Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/gUGHTTzE75-3COXpPcmoxnkPiio.roa
File: gUGHTTzE75-3COXpPcmoxnkPiio.roa (raw, json)
Hash identifier: gLnkSkfhnqoA/wUH1Guo40rkyiCa0piVgFscnycnpcg=
Subject key identifier: 81:41:87:4D:3C:C4:EF:9F:B7:08:E5:E9:3D:C9:A8:C6:79:0F:8A:2A
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 01827D2820725E19A3E0361E13AB054934A0
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/gUGHTTzE75-3COXpPcmoxnkPiio.roa
Signing time: Mon 08 Aug 2022 11:12:37 +0000
ROA not before: Mon 08 Aug 2022 11:12:37 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:182:3f1d:a803/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:182:7cb2:99d4/128 maxlen: 128
2001:67c:64:ffff:0:182:383f:6b78/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:7d:28:20:72:5e:19:a3:e0:36:1e:13:ab:05:49:34:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Aug 8 11:12:37 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=8141874d3cc4ef9fb708e5e93dc9a8c6790f8a2a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:21:b8:7e:bb:05:f1:8d:9a:88:aa:36:df:a4:
22:5e:25:bf:8a:d6:a4:6a:20:c2:17:1c:cf:3a:b0:
7d:3e:64:1a:b3:33:70:a9:86:8a:98:9d:60:18:a6:
c2:1d:c6:ab:8c:e6:d3:b9:aa:83:5d:09:67:23:b3:
17:58:9d:21:62:98:fb:fc:ae:74:7f:62:d2:c1:4f:
95:25:c6:9a:49:3d:3f:95:f0:cc:6e:69:5d:99:76:
8d:db:17:1d:03:99:83:af:6a:dc:c3:11:26:80:57:
94:8e:1f:ff:d5:76:2f:9d:9e:b8:dd:b1:4a:15:69:
cc:39:71:b0:57:c6:b8:28:69:6c:ca:c2:71:a9:2b:
73:a3:e4:aa:c9:08:43:4e:18:47:07:5f:2f:0c:6f:
7d:16:f1:96:67:f6:bb:9f:ba:2d:95:1c:17:09:a4:
8f:13:8b:79:bd:44:dd:9f:55:be:f1:e9:32:c8:a2:
7f:88:1a:08:de:78:c7:00:99:0f:d4:df:54:36:f9:
6d:e4:f7:8b:f0:94:38:63:af:36:7b:02:e2:8b:6c:
3b:41:c7:1d:2e:d4:7c:d7:08:f0:09:1c:60:4d:99:
f4:c7:69:24:4f:72:bd:bd:d3:13:65:e3:33:ec:31:
32:80:9e:06:8b:5b:0e:bd:42:3e:4a:e5:95:00:7f:
b9:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:41:87:4D:3C:C4:EF:9F:B7:08:E5:E9:3D:C9:A8:C6:79:0F:8A:2A
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/gUGHTTzE75-3COXpPcmoxnkPiio.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
54:c0:d8:ec:e4:3f:cf:01:89:c7:66:74:77:06:bf:f1:7a:e7:
a4:e8:f1:6f:dd:9b:72:bd:76:84:9d:d9:ef:fa:61:b3:51:fe:
05:84:8a:40:9d:b1:11:e7:56:16:41:5f:93:dd:d0:4a:8e:b4:
07:f8:1b:5d:96:91:13:6d:2e:1f:41:25:87:2f:60:18:20:19:
cb:be:69:ac:12:61:6c:b2:30:32:50:b9:e9:cb:26:99:32:6f:
6c:e6:28:51:a8:93:36:1d:4c:77:ea:0b:34:fd:6c:bf:82:1d:
8c:cc:9c:96:8a:0c:d9:56:52:5f:d2:f1:30:69:a5:64:5b:6c:
84:3d:d5:17:1b:ce:b2:4b:d8:ea:2e:a9:20:1f:73:a4:f5:05:
c1:89:54:0e:f7:98:98:22:04:94:b0:74:52:bb:cd:c7:7b:eb:
d8:84:5a:67:4a:56:60:85:bb:09:d7:96:dd:1b:bd:de:97:fb:
d7:17:9c:41:54:3a:80:89:da:06:14:57:df:8e:c9:e9:e3:c2:
fc:3b:7b:67:9c:98:ae:e1:80:d6:19:75:83:1c:4c:36:86:62:
df:8f:88:06:47:da:1c:5d:d5:de:3a:32:d9:05:25:57:d3:d0:
64:9a:84:1b:e8:5a:f5:34:53:b4:f4:e4:5e:5c:06:ed:96:34:
aa:68:b9:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 20:20:17 2025 by rpki-client