Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/glcWqCHu8oAh_9TnR838mGmAH1M.roa
File: glcWqCHu8oAh_9TnR838mGmAH1M.roa (raw, json)
Hash identifier: mJLUxssdq/mGDiyhujqMXMym13a4VFO+NQ7cdC6qRxM=
Subject key identifier: 82:57:16:A8:21:EE:F2:80:21:FF:D4:E7:47:CD:FC:98:69:80:1F:53
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0184E6ED9506F1FE432BC8F692C059329599
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/glcWqCHu8oAh_9TnR838mGmAH1M.roa
Signing time: Tue 06 Dec 2022 10:14:00 +0000
ROA not before: Tue 06 Dec 2022 10:14:00 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:e6:ed:95:06:f1:fe:43:2b:c8:f6:92:c0:59:32:95:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Dec 6 10:14:00 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=825716a821eef28021ffd4e747cdfc9869801f53
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:b9:2e:19:2d:87:00:0e:36:88:4d:c7:c2:be:
83:48:3c:a4:a5:d7:31:e9:ef:f0:f8:bd:11:fd:77:
b2:89:c2:d6:67:e5:b0:a3:b3:41:8b:a4:ff:c7:fa:
19:df:7b:6e:6f:15:78:3f:6b:8c:d6:3e:f7:68:57:
ca:36:6e:c5:1f:a8:2b:1c:5a:9e:f6:de:8d:7f:19:
4f:b8:74:f2:c1:87:01:10:3e:51:a3:56:fe:09:23:
29:f2:88:6c:52:66:3a:c0:4f:34:10:b5:82:c5:31:
52:51:99:75:ac:69:8c:1f:21:a7:20:94:ea:f0:61:
0b:cc:57:23:8e:1a:ff:5e:09:fa:64:a7:0f:a5:8c:
34:86:ad:7d:e9:bf:e5:04:75:ce:3c:0c:55:b5:9f:
54:53:de:e6:2f:67:91:78:36:ab:50:45:30:11:45:
2a:30:99:cc:71:02:2a:8a:59:ad:92:a2:66:2c:3b:
05:e2:0a:b0:db:a9:8f:5e:86:86:61:fa:3e:82:86:
30:42:63:18:06:6b:db:6e:a1:48:56:fe:9a:88:e8:
65:49:1c:48:6c:41:b3:62:15:ab:a1:43:bf:04:17:
c6:9f:9d:0f:9c:cc:5e:1c:fa:ae:3a:ae:bc:d1:f8:
25:ce:39:0a:7b:d6:ae:2d:76:36:75:b3:38:8c:24:
4d:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:57:16:A8:21:EE:F2:80:21:FF:D4:E7:47:CD:FC:98:69:80:1F:53
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/glcWqCHu8oAh_9TnR838mGmAH1M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
1a:0f:dc:16:3a:3e:0a:40:28:0c:66:dd:05:9c:53:f9:c3:13:
b7:54:bb:8f:90:88:99:84:79:24:2c:bc:f5:ec:70:3c:be:67:
1e:28:ae:b6:20:b4:37:56:51:57:20:a3:84:92:31:70:95:48:
0b:21:e1:8f:dc:cd:d8:ca:87:9e:f5:d1:46:df:33:35:2c:fd:
67:d1:e4:1a:70:00:b5:8d:95:15:5c:ea:26:b8:9d:d7:da:b8:
84:06:dd:05:67:80:fe:21:ad:1d:87:c8:b7:da:0f:d0:c4:85:
db:6f:97:5a:ea:11:91:95:46:e5:16:6f:fc:a5:19:a9:20:a8:
ed:41:84:c2:c2:65:cf:8b:8f:e9:5a:8e:ac:cd:8c:05:f1:9b:
88:86:ec:16:6a:bb:4b:84:e7:5f:00:ee:0f:f9:11:0f:83:eb:
53:ee:c2:01:9b:a0:f8:13:18:b4:1b:7b:87:91:03:ec:b4:78:
b7:72:b8:8b:e0:85:44:f1:0b:de:80:91:9d:41:0e:2e:39:b8:
4e:51:b1:2d:ee:3b:9c:06:aa:b1:01:08:72:a0:84:00:8e:7c:
89:0e:ec:b1:fb:d1:0f:93:a2:81:51:be:46:02:e1:bd:78:ec:
a0:d9:58:79:c9:7b:03:e2:43:02:2c:1a:e3:df:b1:63:65:6f:
3c:8c:41:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 3 05:06:16 2025 by rpki-client