Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/Gr5xsvV6w-tcelsws-QTKIThfFE.roa
File: Gr5xsvV6w-tcelsws-QTKIThfFE.roa (raw, json)
Hash identifier: xvc9UgF08JFjzqPfOqL4zXXIySa36KZ5IU2j2Yilu70=
Subject key identifier: 1A:BE:71:B2:F5:7A:C3:EB:5C:7A:5B:30:B3:E4:13:28:84:E1:7C:51
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0184A20BDA0E77E61D814C930FA4CE32FECA
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/Gr5xsvV6w-tcelsws-QTKIThfFE.roa
Signing time: Wed 23 Nov 2022 01:13:16 +0000
ROA not before: Wed 23 Nov 2022 01:13:16 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:184:9f03:9814/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:a2:0b:da:0e:77:e6:1d:81:4c:93:0f:a4:ce:32:fe:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Nov 23 01:13:16 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=1abe71b2f57ac3eb5c7a5b30b3e4132884e17c51
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:bf:bc:c4:13:b9:94:d6:71:3b:96:43:ff:aa:
d1:9a:d7:4c:11:26:d9:8e:80:c0:24:d4:6c:3f:f6:
f4:3e:fc:22:89:71:de:ba:dc:57:3c:13:74:1b:b4:
e4:1e:b6:4f:d4:ed:69:28:2b:52:96:9e:59:6e:f2:
28:72:10:14:13:36:a3:c2:7f:dc:27:af:31:e0:83:
f8:17:5a:1a:93:31:a7:8b:46:33:34:51:80:1b:03:
63:d2:12:34:74:4a:ee:c7:97:0f:d7:5d:ac:d7:a6:
ff:f0:67:85:8c:47:0b:20:47:ef:ba:56:58:8a:34:
06:e2:9e:06:65:b9:08:00:7e:de:63:35:41:52:a7:
e9:be:cf:59:df:4a:7b:c9:21:0e:01:b1:e4:53:ef:
f3:38:84:ee:f7:10:60:85:6f:21:72:b6:31:d1:57:
0f:2b:c2:07:37:55:3e:3f:ee:3c:79:3b:18:03:c2:
3a:22:33:e6:e0:b0:a9:70:c6:56:4a:14:e2:b1:05:
57:ae:88:88:d7:aa:db:05:5a:22:0b:ba:d5:a0:21:
de:22:27:d4:2e:83:a6:33:08:07:81:da:22:34:f3:
b4:de:09:03:ab:2e:f1:aa:0a:fa:d7:17:6e:44:9e:
b5:56:ca:a4:bd:92:6b:54:e0:e2:10:34:bc:86:4d:
e4:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:BE:71:B2:F5:7A:C3:EB:5C:7A:5B:30:B3:E4:13:28:84:E1:7C:51
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/Gr5xsvV6w-tcelsws-QTKIThfFE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
ab:41:9b:9a:ef:22:7d:7a:76:a0:dd:01:a9:78:85:e3:94:6b:
66:c4:32:61:39:a3:11:a0:e8:5d:ef:49:17:ef:7d:c2:1f:ba:
4b:9c:a5:f4:28:09:4d:18:21:7f:64:5f:b8:8b:51:3a:63:6a:
55:f0:5c:7a:62:89:5f:a3:8b:82:29:79:0c:f6:35:47:45:3d:
f0:0c:f1:de:eb:d8:8f:66:72:1e:c1:f3:2f:ef:49:e4:95:ae:
53:64:18:36:92:7a:4f:fd:36:85:eb:f4:e0:f5:07:da:3e:85:
34:5f:c5:ce:bc:b6:9a:da:0b:5a:9d:a3:91:b5:64:5d:d8:62:
0e:41:c5:55:37:49:cd:27:38:ce:75:58:8d:80:ea:e1:a0:50:
0d:d8:ea:06:fc:c1:64:3a:4e:60:1a:30:c2:65:47:b3:07:80:
cd:dd:5d:5b:6b:b2:9c:5c:1d:8a:8f:24:1b:55:cd:3d:b7:8a:
cb:43:77:ac:da:d9:b0:08:b7:8d:f9:2a:69:56:1f:52:b1:c2:
7a:e4:64:36:51:ba:21:b2:84:ad:8b:37:a8:d6:12:c0:31:0a:
3c:9a:32:6e:94:de:58:40:9b:dc:4c:d4:a1:db:a2:95:87:c9:
5f:ee:b6:93:b8:8b:bb:1c:ce:00:3f:6e:ba:13:b5:4a:fc:18:
bc:47:39:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 23:18:42 2025 by rpki-client