Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/gQStZGAJXvJnaQb8NfNY3jyoM1Y.roa
File: gQStZGAJXvJnaQb8NfNY3jyoM1Y.roa (raw, json)
Hash identifier: jAgWbBP/9oEUaIIpofqhKMGSgU2kRmGO/mKhXe5dsR4=
Subject key identifier: 81:04:AD:64:60:09:5E:F2:67:69:06:FC:35:F3:58:DE:3C:A8:33:56
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 01850FAE833B1E94502559034AF3BFE4C2C1
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/gQStZGAJXvJnaQb8NfNY3jyoM1Y.roa
Signing time: Wed 14 Dec 2022 08:09:33 +0000
ROA not before: Wed 14 Dec 2022 08:09:33 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:0f:ae:83:3b:1e:94:50:25:59:03:4a:f3:bf:e4:c2:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Dec 14 08:09:33 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=8104ad6460095ef2676906fc35f358de3ca83356
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:b3:3c:37:3a:9b:3d:5b:c4:3d:34:ea:fb:88:
31:47:e0:b3:92:38:79:0c:28:6a:53:82:72:bd:73:
8b:72:31:88:e1:c4:13:d8:1d:2d:d3:31:ae:d6:10:
bc:7b:00:24:cd:f5:5a:fb:5f:ad:92:3b:98:94:cb:
29:cc:be:25:9b:21:3a:97:5a:2c:1c:c8:92:94:cb:
d5:86:17:76:58:a7:96:98:91:11:a2:f8:03:dd:a4:
e9:09:16:61:2f:28:d0:b0:30:38:5c:de:26:77:d7:
64:1d:8f:32:d2:3d:09:02:a3:06:e4:9a:ec:79:3f:
8e:99:04:aa:af:0f:94:ca:be:ee:7b:1b:a6:e3:e0:
53:59:07:f9:a3:83:be:c7:89:ab:84:59:4f:e7:92:
fb:40:2e:b3:a4:a6:e4:81:ab:26:df:3f:f0:52:05:
34:70:bc:fd:a9:f2:88:b3:31:0f:54:1f:7f:bb:ef:
7a:14:a4:8e:72:89:53:29:b9:c9:e0:26:33:51:c8:
62:51:6b:0a:b4:4f:6b:49:97:2b:f3:bf:e3:7d:d1:
be:79:1c:18:fa:79:c3:25:14:4b:a8:54:e7:30:af:
12:61:97:51:12:a4:5f:51:fd:a0:f3:53:11:7b:36:
b5:1d:60:be:66:46:37:ef:2d:da:21:80:06:a5:73:
08:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:04:AD:64:60:09:5E:F2:67:69:06:FC:35:F3:58:DE:3C:A8:33:56
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/gQStZGAJXvJnaQb8NfNY3jyoM1Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
68:ed:bf:28:80:c7:9e:7c:5f:db:e0:f2:5d:11:89:81:74:50:
aa:1f:6d:16:f4:dd:cb:68:72:fa:eb:aa:45:da:8a:22:83:8f:
9f:14:7e:24:35:f6:39:8a:49:72:82:ad:10:c0:b4:4e:e9:fb:
f2:67:84:86:80:8e:93:19:c1:5d:34:7f:79:5f:51:8c:da:a1:
7f:7d:fd:eb:32:aa:72:43:f8:3e:06:a7:d3:ba:65:c1:27:f8:
a8:0e:a7:03:35:0d:89:6b:ad:44:53:c6:2c:f8:c1:b4:12:d0:
10:88:a0:bf:97:1d:df:5c:30:4c:35:21:a5:e4:06:4a:cd:01:
e8:de:03:df:7e:24:23:65:5b:71:1e:4a:43:4b:82:31:f9:45:
ba:82:4d:14:73:a2:5a:31:c7:94:f4:33:da:3d:12:cf:d9:25:
93:3b:69:04:33:3a:98:d8:99:70:05:47:01:13:51:53:5b:6d:
5f:59:5b:13:0e:ca:85:b2:0d:05:14:9b:3c:b4:f7:a2:e2:2f:
c5:ea:41:31:e6:2c:f2:94:00:f8:4b:e2:56:c0:bb:74:25:e4:
9f:8e:c8:39:f0:a1:50:fc:e9:7a:69:fe:09:67:fb:a6:c4:f1:
58:1a:66:ba:dc:b3:83:c0:ec:0e:ac:a1:cf:4b:7a:33:fe:be:
50:72:cb:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 02:45:18 2025 by rpki-client