Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/GLR-7BmZvmRNf_NLint4-_ZYhvY.roa
File: GLR-7BmZvmRNf_NLint4-_ZYhvY.roa (raw, json)
Hash identifier: JyVuOn1/wkkJmyufeNqAfY9Cd3r+QHbRgfG10mJOYko=
Subject key identifier: 18:B4:7E:EC:19:99:BE:64:4D:7F:F3:4B:8A:7B:78:FB:F6:58:86:F6
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0187088FFE8F0309558C7176039BE361F52B
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/GLR-7BmZvmRNf_NLint4-_ZYhvY.roa
Signing time: Wed 22 Mar 2023 09:04:27 +0000
ROA not before: Wed 22 Mar 2023 09:04:27 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:187:88f:f18a/128 maxlen: 128
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:08:8f:fe:8f:03:09:55:8c:71:76:03:9b:e3:61:f5:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Mar 22 09:04:27 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=18b47eec1999be644d7ff34b8a7b78fbf65886f6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:6b:f6:9c:98:99:bc:ab:df:21:72:8b:10:b3:
2a:f9:5d:bd:f1:9f:5b:75:a5:5b:af:7d:bd:71:83:
07:46:42:33:26:16:12:21:ee:4b:e5:ac:45:f7:9d:
dd:96:95:b7:10:31:3e:4c:d1:d3:ca:be:71:0b:2b:
02:a1:12:4f:5c:54:c5:38:d4:87:de:f2:cf:4a:f9:
91:aa:10:b1:d4:1b:3d:37:45:53:58:e4:94:cb:26:
d5:6e:dd:11:ea:f9:a5:18:2d:cf:ef:58:0b:4e:44:
3b:67:db:fe:9f:0b:0e:c7:36:e0:1b:64:bc:46:75:
d9:90:06:83:2c:2b:62:35:18:80:2c:1f:5d:10:97:
99:b7:05:2a:c9:43:ea:da:22:37:61:a6:6c:37:e4:
71:1f:14:c1:75:9e:7c:eb:03:8f:0a:69:5d:33:b9:
46:45:9b:d3:6e:0b:86:1c:44:27:54:be:26:bc:08:
64:76:75:c1:76:8c:d7:be:4d:b0:2d:e4:f0:6c:6d:
11:75:06:0f:bb:a8:e0:88:fa:83:30:88:b3:66:fd:
45:a8:9d:e3:7b:88:ed:cb:fd:9a:53:4a:21:5e:51:
73:35:0d:0f:87:db:b1:73:7c:81:84:1b:5b:e5:fb:
0a:93:1f:29:31:95:f1:95:fd:06:f9:ad:0b:5c:99:
dd:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:B4:7E:EC:19:99:BE:64:4D:7F:F3:4B:8A:7B:78:FB:F6:58:86:F6
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/GLR-7BmZvmRNf_NLint4-_ZYhvY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
27:37:41:fe:05:d3:97:67:e6:e9:2a:ab:eb:10:3b:a5:06:06:
01:90:b2:97:d6:9c:94:92:88:4a:ce:51:d4:1d:c5:dd:d5:45:
c7:23:5d:dc:3b:8b:99:22:81:08:eb:63:f9:98:3a:bb:0d:6f:
72:29:5d:6a:9f:ed:10:ce:e3:08:f6:88:1c:a3:27:a7:8e:92:
c6:28:06:f3:38:67:fd:0a:50:d9:af:52:82:3c:52:41:a3:c6:
14:aa:2d:4f:6b:2b:e8:14:5e:34:1d:6a:df:05:74:64:f9:a3:
61:a9:04:0f:da:35:4b:cb:71:b1:b9:44:b4:a0:dc:3a:97:e4:
aa:49:66:0e:0e:56:e6:74:77:89:a5:e0:d4:59:0f:ef:c2:d2:
da:93:8c:62:20:06:4b:c6:35:a0:f5:c6:23:39:2d:54:b4:15:
ca:17:2c:7f:f3:62:de:e3:73:53:b7:ca:96:aa:e0:81:4c:43:
7c:d2:4f:e8:6e:bd:ae:71:1d:f4:31:b9:77:66:60:19:3f:40:
d3:29:4b:06:cd:0f:f0:6e:8e:02:0a:61:92:f7:c5:0b:f1:6f:
51:a1:e9:1a:97:bb:43:a0:58:71:f4:4e:ec:40:fc:ca:38:f6:
07:b0:af:d3:38:20:b2:21:6c:1b:3b:cb:9d:cd:fb:5a:e3:28:
85:43:46:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 00:11:04 2025 by rpki-client