Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/GewnLictcorjS3FiJ7dtgN6xX4Y.roa
File: GewnLictcorjS3FiJ7dtgN6xX4Y.roa (raw, json)
Hash identifier: xEQ8eEiGLlTXsh3QfPb+CjRqvjGuOb4fxWsByytP5w4=
Subject key identifier: 19:EC:27:2E:27:2D:72:8A:E3:4B:71:62:27:B7:6D:80:DE:B1:5F:86
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 8F0FC738
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/GewnLictcorjS3FiJ7dtgN6xX4Y.roa
Signing time: Wed 22 Jun 2022 20:08:32 +0000
ROA not before: Wed 22 Jun 2022 20:08:32 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2400175928 (0x8f0fc738)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Jun 22 20:08:32 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=19ec272e272d728ae34b716227b76d80deb15f86
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:2d:c7:fc:3f:82:59:47:ce:d8:19:d5:1e:2d:
f2:fb:39:fd:a0:84:8c:11:45:7f:eb:eb:4b:7f:f2:
e7:24:8e:e8:7f:99:21:aa:50:b4:25:3c:83:98:4a:
d9:1a:7e:d7:41:7e:75:27:bf:74:e0:60:29:f5:f2:
32:6c:53:22:a6:89:88:c6:2e:d9:69:9c:e1:b1:d6:
85:f3:18:81:08:e6:06:53:08:af:e6:0a:4b:01:5b:
61:05:1a:f1:6c:7b:b0:1d:ff:f2:fb:45:22:eb:25:
2f:e1:37:a0:dc:1b:b9:f7:60:01:0a:e3:27:43:01:
4d:8b:ae:de:ca:2d:c1:75:12:9c:d8:92:27:f3:e6:
2d:f1:d9:28:05:cf:f6:7b:db:af:4f:87:13:0d:51:
5c:83:94:e5:27:5c:21:ae:6b:2c:a9:69:9d:09:ca:
e7:4c:87:a2:43:94:29:49:80:d2:34:01:2b:e5:82:
c3:28:8a:b9:df:9c:0b:c3:c1:30:8d:6a:b1:21:24:
51:8b:3b:0c:79:68:c9:4f:ff:ec:36:9a:18:4f:ba:
b5:b4:50:b9:b8:0f:ba:0f:2b:4c:9c:46:22:c5:99:
b3:e5:e0:37:b1:eb:e2:11:32:48:c1:46:8b:a4:78:
ce:22:9b:a2:e1:7f:f7:86:86:c1:d3:56:86:56:50:
0f:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:EC:27:2E:27:2D:72:8A:E3:4B:71:62:27:B7:6D:80:DE:B1:5F:86
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/GewnLictcorjS3FiJ7dtgN6xX4Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
64:02:35:90:c9:f7:b7:dc:d5:3c:88:6e:7c:74:b0:fa:32:25:
f4:20:3c:63:d5:96:07:32:68:97:4c:1f:93:0b:f6:7e:d5:27:
a4:22:b7:a8:09:4e:a7:6c:c1:77:85:9e:70:6f:86:fb:fc:27:
db:41:35:09:a6:d1:da:11:b6:8b:03:0f:39:fc:23:96:4a:8c:
65:ba:09:e3:94:c9:32:db:85:40:47:91:01:fd:7c:be:fc:de:
d3:da:e4:29:87:c4:3f:c6:4b:82:45:25:ab:1d:a9:89:a3:d5:
c6:40:c8:80:12:3e:98:91:23:63:ea:a8:25:10:82:a1:c9:1f:
44:9a:cf:cb:9b:1a:97:3d:44:15:61:3a:f6:3c:52:6c:c0:48:
28:52:9f:c5:51:58:a9:ac:29:74:5e:52:d4:1d:75:72:30:32:
8d:f6:87:99:ad:5e:97:09:a2:d3:1f:39:09:75:a5:a5:1e:be:
3e:ea:47:cb:57:e4:b7:6b:8c:20:3d:75:e5:58:3f:1a:e1:bf:
5f:bd:cb:4c:12:55:88:01:1f:c0:e3:f5:77:91:f4:58:e2:18:
55:e1:95:d0:04:58:2f:e7:53:00:39:a9:c0:81:40:55:7c:99:
66:f1:ba:e5:cb:07:a2:d2:81:9e:a9:d4:85:f6:50:d8:54:e9:
4a:e8:35:ef
-----BEGIN CERTIFICATE-----
MIIFATCCA+mgAwIBAgIFAI8PxzgwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMo
NzIwNDdiZTE1YjI3NTkwMmRjZjYxN2RjM2QwZTE2ZGMxZjMwODAyMjAeFw0yMjA2
MjIyMDA4MzJaFw0yMzA3MDEwMDAwMDBaMDMxMTAvBgNVBAMTKDE5ZWMyNzJlMjcy
ZDcyOGFlMzRiNzE2MjI3Yjc2ZDgwZGViMTVmODYwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQCvLcf8P4JZR87YGdUeLfL7Of2ghIwRRX/r60t/8uckjuh/
mSGqULQlPIOYStkaftdBfnUnv3TgYCn18jJsUyKmiYjGLtlpnOGx1oXzGIEI5gZT
CK/mCksBW2EFGvFse7Ad//L7RSLrJS/hN6DcG7n3YAEK4ydDAU2Lrt7KLcF1EpzY
kifz5i3x2SgFz/Z7269PhxMNUVyDlOUnXCGuayypaZ0JyudMh6JDlClJgNI0ASvl
gsMoirnfnAvDwTCNarEhJFGLOwx5aMlP/+w2mhhPurW0ULm4D7oPK0ycRiLFmbPl
4Dex6+IRMkjBRoukeM4im6Lhf/eGhsHTVoZWUA8HAgMBAAGjggIaMIICFjAdBgNV
HQ4EFgQUGewnLictcorjS3FiJ7dtgN6xX4YwHwYDVR0jBBgwFoAUcgR74VsnWQLc
9hfcPQ4W3B8wgCIwDgYDVR0PAQH/BAQDAgeAMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvREVGQVVM
VC9jZ1I3NFZzbldRTGM5aGZjUFE0VzNCOHdnQ0kuY2VyMIGNBggrBgEFBQcBCwSB
gDB+MHwGCCsGAQUFBzALhnByc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9y
eS9ERUZBVUxULzVlLzc5ODQ0Ny0yMWY0LTQ1YWItOTlkYy0xYWJlM2FjMTBhYTYv
MS9HZXduTGljdGNvcmpTM0ZpSjdkdGdONnhYNFkucm9hMIGBBgNVHR8EejB4MHag
dKByhnByc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzVl
Lzc5ODQ0Ny0yMWY0LTQ1YWItOTlkYy0xYWJlM2FjMTBhYTYvMS9jZ1I3NFZzbldR
TGM5aGZjUFE0VzNCOHdnQ0kuY3JsMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw
MAYIKwYBBQUHAQcBAf8EITAfMAwEAgABMAYDBAPBABgwDwQCAAIwCQMHACABBnwA
ZDANBgkqhkiG9w0BAQsFAAOCAQEAZAI1kMn3t9zVPIhufHSw+jIl9CA8Y9WWBzJo
l0wfkwv2ftUnpCK3qAlOp2zBd4WecG+G+/wn20E1CabR2hG2iwMPOfwjlkqMZboJ
45TJMtuFQEeRAf18vvze09rkKYfEP8ZLgkUlqx2piaPVxkDIgBI+mJEjY+qoJRCC
ockfRJrPy5salz1EFWE69jxSbMBIKFKfxVFYqawpdF5S1B11cjAyjfaHma1elwmi
0x85CXWlpR6+PupHy1fkt2uMID115Vg/GuG/X73LTBJViAEfwOP1d5H0WOIYVeGV
0ARYL+dTADmpwIFAVXyZZvG65csHotKBnqnUhfZQ2FTpSug17w==
-----END CERTIFICATE-----
Generated at Mon Jun 9 02:43:30 2025 by rpki-client