Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/Gyl_XDupCkmchN6ezGJnTekLl-M.roa
File: Gyl_XDupCkmchN6ezGJnTekLl-M.roa (raw, json)
Hash identifier: b8injbYYdJ1CNGL9yvZGFFilbd/7+H6fpe1bR2dPucc=
Subject key identifier: 1B:29:7F:5C:3B:A9:0A:49:9C:84:DE:9E:CC:62:67:4D:E9:0B:97:E3
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0186B3359CE61E6206F755FED02C83EA062A
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/Gyl_XDupCkmchN6ezGJnTekLl-M.roa
Signing time: Sun 05 Mar 2023 19:18:00 +0000
ROA not before: Sun 05 Mar 2023 19:18:00 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:b3:35:9c:e6:1e:62:06:f7:55:fe:d0:2c:83:ea:06:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Mar 5 19:18:00 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=1b297f5c3ba90a499c84de9ecc62674de90b97e3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:36:db:42:86:9a:8e:0c:05:3a:fb:dd:e1:59:
04:3f:e7:92:3b:06:66:5f:2b:0c:e7:02:c7:a1:b8:
f1:b1:f4:52:14:32:7c:bc:bf:86:96:66:c1:1b:59:
79:7f:7d:d7:82:71:27:4a:43:b8:ca:3b:ce:c7:8b:
76:74:87:b6:69:64:c4:d7:65:b1:23:db:9c:bb:7c:
26:16:2a:59:95:16:b6:3c:ff:62:55:90:fa:68:39:
21:43:aa:48:66:04:35:25:40:fa:fb:67:0d:81:61:
34:45:d3:29:77:c4:36:9b:9b:ed:58:df:36:05:76:
b4:59:19:28:88:e9:75:2b:52:50:87:6e:fa:4a:23:
21:53:8d:6f:d2:40:7e:4f:a8:58:62:3b:ae:ac:ec:
ad:68:75:23:21:21:de:29:ef:9b:ff:0f:94:71:58:
55:8c:9f:08:ae:35:d6:eb:d5:04:1e:4b:8e:4a:2a:
eb:ea:5d:0d:c8:e5:1e:67:19:81:0d:f0:b0:1e:5e:
2d:d0:74:57:92:a0:8d:9a:80:04:d5:d3:66:6c:f4:
69:20:4e:f2:e0:9a:11:9f:68:bc:dd:a2:da:3e:6a:
ef:40:e3:b0:b8:57:30:22:0b:9a:7f:39:8d:cf:02:
60:e1:10:d9:03:54:51:6b:c0:31:37:e5:2f:e3:c7:
5e:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:29:7F:5C:3B:A9:0A:49:9C:84:DE:9E:CC:62:67:4D:E9:0B:97:E3
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/Gyl_XDupCkmchN6ezGJnTekLl-M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
3a:26:69:3a:12:0b:47:be:66:7e:fa:5f:c3:f3:43:3e:36:3e:
e6:72:d0:17:b9:05:7e:0f:58:09:a0:51:20:d0:c0:44:30:73:
12:9f:29:33:0c:98:4c:cf:88:3e:41:a1:33:fe:2f:6d:53:d8:
0d:dd:7e:08:78:40:e4:75:70:13:fa:2d:5b:78:c8:99:3a:52:
cc:4e:34:ca:7f:dc:55:34:76:12:da:68:32:89:19:a5:6f:7d:
d8:d8:70:09:8d:da:e2:0a:b3:3c:c2:0a:9e:9c:80:94:fb:ad:
29:e4:23:b0:49:f4:42:04:54:5b:73:e6:d2:24:1f:f5:5f:6b:
1e:7a:bb:cb:7b:b6:f6:1e:05:05:68:b4:5b:a4:ac:6e:d3:9e:
8b:8d:a8:b4:ca:d5:24:23:62:d4:4c:91:53:58:2f:62:de:d7:
1b:dc:6f:20:f8:f3:ec:4c:47:34:58:6d:91:25:61:e9:12:6c:
5a:34:a7:4f:44:c8:0f:a2:f9:d2:08:5f:05:9c:d4:4f:58:7a:
a1:9c:53:3c:26:b8:a8:e2:d1:25:ab:df:b1:1e:c7:f7:ad:4c:
e2:41:57:00:a1:da:c8:62:7c:e8:27:ce:de:17:22:1f:46:38:
81:00:da:fe:4a:d7:2d:d2:3c:df:59:e4:60:79:bf:e1:6e:65:
10:fc:3a:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 00:11:34 2025 by rpki-client