Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/GmCUfdiq0gn7Ztjr7ceZFxhCThQ.roa
File: GmCUfdiq0gn7Ztjr7ceZFxhCThQ.roa (raw, json)
Hash identifier: 4SsOBJEUhOzyr4box/m8ogka7fi8qDjQN6sKFN5NdD8=
Subject key identifier: 1A:60:94:7D:D8:AA:D2:09:FB:66:D8:EB:ED:C7:99:17:18:42:4E:14
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0187B7AEE9C2764708B7C92EFF14335E6D53
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/GmCUfdiq0gn7Ztjr7ceZFxhCThQ.roa
Signing time: Tue 25 Apr 2023 09:11:46 +0000
ROA not before: Tue 25 Apr 2023 09:11:46 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:187:4695:a68a/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:187:b2b8:a7dd/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:b7:ae:e9:c2:76:47:08:b7:c9:2e:ff:14:33:5e:6d:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Apr 25 09:11:46 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=1a60947dd8aad209fb66d8ebedc7991718424e14
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:2c:92:31:55:77:d3:b2:a4:c5:5d:a3:66:bd:
f5:00:78:14:aa:b3:7f:64:86:28:1b:c4:07:8a:8c:
53:22:d3:76:c1:f9:b7:1f:9c:c5:bc:cf:ad:8c:54:
f9:17:8b:79:93:b0:b3:11:25:4f:5b:56:df:88:23:
e3:88:2c:25:d4:ea:0d:0f:ef:95:2b:5f:ac:4c:a1:
29:94:26:78:aa:32:1a:2d:1c:72:00:92:ba:69:17:
d7:06:ba:a1:53:96:fa:6b:d6:f3:bb:8a:bc:23:12:
f6:81:44:67:08:5c:de:cf:d9:41:78:0c:cd:1f:36:
50:2e:c6:55:3b:17:c2:09:32:22:f1:ba:6e:8c:65:
26:70:ac:0e:e7:0e:2c:ec:97:06:82:28:cb:24:0c:
83:49:30:31:88:07:56:a5:9d:c2:b3:32:d2:66:a8:
69:8d:1e:6c:c8:dd:22:a4:b7:ca:4c:63:59:79:ad:
d9:35:8c:29:80:b5:24:17:53:21:f4:5b:2f:65:46:
ef:9b:d1:00:f9:a3:ca:63:9a:20:f9:3d:0e:d8:1d:
32:47:54:ba:6c:64:08:41:66:c0:07:70:df:87:f0:
88:46:61:3c:20:ad:42:60:ea:cf:e9:e5:e1:e0:dd:
39:c2:31:b1:99:a2:95:e5:f6:60:a7:d0:76:28:c6:
12:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:60:94:7D:D8:AA:D2:09:FB:66:D8:EB:ED:C7:99:17:18:42:4E:14
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/GmCUfdiq0gn7Ztjr7ceZFxhCThQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
40:51:49:25:89:e2:82:82:fa:86:41:47:82:ea:83:a1:17:e0:
e1:32:89:65:c3:78:37:b3:47:3f:48:06:a9:cb:d7:20:c8:a5:
b3:7d:2f:68:ff:38:0f:fd:36:b9:bd:ee:f2:07:4b:6d:68:40:
35:24:b0:f3:7e:b6:ec:f7:20:78:90:5e:61:04:bc:c7:6e:91:
87:be:a5:5f:81:51:e0:10:6b:c9:e6:12:c5:a2:c8:63:9a:c8:
32:f0:bd:2c:af:c8:5d:0a:86:15:2f:0a:e2:a0:f1:38:04:6b:
41:49:c7:41:11:ba:8a:ae:c4:05:0c:08:7c:fc:e2:be:e2:03:
58:95:24:52:64:b0:11:3c:af:97:44:4d:cc:9a:6b:73:c3:8c:
47:fb:e3:31:17:fb:2f:bd:bf:c3:5d:3b:61:36:b7:c4:7d:86:
80:0f:48:64:a2:9e:4d:df:80:eb:e6:bf:d8:9c:f7:9f:3a:2b:
63:32:9b:44:79:f8:51:12:14:71:4e:ab:16:09:a4:ce:4e:c8:
84:d8:ee:e7:fc:88:b3:b1:27:46:60:e6:b7:f3:fb:80:0e:b6:
57:60:df:1e:e9:9c:62:71:43:af:5a:e2:58:c6:98:6f:49:40:
c3:e0:7a:af:5c:82:2f:4f:6d:38:2d:19:a2:a7:b0:9d:a4:f7:
16:16:f8:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 21:35:17 2025 by rpki-client