Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/1gIt1NtD1pBj9liDx-3girn-gTk.roa
File: 1gIt1NtD1pBj9liDx-3girn-gTk.roa (raw, json)
Hash identifier: AaxHUrCDSOY4kwfQLI8LykvuqT59cr8RzuSMAuM2DKc=
Subject key identifier: D6:02:2D:D4:DB:43:D6:90:63:F6:58:83:C7:ED:E0:8A:B9:FE:81:39
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 018A413D81DAEB0397EE8081256CCDDF8994
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/1gIt1NtD1pBj9liDx-3girn-gTk.roa
Signing time: Tue 29 Aug 2023 12:21:04 +0000
ROA not before: Tue 29 Aug 2023 12:21:04 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:41:3d:81:da:eb:03:97:ee:80:81:25:6c:cd:df:89:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Aug 29 12:21:04 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=d6022dd4db43d69063f65883c7ede08ab9fe8139
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:74:4b:41:7b:24:60:88:ac:e1:6f:17:72:3d:
37:9c:9a:90:cf:8c:0b:14:cc:d7:99:60:bf:9d:8d:
5a:f0:b5:0e:40:2e:62:d0:bc:24:d9:8b:04:82:e2:
43:10:3d:65:73:be:ac:7b:5b:16:a6:4b:78:51:11:
0d:1d:d4:0b:2d:b2:fc:d2:c4:79:34:55:1e:25:ed:
0f:25:de:12:f5:0f:3f:b8:95:36:2e:00:88:03:ca:
d9:bb:d4:b4:c7:a9:6b:ce:b8:1d:64:86:7e:89:98:
d6:38:9f:d0:14:a9:e1:4d:cf:da:a6:e1:6f:dc:2a:
07:7e:22:a2:f8:23:02:9c:d2:c5:b6:31:aa:4e:ef:
ad:8a:bb:18:14:72:d4:ca:55:5d:21:f4:0c:43:c9:
5b:df:95:eb:98:a9:03:a4:f7:0c:98:d8:67:48:eb:
70:26:39:a4:ff:fd:2a:b6:3a:c7:f2:14:f2:20:51:
62:ab:e7:c0:f2:cb:9a:b8:60:e8:1c:21:9a:67:46:
c7:5c:79:7d:37:4e:f9:ab:7e:4b:4e:66:d4:24:2b:
72:e2:0f:c6:e8:c5:02:cc:62:9a:ce:f0:31:c7:2f:
1c:31:12:9f:21:f3:4d:18:af:6f:f2:e7:bc:62:ba:
e8:3e:f9:33:c6:25:7e:f8:05:04:01:13:52:6a:7e:
a5:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:02:2D:D4:DB:43:D6:90:63:F6:58:83:C7:ED:E0:8A:B9:FE:81:39
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/1gIt1NtD1pBj9liDx-3girn-gTk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
9a:77:3e:79:d8:17:dd:2c:24:c5:f7:e4:b5:84:f2:8f:00:15:
a2:43:1f:a7:c4:d7:b0:94:e9:e8:43:a9:c6:83:80:eb:ca:06:
0a:ca:0a:84:63:f5:27:a7:59:6d:26:bf:81:b3:aa:4d:6f:0e:
e7:59:41:44:e4:82:cd:7a:d0:72:bb:85:cb:7f:1e:56:ff:c6:
00:d9:8f:c3:9c:00:c4:66:ca:b8:05:75:44:7d:da:b0:46:73:
9f:4d:a2:cd:8a:21:38:1c:fd:ac:e4:16:2d:66:03:9a:b6:b9:
8f:1b:e7:fa:b9:e2:a4:30:4a:ba:67:76:14:05:b1:66:80:eb:
f3:57:8a:bc:1a:5f:9e:23:d3:3b:5a:df:95:c5:5c:97:c4:d0:
b5:4b:59:b0:6d:52:a6:11:d9:10:32:4c:47:48:4a:0f:4f:06:
45:6e:a5:3a:4d:e6:8d:1a:40:b2:3c:6a:fd:42:e7:90:d7:31:
2c:75:9c:d8:82:38:75:3b:f7:36:6c:2f:04:bc:86:3e:0d:fb:
cd:a4:18:b4:e9:9e:b6:a1:ea:3a:a2:9c:d7:c3:8b:19:f5:1a:
77:7a:94:f7:26:6b:0f:9a:b0:00:21:2c:7b:47:4b:78:31:35:
fc:51:02:b1:bd:8c:33:81:9f:05:24:1a:7b:05:e8:a1:d3:0f:
ac:30:67:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 11 01:43:06 2025 by rpki-client