Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/G-1JNdZlz6F-UGOCN0AF8Syx-_U.roa
File: G-1JNdZlz6F-UGOCN0AF8Syx-_U.roa (raw, json)
Hash identifier: n0Tnn6vT8TY3Z6KMjAhIA8N2Xkyu6fYiuhyQfx6TdEc=
Subject key identifier: 1B:ED:49:35:D6:65:CF:A1:7E:50:63:82:37:40:05:F1:2C:B1:FB:F5
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 79C9316A
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/G-1JNdZlz6F-UGOCN0AF8Syx-_U.roa
Signing time: Sat 09 Apr 2022 07:09:28 +0000
ROA not before: Sat 09 Apr 2022 07:09:28 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:180:457:1e3f/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2043228522 (0x79c9316a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Apr 9 07:09:28 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=1bed4935d665cfa17e506382374005f12cb1fbf5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:b4:0f:9f:59:ce:6d:83:3d:95:fd:a2:46:17:
f3:9d:3b:cf:10:64:c1:e9:38:d2:63:32:1a:ff:1f:
1e:60:a1:31:48:27:fd:ea:b3:40:21:65:30:51:90:
86:3e:ef:18:e2:18:0e:4e:f7:43:11:da:8a:1f:90:
96:62:05:d2:ee:18:02:45:f8:02:75:54:3f:25:fb:
d7:b2:93:9f:1d:01:04:8d:a7:0e:26:99:e9:37:ba:
61:04:fb:03:63:b5:6a:a9:2c:d9:cb:af:77:45:7e:
db:d2:71:12:b4:ab:41:cf:d1:32:d8:6a:2c:53:54:
3a:ec:05:8a:bb:92:6f:0c:6c:11:c5:8a:3b:0c:ec:
85:36:ca:07:f1:bb:05:c7:e5:b4:1a:47:e5:c6:9f:
f5:44:33:cd:9a:f0:79:01:26:68:96:a7:7a:39:ef:
02:d7:a4:6e:37:47:e2:11:33:6f:f3:66:a5:d8:3e:
cb:5b:bf:22:dc:48:9d:70:01:2c:74:17:fb:6a:b3:
fb:7c:a2:26:19:9a:17:21:18:fc:12:f4:1e:bf:35:
88:3b:89:7c:c4:13:5f:84:13:68:7d:ef:ee:71:12:
41:5b:c2:5a:c2:4b:7e:30:a8:21:10:c5:8a:c1:09:
d5:a3:e7:f0:55:1b:78:9d:73:0e:47:82:bc:0a:3e:
c2:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:ED:49:35:D6:65:CF:A1:7E:50:63:82:37:40:05:F1:2C:B1:FB:F5
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/G-1JNdZlz6F-UGOCN0AF8Syx-_U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
aa:89:da:ba:a9:16:9c:13:1a:19:e7:ec:0d:41:97:e7:ea:48:
d5:6e:6b:2b:5a:14:39:2f:a1:b1:37:10:60:6e:1b:48:fb:52:
98:96:10:9c:e3:76:9f:29:7d:7d:63:59:39:b5:aa:bc:e4:ce:
cd:32:38:89:02:d2:6e:8f:52:6a:16:8b:68:b7:72:2a:96:00:
93:58:64:b1:3b:00:1d:9f:6a:37:1d:cb:e4:94:44:3e:96:13:
67:0c:e1:96:3d:4f:a2:c4:09:d7:4d:f9:4b:84:c4:0a:96:41:
28:41:9e:68:f4:28:62:79:3f:15:cf:e9:e5:dc:08:00:2c:cf:
9d:53:a4:06:2a:3c:07:60:ba:a7:52:15:3d:61:28:1d:b2:d7:
3c:6a:ca:25:24:b7:65:1a:f8:33:a6:e2:b3:88:f5:50:32:53:
ea:ba:f1:cd:3c:ee:79:86:e2:a6:1f:79:c6:69:42:74:17:b6:
d5:df:8e:00:62:39:65:7e:36:fe:d6:4f:42:59:8d:05:a9:64:
72:10:28:b5:71:40:e1:52:74:9c:41:e8:97:a4:ab:20:8e:fc:
e7:c9:0c:39:45:ca:46:5c:29:72:a7:07:fe:fe:20:21:6e:e2:
60:87:16:bc:f9:46:80:86:4a:51:c6:cf:e9:e2:4e:4a:a9:e6:
35:f6:7f:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 22:27:19 2025 by rpki-client