Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/91/b90cd1-cab6-4959-9fd2-2b6e2b1d6ba5/1/glR7-MN52dJZ_kuhHap4x9ka8II.roa
File: glR7-MN52dJZ_kuhHap4x9ka8II.roa (raw, json)
Hash identifier: cmhtRdXA6LwbOg68J/Oyc/ogIcU7jbopow91atE2ths=
Subject key identifier: 82:54:7B:F8:C3:79:D9:D2:59:FE:4B:A1:1D:AA:78:C7:D9:1A:F0:82
Certificate issuer: /CN=99530e14e8ed8fbc7ab4a9399c5ae2f19ee9f803
Certificate serial: E6AB00
Authority key identifier: 99:53:0E:14:E8:ED:8F:BC:7A:B4:A9:39:9C:5A:E2:F1:9E:E9:F8:03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mVMOFOjtj7x6tKk5nFri8Z7p-AM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/91/b90cd1-cab6-4959-9fd2-2b6e2b1d6ba5/1/glR7-MN52dJZ_kuhHap4x9ka8II.roa
Signing time: Sat 01 Jan 2022 08:04:42 +0000
ROA not before: Sat 01 Jan 2022 08:04:42 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 7029
IP address blocks: 193.162.133.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 15117056 (0xe6ab00)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=99530e14e8ed8fbc7ab4a9399c5ae2f19ee9f803
Validity
Not Before: Jan 1 08:04:42 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=82547bf8c379d9d259fe4ba11daa78c7d91af082
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:ec:c9:b9:4f:71:b5:b5:5c:ed:1c:d8:e3:be:
04:2d:83:6a:e4:e8:ee:d1:a3:1f:ef:ac:82:f2:5d:
54:ec:be:9b:5e:e5:b3:6f:bc:ad:95:ed:05:19:c7:
ed:68:d2:d6:bb:c7:54:7c:9c:0e:b7:a4:e7:cd:eb:
47:a7:05:64:19:8f:cc:d5:af:0a:42:0a:d9:35:52:
e3:94:f2:98:8b:8b:6f:78:66:e6:7e:dd:f7:da:45:
4f:ab:54:f0:0f:6a:b1:7d:8e:05:26:d3:75:e5:cd:
e9:26:9b:91:7b:61:19:8f:68:0c:bd:77:d0:1d:ed:
3b:e6:fb:c9:7e:b5:ae:be:e9:52:ee:cf:9f:72:71:
99:97:d4:dd:43:1d:b9:39:51:f2:ab:30:6a:74:db:
e6:ef:c1:e8:c3:39:09:7f:ac:af:b4:9d:44:dc:01:
c0:cd:64:92:5c:31:e2:33:d4:27:91:10:6c:48:58:
60:08:69:86:c2:41:f1:1e:6c:3d:1c:23:37:1c:c6:
29:f6:4b:ca:b4:44:94:ba:41:6e:f9:fd:2e:48:96:
ef:c3:7f:c0:16:f7:bc:35:8d:88:84:29:81:1a:80:
66:85:fc:0b:8b:fa:85:2e:2f:5b:60:ae:50:19:d1:
74:4e:e3:27:67:b8:06:cc:1a:23:04:4a:9c:85:f6:
15:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:54:7B:F8:C3:79:D9:D2:59:FE:4B:A1:1D:AA:78:C7:D9:1A:F0:82
X509v3 Authority Key Identifier:
keyid:99:53:0E:14:E8:ED:8F:BC:7A:B4:A9:39:9C:5A:E2:F1:9E:E9:F8:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mVMOFOjtj7x6tKk5nFri8Z7p-AM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/b90cd1-cab6-4959-9fd2-2b6e2b1d6ba5/1/glR7-MN52dJZ_kuhHap4x9ka8II.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/91/b90cd1-cab6-4959-9fd2-2b6e2b1d6ba5/1/mVMOFOjtj7x6tKk5nFri8Z7p-AM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.162.133.0/24
Signature Algorithm: sha256WithRSAEncryption
0e:99:81:9f:ca:0c:25:d1:52:ad:18:0d:4e:2b:28:4d:8f:0c:
f3:23:cb:48:a0:de:ba:e0:a9:8b:58:f7:72:24:2b:59:a3:34:
38:9b:08:80:87:5f:95:f4:1a:1f:53:ec:17:63:3f:6f:b5:4b:
19:99:7c:82:a0:ca:ff:62:36:2a:06:e4:7e:3d:ea:aa:19:9a:
18:7c:d8:7b:2a:0a:90:70:0a:23:9a:a4:63:ea:ba:28:cc:73:
08:da:fb:7c:7c:a8:62:38:3f:9d:67:18:a2:9f:e2:25:dc:12:
4e:a9:dc:d6:eb:17:12:93:21:53:5d:90:de:46:9e:f2:aa:51:
f2:8e:80:f8:12:cb:22:78:7d:50:8e:7c:d4:9b:78:97:f9:25:
11:de:a3:1c:ce:8d:67:a3:0b:76:c6:44:9b:b8:17:0f:bb:23:
71:c6:b8:32:77:4b:05:29:af:4d:f1:4d:76:ad:f7:7b:58:34:
7f:f1:6f:16:0f:74:df:34:62:ad:94:56:93:cc:9b:c8:4a:8b:
f3:24:e1:43:53:73:47:1c:4f:3f:64:9b:bb:2f:f2:b9:3f:c6:
a3:54:03:5b:47:73:a5:aa:70:1d:6e:61:58:81:16:79:b1:14:
a7:14:6c:99:03:3b:4e:e7:8a:e2:fb:be:18:34:90:79:03:e1:
5a:7e:95:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 18:25:01 2025 by rpki-client