Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/GeiA5j0QjtgGB25avEB84detbDw.roa
File: GeiA5j0QjtgGB25avEB84detbDw.roa (raw, json)
Hash identifier: n5QeZYtECJycCukAa2V7BNKweeyiyF/SLlE7dinBbO4=
Subject key identifier: 19:E8:80:E6:3D:10:8E:D8:06:07:6E:5A:BC:40:7C:E1:D7:AD:6C:3C
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0184DA3BE5379E957E3FCEA2F189C85B02CB
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/GeiA5j0QjtgGB25avEB84detbDw.roa
Signing time: Sat 03 Dec 2022 23:04:29 +0000
ROA not before: Sat 03 Dec 2022 23:04:29 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:184:da3b:dc21/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:da:3b:e5:37:9e:95:7e:3f:ce:a2:f1:89:c8:5b:02:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Dec 3 23:04:29 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=19e880e63d108ed806076e5abc407ce1d7ad6c3c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:f5:98:56:45:ed:05:e5:1a:a4:4c:b7:d2:40:
11:51:a5:b4:75:92:4f:6c:c2:aa:ce:81:b2:e5:02:
20:d4:8a:0b:d6:ee:16:f3:f8:d0:a9:f5:5d:50:ec:
5a:3d:5d:0e:0b:b4:0a:ff:87:10:67:6e:a4:85:c7:
e5:4e:18:64:eb:d1:b6:2a:d3:a8:fa:b5:9b:2b:54:
73:96:a6:2e:e7:62:bf:a8:d5:27:f0:02:b5:8d:2d:
0c:1c:70:c5:8f:a9:57:69:d1:a1:67:4a:6c:96:0e:
30:3e:c4:b5:52:81:a1:20:c8:12:c2:d1:93:96:aa:
e9:70:36:6f:a5:87:51:76:07:d7:64:62:4f:54:bd:
86:59:dc:1c:f0:6d:32:1e:e9:3b:c4:b5:22:c9:97:
5a:05:c0:ee:08:7f:eb:a9:79:5e:e1:d6:8b:75:7c:
fa:d7:bc:17:9c:29:15:05:65:ef:c6:d2:7b:17:6b:
fb:b3:87:76:20:41:61:87:47:70:57:2d:63:95:df:
1b:5d:e4:8c:b8:3c:33:d9:09:b5:6c:e2:7a:04:12:
43:94:a2:b9:b1:0b:9a:3b:0c:0c:e5:99:30:af:41:
99:2f:a1:08:5b:83:83:c6:70:9f:1c:f3:ca:5f:93:
9e:89:f9:ae:a5:3f:73:6d:4b:d2:46:89:e7:49:09:
7a:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:E8:80:E6:3D:10:8E:D8:06:07:6E:5A:BC:40:7C:E1:D7:AD:6C:3C
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/GeiA5j0QjtgGB25avEB84detbDw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
44:ca:ea:6e:3f:44:35:b6:12:51:48:8e:21:31:47:b8:c6:fa:
14:b6:44:da:55:c5:15:d7:97:e5:7c:0d:82:4f:be:27:92:16:
16:15:98:57:9f:b2:a3:1f:6e:2b:5f:ff:bc:7a:fd:ba:7d:cb:
3f:46:91:e9:b4:74:72:5a:a3:aa:a5:20:79:24:33:c4:bf:11:
99:5f:2b:b9:e1:16:f8:b2:05:b7:9f:10:ac:63:0b:80:a6:1f:
4d:6a:b5:4d:60:4e:be:56:6f:01:3d:69:c8:50:dd:da:e3:2a:
d3:d2:83:13:74:be:83:06:a3:04:53:2a:d8:41:4c:d6:b6:12:
3a:50:d1:62:bb:fd:9e:20:6b:e2:bb:fa:3e:61:ca:55:1b:18:
a2:4d:01:03:15:a0:bb:5e:cc:55:75:27:9a:80:46:34:88:52:
8e:d4:58:e0:09:75:9d:c3:80:51:b8:48:62:14:10:5a:f4:71:
77:d5:72:aa:6d:dd:b6:f1:94:63:ec:2d:42:8d:04:a4:0e:3f:
47:4b:86:c2:a6:55:5c:14:31:46:9b:dc:45:6b:a9:e7:28:d8:
b2:0b:72:a3:6d:f2:0c:c5:f5:a1:d8:d5:8c:fb:4a:ae:e0:7c:
75:bc:b4:1d:32:71:36:c4:3c:db:66:bf:70:ff:ef:ea:ad:d4:
e0:3f:91:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 12 16:46:58 2025 by rpki-client