Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/GlNnuhNx-iuU6TaGygxu-7enV4U.roa
File: GlNnuhNx-iuU6TaGygxu-7enV4U.roa (raw, json)
Hash identifier: s7KzgLt/HkQlB+RWLu3BcQdvSzvqSnHR44QaZkdzsL4=
Subject key identifier: 1A:53:67:BA:13:71:FA:2B:94:E9:36:86:CA:0C:6E:FB:B7:A7:57:85
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0185D5189B4100AAF79E0BC97794A8F5D060
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/GlNnuhNx-iuU6TaGygxu-7enV4U.roa
Signing time: Sat 21 Jan 2023 16:10:37 +0000
ROA not before: Sat 21 Jan 2023 16:10:37 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:d5:18:9b:41:00:aa:f7:9e:0b:c9:77:94:a8:f5:d0:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Jan 21 16:10:37 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=1a5367ba1371fa2b94e93686ca0c6efbb7a75785
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:70:5e:e6:df:2d:6b:d7:fd:e5:24:bd:28:91:
b9:dc:5b:82:c3:13:30:c4:ae:c3:3a:5e:75:8c:73:
67:51:db:b3:ff:fd:72:39:ad:02:22:f9:2b:a3:29:
c7:41:dc:5b:e7:e4:bb:c2:ed:4f:83:ca:9b:d9:95:
fe:cb:af:e7:5d:ee:44:11:33:3a:da:b8:02:25:a9:
c2:fe:25:df:3f:e5:a7:b3:65:b6:19:19:78:42:57:
c4:ac:16:ee:c4:23:2f:9d:d7:fc:fd:d0:b1:14:ec:
e3:71:b6:5b:ce:60:29:c1:08:5e:c8:bc:5b:1f:18:
86:cd:7c:bb:34:42:76:7e:e2:2d:18:13:3b:a1:48:
71:96:7d:df:f5:9e:88:35:9a:36:19:f1:fa:d9:07:
bc:c9:d5:ae:9d:d0:c6:cb:f3:41:60:71:08:fa:a6:
cd:7a:f8:1f:33:d5:81:bb:20:5c:9b:6b:fe:eb:0c:
3b:14:ab:58:f9:91:15:08:0a:dc:5d:77:25:a8:d4:
00:35:2a:5d:56:d1:ea:71:04:d4:34:ec:48:ac:10:
04:a5:b7:95:16:15:59:13:71:91:c0:10:b2:56:ce:
1b:aa:8c:8e:bc:fe:5b:3c:a7:f5:98:c3:d9:d8:14:
51:58:e8:f0:5e:4b:af:ad:27:03:f7:dc:3e:1c:43:
07:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:53:67:BA:13:71:FA:2B:94:E9:36:86:CA:0C:6E:FB:B7:A7:57:85
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/GlNnuhNx-iuU6TaGygxu-7enV4U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
89:4a:c8:39:a3:ce:29:92:21:1e:c1:80:e2:36:9f:71:5d:f6:
d7:46:08:83:62:d0:0f:0c:b2:8f:0c:67:76:87:a6:df:e4:71:
e4:3a:4c:e1:31:aa:70:14:90:f4:bc:68:06:7b:0b:6f:7b:6f:
ff:b3:ae:42:40:cc:21:56:15:a7:a1:e6:98:56:34:68:a5:e2:
c9:8e:e3:d3:ec:40:13:63:39:c9:8b:a4:65:45:4d:90:5f:bf:
99:00:34:0c:5a:0b:16:d8:83:fe:cc:04:b4:95:b4:aa:1d:d4:
bb:21:43:15:3e:5f:b6:6b:32:17:87:d6:9f:9a:ab:aa:25:46:
e7:dc:c6:07:65:46:40:97:9b:08:d1:c8:56:a5:0a:a9:b3:fc:
6a:cf:9d:49:88:1f:4c:3a:a5:45:84:a2:86:fb:72:70:89:56:
72:46:01:00:38:4e:77:96:58:58:ea:99:9f:db:7f:32:19:8e:
9a:5b:ec:11:50:c5:4f:57:8f:26:30:f6:a8:45:a8:14:d8:63:
73:59:2b:0f:bc:4a:5b:33:ad:14:99:17:c1:1f:9d:df:24:16:
17:c6:c0:9f:38:28:4f:40:4b:1e:cd:d6:bb:c6:00:ea:6b:12:
13:9b:78:a7:e8:80:2c:ae:af:2d:ce:aa:a0:92:42:f3:ab:dd:
7b:af:2c:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 12 04:51:04 2025 by rpki-client