: Sun 23 Jul 2023 16:11:27 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:188:5fe2:b396/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:187:4695:a68a/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:188:7858:a003/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64:ffff:0:187:fa9a:b088/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:187:b2b8:a7dd/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:83:85:20:78:af:e4:d8:6a:32:6a:41:20:05:26:e1:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Jul 23 16:11:27 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=1b345cfae168b135e086bd4d3b4a46a7583dfbf4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:66:b8:11:4c:b9:52:fa:bd:47:35:86:4f:c0:
74:41:24:ea:dd:f6:cc:b8:e6:35:b5:c6:c2:00:af:
a7:81:35:d6:26:be:60:33:e6:bc:85:2a:62:09:da:
3d:a0:a7:a7:ee:02:46:6b:97:d4:47:07:99:1f:11:
d0:59:98:57:26:a1:a1:dd:97:df:ee:ac:bb:33:f7:
b5:c0:cf:c4:fc:1b:0a:eb:09:cd:47:b3:d1:21:3f:
56:f6:61:5e:c8:f6:a8:bb:5e:d9:52:ee:69:d3:5a:
59:ba:c5:c9:b5:a9:14:a5:c8:6d:bf:94:22:38:36:
8e:d5:e1:0a:92:c0:7f:6f:4c:3b:e3:8b:c4:cd:0f:
72:5b:73:41:c5:72:72:33:8f:9d:53:e6:f7:b9:8c:
35:90:ba:00:25:1e:5a:36:84:6a:d0:a2:6b:45:b0:
17:b9:05:81:2d:36:39:57:b0:dc:40:9e:09:74:c9:
ff:98:0a:38:2a:17:2f:a0:a7:84:af:ed:dd:9b:b4:
28:19:ac:16:9d:d1:b2:da:30:64:f7:b8:37:24:a0:
a9:91:b8:f8:96:ca:c7:c7:b9:5d:f0:c3:37:35:e6:
1b:5c:64:17:fd:cd:8d:6c:a0:25:e3:d4:b9:9d:9b:
e5:66:7b:c2:a3:39:ed:ab:68:82:82:ef:ce:c9:11:
3e:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:34:5C:FA:E1:68:B1:35:E0:86:BD:4D:3B:4A:46:A7:58:3D:FB:F4
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/GzRc-uFosTXghr1NO0pGp1g9-_Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
02:7a:a6:31:63:a4:f4:41:7b:6e:24:c5:29:3e:55:ce:a9:d0:
59:1d:1a:3b:39:cd:7a:a2:92:45:50:fa:35:10:c1:4e:27:41:
62:33:18:90:0f:c1:86:d0:af:16:58:55:9d:45:66:e9:b9:be:
6e:cf:a3:4f:7b:de:ce:7d:6e:66:c4:07:d1:e2:03:c4:7d:c8:
e1:a4:e2:c4:dd:e3:35:3c:f5:b5:01:4e:c0:96:8c:8d:3f:0c:
a9:4c:15:d6:76:d7:3f:b3:75:65:c7:c1:b2:66:71:10:07:30:
e3:94:e2:1e:fe:44:cc:b7:77:21:31:13:a2:a6:4d:4b:84:77:
0f:4d:06:29:11:1c:95:4f:62:bc:7c:b4:1e:50:f6:99:7a:37:
3d:0b:d5:76:b9:07:97:6a:52:58:d2:be:73:c6:50:d2:f0:d1:
e3:54:6b:df:73:12:3a:4c:1f:9d:74:cc:2c:c8:73:83:30:7d:
78:f6:7d:65:b0:ec:d3:e9:b6:c4:61:54:c4:68:a4:3d:33:52:
b2:94:8b:70:64:c3:55:03:23:fb:0a:dd:17:19:cd:95:c9:04:
fa:ca:d0:de:d1:c8:a9:30:1a:54:ae:98:f0:fa:41:1c:11:6d:
3b:17:5c:07:98:5a:e5:02:0a:b6:70:27:6e:ad:45:af:de:4c:
59:72:e7:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 3 14:19:44 2025 by rpki-client