Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/GuuIIkKaDZ01FWPc_mQaIqPgrQQ.roa
File: GuuIIkKaDZ01FWPc_mQaIqPgrQQ.roa (raw, json)
Hash identifier: PkjC45uyJGiSoxpzH7wPy2t58Zdqh6s7OJ19iYR77a4=
Subject key identifier: 1A:EB:88:22:42:9A:0D:9D:35:15:63:DC:FE:64:1A:22:A3:E0:AD:04
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 7B10D937
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/GuuIIkKaDZ01FWPc_mQaIqPgrQQ.roa
Signing time: Wed 13 Apr 2022 23:09:14 +0000
ROA not before: Wed 13 Apr 2022 23:09:14 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:180:457:1e3f/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2064701751 (0x7b10d937)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Apr 13 23:09:14 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=1aeb8822429a0d9d351563dcfe641a22a3e0ad04
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:22:8d:ab:c7:1c:f2:d6:5f:54:6c:b3:4a:2d:
14:ee:2b:6f:be:17:67:47:ae:3b:06:58:d3:d7:65:
98:ab:3f:28:18:c5:9a:01:12:17:1f:ce:59:21:a9:
61:08:da:81:56:77:00:d3:02:fd:a7:52:4f:0d:d2:
84:84:dc:f5:c3:0d:c8:12:0b:8c:fc:ee:ef:82:ad:
42:86:7e:c1:c2:aa:da:36:6a:d4:65:50:f6:eb:fc:
fb:8a:15:47:83:2b:71:ee:56:fc:70:1e:da:03:f4:
45:67:f8:11:85:81:a4:33:16:d0:01:b0:9f:52:41:
7b:30:53:5a:ac:43:f8:fc:2d:a9:a9:5e:59:7e:16:
29:b7:e0:7c:8d:a8:4a:81:e7:c7:4e:e3:43:17:08:
e7:2e:59:c7:78:e7:2d:73:7c:f2:d2:e0:b5:86:61:
5d:28:be:9e:cd:c3:ec:8d:ae:e6:c4:69:f8:05:75:
92:ee:30:94:fd:97:f6:ec:d4:9a:78:94:62:81:b2:
4c:11:35:3b:8f:c7:cb:6d:a7:58:69:9e:73:11:dc:
4f:70:81:cb:be:e2:43:c7:2d:44:10:aa:d0:41:c3:
28:b8:6e:fc:e5:9d:e6:9f:b0:17:71:43:af:df:3e:
2e:10:a1:10:4e:23:82:15:76:fb:0e:49:37:e7:f7:
c5:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:EB:88:22:42:9A:0D:9D:35:15:63:DC:FE:64:1A:22:A3:E0:AD:04
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/GuuIIkKaDZ01FWPc_mQaIqPgrQQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
58:aa:e4:6d:49:1a:c6:75:6f:5f:59:23:5c:0e:5c:43:30:3f:
12:9b:8b:36:5d:b2:db:8c:97:8f:a9:80:47:e1:74:0a:e8:f3:
ae:07:db:1b:6e:54:ed:9f:5a:97:2a:f2:29:2b:8f:8b:fa:bd:
83:7c:b7:e1:42:f0:6a:00:c6:f6:8b:51:15:80:41:6c:eb:e1:
c9:e3:1d:2c:a6:fe:88:5a:fe:94:70:c4:8a:94:d3:f3:bd:2f:
2a:d4:a2:ed:8b:31:af:c7:1a:1c:0c:92:d6:25:66:52:fc:07:
47:a9:3a:81:ed:1d:dc:80:3b:1b:95:15:3c:43:97:87:d9:e5:
1b:6d:62:61:ac:e5:25:a1:fd:8b:ea:f0:af:41:8b:4a:8d:23:
cd:6c:bb:76:af:b7:6c:ce:19:b7:dc:e1:15:92:bd:96:f9:d2:
fb:7e:fd:87:45:b2:63:d8:fd:2e:5f:fd:4c:97:f8:83:01:51:
74:54:7c:d8:4d:a7:05:72:14:8c:26:b7:60:25:cc:28:a3:d3:
18:46:24:d8:89:97:94:c5:86:64:7b:e0:ab:41:f7:9e:51:99:
61:a0:d1:50:47:fc:f9:ec:9b:9f:e9:91:59:77:09:f4:ff:7e:
97:78:26:28:5c:5a:5f:b8:f7:00:28:20:c9:53:b5:2a:57:7d:
2e:86:a8:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 02:43:28 2025 by rpki-client