Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/GefyKgYdWnTQLDv3m3vpw388uKk.roa
File: GefyKgYdWnTQLDv3m3vpw388uKk.roa (raw, json)
Hash identifier: d+++H3i1WTBIdz7JI+xCzxmMEsQCaVFZ/ujb8v65uWU=
Subject key identifier: 19:E7:F2:2A:06:1D:5A:74:D0:2C:3B:F7:9B:7B:E9:C3:7F:3C:B8:A9
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 018A2A0C8A4D02E4B493BE7CB893A4F4A387
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/GefyKgYdWnTQLDv3m3vpw388uKk.roa
Signing time: Fri 25 Aug 2023 00:16:19 +0000
ROA not before: Fri 25 Aug 2023 00:16:19 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:2a:0c:8a:4d:02:e4:b4:93:be:7c:b8:93:a4:f4:a3:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Aug 25 00:16:19 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=19e7f22a061d5a74d02c3bf79b7be9c37f3cb8a9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:46:b7:c1:f9:44:c2:f1:ee:f2:0f:df:b6:ad:
37:2d:d7:84:6b:26:39:b0:08:aa:d2:7f:2f:f7:db:
d7:84:75:59:6d:01:1d:56:bf:35:30:77:a7:ca:20:
27:5e:31:fd:a7:8b:a3:14:e5:1a:94:27:a4:43:9b:
6b:9f:29:9f:12:78:a1:be:b6:ce:19:74:f0:03:60:
7c:71:71:ca:2c:a4:49:8e:8c:56:42:0a:25:ed:1e:
96:f4:5f:59:69:76:fb:ba:fd:c5:09:6f:4d:22:f8:
64:4f:9e:c4:91:f9:eb:3e:99:eb:ad:3f:c8:81:5e:
b3:bc:ae:5d:db:30:63:d6:f4:60:41:02:3d:9f:be:
c9:73:cd:64:6d:4f:a2:7e:c3:13:ea:a7:17:b9:35:
c4:80:4e:a8:01:53:90:9b:fc:d3:26:75:f4:dc:be:
34:99:75:4f:2d:7d:c6:67:81:20:6d:fc:f4:6e:c6:
c1:0f:ed:b4:1d:57:26:8a:28:01:e8:ca:85:08:3c:
a4:cf:48:19:fc:49:44:c9:8f:8f:93:1f:ab:c5:bc:
e9:41:f8:00:db:12:ae:7d:9e:27:c1:12:09:6d:0d:
f3:37:5d:63:ef:37:2f:eb:0b:53:d2:82:7d:c0:8e:
0a:90:a0:ae:3a:ab:21:59:3d:5f:af:6a:38:53:72:
48:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:E7:F2:2A:06:1D:5A:74:D0:2C:3B:F7:9B:7B:E9:C3:7F:3C:B8:A9
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/GefyKgYdWnTQLDv3m3vpw388uKk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
6f:66:fd:a0:51:2b:32:e4:d1:dc:92:eb:22:a6:16:cf:c7:1d:
4b:be:cf:39:97:5d:ce:42:b6:24:d5:24:cf:07:2e:00:be:2b:
0b:6b:b5:2e:7c:0a:10:92:26:6c:e6:e3:c2:b8:eb:7a:85:ba:
ea:5c:30:ca:19:68:c9:45:61:1e:fb:e1:4f:06:e3:b3:71:91:
81:35:9c:66:c3:47:a2:92:89:7f:ba:a7:e8:48:9f:30:37:f9:
a2:76:b4:93:97:5d:c9:a0:e7:58:26:db:d0:97:8a:07:34:fe:
64:04:f9:e5:e5:78:fe:37:bb:93:08:72:fc:83:d2:85:45:19:
75:5d:03:f1:9a:e0:62:0a:d4:f7:60:85:b5:cb:7d:3f:53:1b:
a0:f1:6e:1a:eb:3d:2d:af:e8:46:2d:7e:de:01:69:7f:c5:14:
a8:28:27:20:ed:53:9a:77:62:0d:60:ae:07:a5:29:2a:ec:71:
9e:30:3a:87:c1:1f:ad:cb:8a:42:71:92:fd:94:37:87:6e:35:
78:90:3a:df:fa:38:d2:be:f1:f5:ed:3a:33:8a:ed:cf:55:35:
8b:53:15:15:6c:eb:16:54:11:33:06:bc:6e:eb:17:a0:12:5c:
7f:fa:cd:65:46:0f:f5:2b:3a:30:a2:38:24:3b:70:06:93:74:
c1:26:4a:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 22:38:49 2025 by rpki-client