Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/gpXRCzT_z0zR9boGR6F92J_-ltY.roa
File: gpXRCzT_z0zR9boGR6F92J_-ltY.roa (raw, json)
Hash identifier: N6D5M9hzbw4pMtGBcwlxgTJjByhwo+eYcYZh3kNgshk=
Subject key identifier: 82:95:D1:0B:34:FF:CF:4C:D1:F5:BA:06:47:A1:7D:D8:9F:FE:96:D6
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0187299B7F850ABD0DD4884900AE6C43BBD9
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/gpXRCzT_z0zR9boGR6F92J_-ltY.roa
Signing time: Tue 28 Mar 2023 19:04:29 +0000
ROA not before: Tue 28 Mar 2023 19:04:29 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:187:299b:559c/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:29:9b:7f:85:0a:bd:0d:d4:88:49:00:ae:6c:43:bb:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Mar 28 19:04:29 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=8295d10b34ffcf4cd1f5ba0647a17dd89ffe96d6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:79:ad:90:bf:c2:2d:b3:21:25:ab:80:0b:91:
30:db:07:01:31:76:ff:df:29:c5:6b:bf:6e:4c:72:
ca:51:25:51:a1:a5:d6:24:77:c3:f9:0f:f0:48:da:
9e:f3:d5:7c:d3:8a:15:e6:84:8f:ab:ef:3a:4d:4b:
e8:27:d0:19:5f:26:1f:94:b6:40:28:6b:82:52:c9:
31:c8:31:b0:6a:87:7c:a6:7c:49:dd:dd:48:e5:11:
fc:27:eb:54:3e:4c:1e:6e:95:9a:39:38:59:7e:b5:
85:66:d3:f3:76:a1:16:05:1d:76:23:7c:16:6d:14:
f8:52:e2:5a:6c:6f:70:b7:21:02:01:e3:a1:1d:94:
8a:94:62:80:3e:0b:e6:e6:28:59:41:9b:cf:7c:1f:
5c:89:8f:db:a2:38:95:ac:96:e0:48:ab:ea:ad:ae:
4d:0c:4d:0f:1f:5b:38:c8:4b:6e:01:fc:93:5b:e3:
c1:2f:b9:25:56:4a:d7:78:ca:35:bb:38:23:31:47:
6d:d4:4a:de:be:fb:2b:80:1b:95:69:b9:78:fb:7e:
51:c9:0d:8a:35:c2:fa:c3:93:02:b5:94:98:8a:53:
fc:52:64:7f:9e:6a:8a:8a:b0:71:d4:08:dc:83:4c:
9a:ed:a5:3c:aa:46:84:4d:5b:1f:99:67:db:71:b3:
42:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:95:D1:0B:34:FF:CF:4C:D1:F5:BA:06:47:A1:7D:D8:9F:FE:96:D6
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/gpXRCzT_z0zR9boGR6F92J_-ltY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
82:78:fd:80:5a:85:6e:b0:82:8c:76:44:5f:c5:cc:65:3f:87:
b4:0c:de:8c:f2:b3:80:30:32:4e:b2:e4:2b:d9:63:d9:0d:93:
48:71:c0:fc:68:59:d5:29:d5:8c:db:56:1c:35:31:6f:5b:02:
fd:76:11:0f:75:13:27:a7:47:4a:fd:a3:dd:f5:01:7a:a1:6f:
bc:56:85:df:2b:e4:5a:dc:b9:82:3c:01:f9:c4:36:69:2d:00:
d8:d6:e4:d0:27:a0:dc:d1:65:33:93:aa:93:06:a8:2b:ae:1c:
01:c7:1f:de:ed:1d:47:08:f8:7f:fe:24:42:5c:41:52:ae:28:
3d:58:c0:d9:c3:d9:91:69:fe:35:8d:f3:d6:12:05:9c:a5:a4:
2e:bf:48:41:04:3c:f5:80:2f:1a:02:ef:20:75:3a:5d:5a:63:
50:61:f9:df:a8:f6:54:51:e8:19:70:8f:dd:53:2c:43:c0:30:
f7:81:cb:a4:e3:06:07:46:2b:7d:dd:db:62:b1:e2:ca:83:c2:
f0:7d:f6:65:b3:53:1a:86:3e:f5:66:b9:e6:cc:81:42:de:5e:
02:aa:2c:5b:e4:be:0c:49:02:cb:c5:54:38:3a:66:8d:b0:b4:
77:b2:b6:7b:48:44:f0:9f:e0:91:2d:5e:1c:28:1f:29:9b:02:
9c:15:43:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 19:50:58 2025 by rpki-client