Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/gtScauYa_vkY-xWVv2Olqg58zVs.roa
File: gtScauYa_vkY-xWVv2Olqg58zVs.roa (raw, json)
Hash identifier: rJHpcdmcgaOjBp2lFOxBzxpzS8F/eiRakvxy8JXf9L8=
Subject key identifier: 82:D4:9C:6A:E6:1A:FE:F9:18:FB:15:95:BF:63:A5:AA:0E:7C:CD:5B
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 018A0DEEBDFAD039BD0C5086B5BEA4C8C38F
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/gtScauYa_vkY-xWVv2Olqg58zVs.roa
Signing time: Sat 19 Aug 2023 13:14:24 +0000
ROA not before: Sat 19 Aug 2023 13:14:24 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:188:7858:a003/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:189:a0e4:5c7d/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:0d:ee:bd:fa:d0:39:bd:0c:50:86:b5:be:a4:c8:c3:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Aug 19 13:14:24 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=82d49c6ae61afef918fb1595bf63a5aa0e7ccd5b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:a9:06:51:98:db:c2:6e:29:10:7f:48:3c:50:
80:d7:67:86:75:ff:2a:57:eb:f2:21:db:95:92:76:
e6:3b:f4:8a:69:c7:5f:2b:1f:33:9f:dc:96:e6:b4:
1a:d6:6d:e2:11:01:a9:e5:46:df:a4:ae:92:da:2b:
52:a6:b8:21:44:f9:08:88:4f:2f:cb:80:9a:79:c6:
d8:6d:27:89:21:99:d4:ff:c7:22:50:3c:37:03:48:
fe:3a:11:57:c1:e0:97:14:76:93:23:f5:c7:ae:69:
e0:d2:bf:ba:45:07:22:47:b1:78:b5:0c:30:e6:b8:
18:2f:c1:f8:a0:55:1b:a2:1c:0f:c8:be:1f:c8:2d:
e5:1f:bd:61:db:4b:a5:ae:cd:a9:4d:65:56:13:a3:
68:9b:5c:b1:00:26:43:43:ae:81:9b:90:b0:70:09:
4e:13:0d:ca:3b:e2:85:dc:51:8d:c4:e6:24:1b:42:
77:5e:ff:0e:e4:2b:4d:ea:f7:b0:8a:56:1e:b3:13:
bc:1f:d1:21:47:5b:b6:54:90:c7:37:b9:9c:cb:80:
2a:8b:c8:86:df:9d:a4:49:22:82:ba:c2:ce:82:c5:
95:36:bd:b6:a4:f8:7a:61:04:2d:af:98:d8:fa:ee:
f6:10:85:62:5a:de:71:43:8a:d1:8e:76:ec:43:68:
3f:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:D4:9C:6A:E6:1A:FE:F9:18:FB:15:95:BF:63:A5:AA:0E:7C:CD:5B
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/gtScauYa_vkY-xWVv2Olqg58zVs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
51:2d:fe:a8:8b:36:52:9b:eb:ee:1d:34:45:66:12:82:b0:0c:
b9:91:22:9d:4d:ea:6f:41:83:ed:f0:e8:a2:4a:8e:5d:67:86:
c5:3b:32:60:9b:9d:22:71:4f:fe:25:a1:9a:4d:87:cc:84:ea:
ae:a1:7f:07:aa:2e:d4:ba:18:4c:48:0b:81:44:c6:85:6c:b3:
37:aa:be:fb:c9:4d:73:7d:ac:3b:7c:79:b1:42:27:f4:b6:40:
5a:e4:a7:13:5f:ca:af:ef:2c:58:a9:f3:3b:a5:12:84:6e:6c:
2e:fd:bf:5e:59:6d:38:4b:91:93:2c:79:eb:7f:4f:dd:8b:6c:
9e:31:ea:ab:c1:f9:23:eb:20:fa:b3:95:b0:bd:26:3f:ad:2c:
5e:a9:fe:d7:fe:a6:2d:c1:c0:bb:11:14:3e:d3:19:d4:09:fe:
7e:14:73:13:2a:d3:b1:fc:52:a5:c7:a0:c2:7a:f0:36:f7:ee:
1f:2f:44:42:76:a4:2d:f4:c7:94:91:de:3a:72:fb:9d:83:19:
f9:6c:88:e8:62:c4:87:80:e0:ee:70:d1:8a:fc:72:89:63:b6:
3c:70:82:de:0d:1c:ed:f6:78:ec:ad:6b:54:ff:dd:ce:c6:66:
28:7a:16:97:ec:16:4c:04:7a:76:c9:26:9a:ac:ea:df:f3:94:
69:8c:de:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 02:33:55 2025 by rpki-client