Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/gEcvMsz-IgxhsTXxeZDw6HKb6Dk.roa
File: gEcvMsz-IgxhsTXxeZDw6HKb6Dk.roa (raw, json)
Hash identifier: zlbuBYqFiO6lxSR48jDUUiPsVnkWLcv1hiq0JwLF1/I=
Subject key identifier: 80:47:2F:32:CC:FE:22:0C:61:B1:35:F1:79:90:F0:E8:72:9B:E8:39
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 018520A2247BF130EBCFCDD31DF7BF360E74
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/gEcvMsz-IgxhsTXxeZDw6HKb6Dk.roa
Signing time: Sat 17 Dec 2022 15:09:35 +0000
ROA not before: Sat 17 Dec 2022 15:09:35 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:20:a2:24:7b:f1:30:eb:cf:cd:d3:1d:f7:bf:36:0e:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Dec 17 15:09:35 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=80472f32ccfe220c61b135f17990f0e8729be839
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:3d:3d:1a:c2:9d:b4:52:fb:d7:6f:86:c5:8c:
93:f5:57:17:c1:bc:b6:e7:b0:1c:55:68:71:1a:5f:
2f:42:d5:4c:10:ed:33:60:68:ab:87:09:2d:a4:36:
a5:0e:d9:e7:6e:3f:52:c3:1c:55:e9:be:29:53:e9:
fb:ee:9b:17:69:01:5d:8e:dd:75:e2:e3:54:09:51:
89:af:9e:dd:4c:44:28:1e:7a:2b:2f:e6:54:57:cc:
ff:f6:d0:ac:3b:13:88:10:fd:1f:8f:9b:24:b5:a7:
57:f7:2a:bd:f0:14:84:98:77:65:84:b7:df:4d:fe:
4e:56:4f:a1:78:25:d6:3b:3d:01:c9:58:0d:f3:1b:
9d:44:fc:32:a4:3d:68:cb:87:ce:14:56:b0:d8:0e:
90:71:1d:95:cc:73:7f:c1:5e:73:1d:26:01:29:c4:
d8:f5:fc:e0:67:9e:16:6f:ee:33:33:76:da:3f:5d:
97:8c:f7:3b:61:fb:b9:4e:4f:4c:9d:8c:ec:31:24:
5b:0d:19:b4:98:ed:1d:ff:cc:d8:35:bf:71:54:e1:
75:4f:b0:7a:c2:07:e1:08:2b:66:40:33:8c:d3:88:
06:26:ed:79:6d:f9:b0:8f:b6:d1:c4:1e:07:99:be:
03:a7:16:f3:db:d3:9a:b6:2c:7d:35:1b:eb:75:d9:
7d:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:47:2F:32:CC:FE:22:0C:61:B1:35:F1:79:90:F0:E8:72:9B:E8:39
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/gEcvMsz-IgxhsTXxeZDw6HKb6Dk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
67:01:34:d4:e0:43:c7:9e:b6:8c:2f:0c:db:96:88:86:b4:09:
61:9f:4f:52:69:5c:37:82:b6:3c:cb:f2:75:bc:49:40:38:41:
06:26:a9:00:85:e3:51:1d:96:cb:08:e2:80:fe:5e:01:06:15:
1e:ec:b1:40:fe:69:bf:8d:6d:b4:0a:4c:fd:10:c6:61:d8:5d:
70:b1:20:b5:a4:ae:68:d1:4d:fc:40:64:45:6e:4d:91:78:e6:
0a:47:01:5a:e7:64:81:7f:cf:59:60:f1:30:97:33:a9:a9:ae:
bd:dd:23:9f:0b:6f:8c:55:b6:b9:3b:e5:64:1b:e0:6a:8b:94:
7c:7a:5f:2f:46:fb:34:00:97:3d:33:a9:7f:1f:06:ab:4c:75:
e3:6d:d0:0d:b8:13:f9:5e:2f:d2:48:c8:e2:23:15:94:c6:2d:
5e:cb:8d:19:06:42:22:4e:f3:7f:10:51:f1:20:c5:aa:f3:90:
d0:3a:32:54:a6:42:41:b9:a0:e6:ab:91:05:06:95:14:e8:99:
6d:9b:c9:6e:74:f6:af:42:8a:3a:84:43:07:2f:9c:62:a9:aa:
ef:6a:5c:a4:3d:8e:53:0c:36:55:d8:ac:1f:bb:2b:ee:fd:75:
44:af:8e:69:9d:b6:14:7c:37:f9:58:2c:d7:0b:6e:d5:b7:8a:
c3:f9:31:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 00:11:16 2025 by rpki-client