Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/gmbzzGnvYp1ZWiAiQIJhW7NCgGo.roa
File: gmbzzGnvYp1ZWiAiQIJhW7NCgGo.roa (raw, json)
Hash identifier: CC76oM7JMA4zAn/EMg9X8r/3DW030mzHg3aUd85ht6c=
Subject key identifier: 82:66:F3:CC:69:EF:62:9D:59:5A:20:22:40:82:61:5B:B3:42:80:6A
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 018A24780535C2A643F6CB11691B6A1F9CC2
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/gmbzzGnvYp1ZWiAiQIJhW7NCgGo.roa
Signing time: Wed 23 Aug 2023 22:16:00 +0000
ROA not before: Wed 23 Aug 2023 22:16:00 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:188:7858:a003/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18a:178d:7ed9/128 maxlen: 128
2001:67c:64:ffff:0:189:a0e4:5c7d/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:24:78:05:35:c2:a6:43:f6:cb:11:69:1b:6a:1f:9c:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Aug 23 22:16:00 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=8266f3cc69ef629d595a20224082615bb342806a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:d7:2c:09:2f:0e:94:d2:62:34:21:fc:c8:63:
b6:fc:83:1b:3f:12:e9:40:69:4c:31:4d:99:61:d4:
b1:1f:00:39:b2:b5:79:a2:f0:0c:24:2a:cd:99:7d:
53:b0:a3:48:1b:73:6f:e8:0b:5f:88:c0:9e:4a:c5:
57:b9:d8:2f:75:24:4b:47:14:d9:52:bb:a3:dc:c5:
c4:30:b3:c5:8c:e4:f4:eb:30:78:c3:ab:b0:c9:a3:
3b:9c:a0:84:25:31:57:98:4a:8a:9a:d3:ec:48:79:
8d:45:5c:58:95:7b:e4:e4:ec:29:85:5c:06:64:a9:
a2:27:52:ca:09:54:75:40:51:e0:54:a9:e3:76:20:
e8:c6:f7:74:8c:3a:82:0a:2c:b9:29:0d:e2:75:8e:
26:eb:3b:cd:b7:ef:2c:db:c3:a4:9e:e9:52:d4:cb:
b3:5c:fe:e0:59:31:dc:0e:0c:90:a0:ff:c7:ee:78:
fa:2c:f0:e2:03:97:69:fa:7b:9d:7a:5d:7d:b4:a6:
a8:37:a5:08:45:f1:35:6d:1b:a2:38:a6:ba:15:be:
03:e6:ee:19:29:51:b6:b4:8e:65:52:25:0e:42:4d:
a8:30:3f:e3:57:08:4f:91:a2:7b:b8:e1:ea:e8:fa:
2b:02:16:41:b1:08:45:39:29:79:2e:a0:02:b6:b6:
f9:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:66:F3:CC:69:EF:62:9D:59:5A:20:22:40:82:61:5B:B3:42:80:6A
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/gmbzzGnvYp1ZWiAiQIJhW7NCgGo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
9d:a1:12:a7:37:8a:77:18:b7:5c:1e:e9:1c:27:99:be:31:44:
3c:ca:e4:39:ad:c0:e4:6d:59:86:e2:ba:61:51:45:b3:f1:6c:
b2:5a:11:5b:67:2d:e0:cc:26:ae:7e:1e:38:f9:3b:30:73:13:
26:53:9e:21:65:42:35:87:2e:33:87:c7:6e:1f:f2:5b:92:25:
b8:bc:de:33:8d:48:28:c6:49:f2:e2:10:8b:3e:0f:a8:c5:f6:
93:71:78:74:81:e4:2c:3c:5e:e5:b3:a6:19:ac:6e:51:20:20:
b7:e8:43:21:a0:01:49:45:de:d0:63:76:4e:64:3f:8b:7b:24:
7c:fa:a2:d0:af:b9:5d:10:7d:43:17:4d:56:c9:ef:93:0a:ae:
5b:a9:fa:2a:3a:f6:ab:3b:bf:00:1a:0b:e2:f2:21:8d:b5:b1:
74:ce:28:62:37:be:36:30:cd:f1:a8:61:5f:78:c8:19:01:f7:
bf:73:d7:22:7f:a8:7b:31:8b:ee:39:b1:8f:48:29:ec:bf:04:
7d:bb:a9:94:12:46:06:05:80:a8:8f:cb:af:7a:ca:b7:61:6f:
b8:0b:72:42:0f:bf:d6:e4:d9:a1:f6:04:b6:df:f3:29:5b:e0:
6e:02:d0:18:31:82:be:3b:3b:26:c7:b7:11:1e:03:86:ac:e5:
f0:63:a0:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 2 15:42:54 2025 by rpki-client