Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/gLpH61ShfMUjfvk8XXZX7yGZPTY.roa
File: gLpH61ShfMUjfvk8XXZX7yGZPTY.roa (raw, json)
Hash identifier: S4B5j0L+u/kQdObfK56AKsYPqZ9rHYsXgfc0Wz3geKU=
Subject key identifier: 80:BA:47:EB:54:A1:7C:C5:23:7E:F9:3C:5D:76:57:EF:21:99:3D:36
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 01872EC92E806E3F66516C33D239775B0A08
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/gLpH61ShfMUjfvk8XXZX7yGZPTY.roa
Signing time: Wed 29 Mar 2023 19:12:29 +0000
ROA not before: Wed 29 Mar 2023 19:12:29 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:2e:c9:2e:80:6e:3f:66:51:6c:33:d2:39:77:5b:0a:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Mar 29 19:12:29 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=80ba47eb54a17cc5237ef93c5d7657ef21993d36
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:34:d3:89:2b:e9:7c:cd:94:f1:62:13:20:58:
02:24:60:bb:49:e0:14:32:0a:5c:e3:56:f2:22:87:
d6:e4:8e:c9:aa:e8:02:06:35:e4:d5:e5:89:a5:c4:
1c:ec:b9:e3:18:65:9d:e1:1e:50:f2:1e:d9:38:64:
3c:d6:60:39:bf:52:a2:b6:a9:b6:e6:cb:b4:10:b9:
cc:2d:af:51:e5:e1:75:3c:b6:8d:c8:66:98:7d:e0:
02:ee:e0:ac:bf:07:40:2c:0a:94:66:2e:77:bd:c4:
18:34:f3:ef:96:8d:d7:c8:71:0b:20:30:e4:71:70:
91:ca:18:4b:c2:94:07:22:d9:f4:b0:1e:75:fe:73:
27:09:53:29:97:81:84:86:94:87:d8:dc:6c:c5:91:
06:d0:f2:06:e4:cf:cc:75:97:33:35:5d:dc:c9:f7:
74:f0:30:c0:51:a8:d9:a9:65:26:e5:db:c7:af:84:
1d:5f:5a:3d:8f:1a:c7:36:27:d6:f8:12:d3:f4:15:
03:3a:3c:bb:f2:d8:6e:f0:d2:25:78:b9:a2:12:5f:
2d:70:d9:bb:ad:40:cb:e6:11:9a:4b:0f:e9:90:51:
2c:13:4a:8d:aa:10:d6:67:0c:5d:52:cc:61:93:5a:
89:ff:4e:34:f9:c9:be:6b:3d:ef:d2:69:c5:77:ad:
00:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:BA:47:EB:54:A1:7C:C5:23:7E:F9:3C:5D:76:57:EF:21:99:3D:36
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/gLpH61ShfMUjfvk8XXZX7yGZPTY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
4b:d5:29:4b:fe:98:c6:32:c3:97:98:ff:41:83:cf:0a:d9:98:
4d:df:66:9c:30:0c:b0:bf:c8:06:61:d3:3d:82:e7:3f:9c:23:
f6:00:ac:6c:f3:54:9b:91:11:3c:be:d6:11:16:57:26:43:7f:
d0:f7:29:9b:64:20:67:f8:ec:6e:14:57:f2:57:ff:f6:ab:49:
7b:05:23:11:12:56:c1:5e:5e:eb:00:a3:90:78:d3:bd:af:b2:
7a:97:3a:de:d7:80:0f:b7:7f:05:09:63:e1:f9:95:79:a3:25:
2f:20:47:ea:25:b3:43:ba:f5:4c:ac:91:88:a4:3b:cb:94:08:
8e:12:6d:da:d9:b6:ef:38:09:2e:33:59:4d:6a:2b:5f:36:99:
60:3e:f1:9f:26:09:e9:1e:fa:36:35:2d:26:8e:66:77:55:e5:
64:03:de:85:9b:1f:1f:c4:66:20:74:30:f5:c3:81:98:65:f2:
e4:a9:fb:e5:25:06:c9:bc:b8:69:08:b9:f0:ba:05:f5:b3:a4:
56:13:ff:0a:5b:45:ae:88:d0:56:fd:64:3e:f5:aa:77:97:be:
34:9c:73:38:f4:e2:d6:d0:04:50:15:9a:bf:b1:26:7b:23:8c:
60:a2:e0:09:db:66:7c:6c:bb:4a:4b:ab:f2:53:6a:ff:87:5f:
43:f1:96:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 05:02:22 2025 by rpki-client