Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/gQ4VAgM9J1aqUUzbLkD_c6iJlUA.roa
File: gQ4VAgM9J1aqUUzbLkD_c6iJlUA.roa (raw, json)
Hash identifier: bkf/+OGSOEUummFgc9wwklvc9kIP6F2ooe4kwHbGHMI=
Subject key identifier: 81:0E:15:02:03:3D:27:56:AA:51:4C:DB:2E:40:FF:73:A8:89:95:40
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0184E56C92B7548C327FB7E31C05225C910D
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/gQ4VAgM9J1aqUUzbLkD_c6iJlUA.roa
Signing time: Tue 06 Dec 2022 03:13:28 +0000
ROA not before: Tue 06 Dec 2022 03:13:28 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:e5:6c:92:b7:54:8c:32:7f:b7:e3:1c:05:22:5c:91:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Dec 6 03:13:28 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=810e1502033d2756aa514cdb2e40ff73a8899540
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:fd:1c:01:2f:be:0d:91:fe:38:46:b3:ac:57:
69:33:b3:d8:0a:69:50:71:52:38:5a:7a:bd:d3:a1:
ff:52:7a:b7:18:dd:e3:fa:a9:68:47:e2:71:67:96:
72:c4:e6:84:86:eb:70:90:da:fa:6c:f4:8b:0c:49:
19:cb:38:c8:23:5b:cb:ea:83:75:85:e6:69:d8:92:
11:95:78:be:db:71:d3:27:3d:16:ce:b2:73:d5:ab:
c2:e5:2a:52:a9:7f:20:9f:ef:2c:4a:9c:b1:82:ba:
e7:1b:11:a5:f0:dd:e7:71:53:9c:cb:f6:b3:c5:33:
44:0a:f2:ac:f3:27:2a:a1:6c:a9:5e:ae:0f:9b:53:
f9:22:0c:cd:a6:7d:26:41:ee:9c:d7:93:15:09:3b:
31:17:49:50:1b:a1:d0:b2:f1:66:20:2d:9f:23:11:
44:55:5c:07:97:b2:ed:c2:fd:bb:f0:cf:99:00:fa:
46:c1:53:8f:4a:96:f9:4e:f8:0f:62:b2:17:77:9d:
62:92:9c:5e:fc:0b:a3:91:01:0d:b1:ae:78:e5:ae:
ca:f2:43:96:9a:c6:6f:0d:71:94:25:a2:97:45:b4:
13:0c:bf:31:9a:46:f0:3a:a1:c0:a1:31:6d:1b:f0:
83:14:e6:1a:72:2e:4d:77:48:eb:b5:37:ff:27:07:
d8:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:0E:15:02:03:3D:27:56:AA:51:4C:DB:2E:40:FF:73:A8:89:95:40
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/gQ4VAgM9J1aqUUzbLkD_c6iJlUA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
a8:f5:ed:48:77:37:d6:89:08:dd:5a:da:68:0a:3b:e3:e8:5d:
d9:1b:13:2e:72:71:10:c8:6e:a1:51:7d:53:91:bb:97:07:8e:
6b:d2:5b:33:30:0e:ec:43:04:b3:3a:a8:db:08:b4:5f:78:fb:
72:17:2c:5a:39:98:a7:06:c8:ba:1f:ef:20:52:49:fe:fb:86:
c4:cc:fd:81:6d:91:73:0f:38:63:79:a0:09:cf:83:f2:b4:7f:
66:f1:d9:1e:fa:db:04:78:a6:01:ab:57:36:90:8c:76:25:7b:
f9:79:06:7f:07:af:5d:6f:9f:b7:38:e8:c4:d0:7a:d6:41:ba:
b9:67:09:bd:e4:53:d9:8d:6c:3d:bf:79:4d:11:0c:a9:ce:1e:
d7:83:27:db:f9:1a:9f:8f:db:84:63:51:9f:08:52:91:a6:aa:
a9:a1:e1:55:20:82:a3:e6:a2:08:78:c5:e5:20:30:1f:cc:ab:
da:f6:28:3f:d6:4e:bd:d4:e3:cb:d9:15:de:28:90:c4:c0:53:
48:fc:75:c0:84:e8:b3:6f:f4:9c:d3:9a:ad:29:d0:c2:86:9a:
b8:ee:05:7c:8e:4d:ca:20:e6:58:dd:bb:a9:07:a4:e2:15:71:
25:ba:0e:fb:f3:c2:0a:be:89:47:d6:b4:07:cd:8c:b7:da:be:
5c:79:c3:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 12 02:39:54 2025 by rpki-client