Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/gLex_rLipUo6eqCbzEr-WdmnU8k.roa
File: gLex_rLipUo6eqCbzEr-WdmnU8k.roa (raw, json)
Hash identifier: nquArnIN1tdenuuEziPcYzVbP7GFwV8HEH0z3ozPJCA=
Subject key identifier: 80:B7:B1:FE:B2:E2:A5:4A:3A:7A:A0:9B:CC:4A:FE:59:D9:A7:53:C9
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 01895641ABD2862AA596A28C228E4A3FDC88
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/gLex_rLipUo6eqCbzEr-WdmnU8k.roa
Signing time: Fri 14 Jul 2023 21:14:51 +0000
ROA not before: Fri 14 Jul 2023 21:14:51 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:188:5fe2:b396/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:187:4695:a68a/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:188:7858:a003/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64:ffff:0:187:fa9a:b088/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:187:b2b8:a7dd/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:56:41:ab:d2:86:2a:a5:96:a2:8c:22:8e:4a:3f:dc:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Jul 14 21:14:51 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=80b7b1feb2e2a54a3a7aa09bcc4afe59d9a753c9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:b6:e8:29:ac:61:b5:3a:ee:8a:ed:fd:3d:9c:
1f:de:8a:5d:44:fb:9e:3d:3e:aa:44:e3:31:3b:30:
2d:99:e0:ae:ca:6c:bd:bd:2e:1d:75:e5:14:07:40:
d7:2a:b6:73:aa:fb:44:54:da:8c:92:87:fb:98:e2:
d8:14:a9:48:c6:33:c7:10:95:0f:9e:bb:29:3a:c1:
22:34:6e:73:a0:2a:8a:a8:ac:90:d7:71:ba:a8:97:
01:ef:81:1b:27:50:fa:fa:98:22:6d:dc:13:7e:14:
52:c1:8d:c5:0b:88:81:5f:fa:0f:b0:ff:97:ac:76:
0f:7e:1c:51:1b:79:9a:83:f3:b5:2e:3c:ed:61:95:
7d:d2:6c:b5:13:ce:a7:24:b8:c3:ff:ab:0e:f3:ec:
25:f6:25:86:00:cb:b4:cb:24:d1:33:fc:ce:00:cd:
28:2e:72:47:5f:0d:07:e0:58:8a:24:3b:b2:53:76:
e8:e9:84:b5:e0:82:70:e6:93:fd:5b:da:54:44:14:
43:a3:31:07:c9:4e:da:13:77:61:88:87:1c:90:3d:
b7:93:b2:d0:a0:1e:74:a8:c9:92:8d:3a:ad:f0:6d:
9b:0b:68:c3:63:43:18:a1:e1:b7:68:cc:c3:d3:3a:
2a:20:f7:07:0c:c0:67:49:1c:30:27:7f:53:38:cc:
9a:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:B7:B1:FE:B2:E2:A5:4A:3A:7A:A0:9B:CC:4A:FE:59:D9:A7:53:C9
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/gLex_rLipUo6eqCbzEr-WdmnU8k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
64:f9:c3:fa:f8:63:a9:fd:86:4d:00:82:5f:4f:a1:bd:16:85:
69:f5:65:8f:fd:ad:91:fd:7b:57:10:00:0a:26:90:5d:7b:e9:
53:eb:09:72:1f:43:b8:e5:8d:1d:fe:da:6a:65:3b:1b:b7:2b:
ab:df:e3:c8:0b:d7:82:eb:4c:16:d5:30:00:13:bf:95:25:5e:
78:75:eb:bd:f9:bb:ad:04:73:3c:49:e4:79:4c:b6:06:df:74:
36:44:9e:93:49:96:2c:a0:9e:80:49:b6:34:dc:83:22:62:c2:
0e:28:3b:1c:3a:6a:5a:e7:b0:c2:32:ca:19:44:58:82:fa:ac:
71:2d:6a:17:65:aa:76:64:79:82:e8:34:a5:f3:f9:be:15:a3:
34:fe:fa:3b:2d:97:67:77:9e:75:e3:c6:1e:1f:23:9c:a3:bd:
37:5f:32:63:2c:7a:9e:6b:0a:40:9c:da:8f:f9:c5:b5:bc:e8:
30:39:48:04:5d:a3:ef:56:12:a8:4d:b6:00:62:eb:d1:b9:58:
d3:86:18:0f:32:de:91:90:62:8f:cc:29:40:40:f9:52:8d:57:
9b:e4:25:52:5c:96:67:69:3a:f5:67:52:e8:7f:1f:58:89:7c:
40:c2:43:95:e4:c0:6b:1c:2d:bd:b5:78:85:72:3d:60:bf:63:
54:3c:8d:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 02:43:30 2025 by rpki-client