Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/gdxH4T2EpILQ5uRmd_Qs1F_yhzc.roa
File: gdxH4T2EpILQ5uRmd_Qs1F_yhzc.roa (raw, json)
Hash identifier: 4MzNVt4HB+zoOu32QBu9cdNzMtmdQmnGRVTN2x1Qhvc=
Subject key identifier: 81:DC:47:E1:3D:84:A4:82:D0:E6:E4:66:77:F4:2C:D4:5F:F2:87:37
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0184E7FE68452A22B015CC013E1AB2EB2263
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/gdxH4T2EpILQ5uRmd_Qs1F_yhzc.roa
Signing time: Tue 06 Dec 2022 15:12:00 +0000
ROA not before: Tue 06 Dec 2022 15:12:00 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:e7:fe:68:45:2a:22:b0:15:cc:01:3e:1a:b2:eb:22:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Dec 6 15:12:00 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=81dc47e13d84a482d0e6e46677f42cd45ff28737
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:98:be:ac:12:69:8c:61:b5:44:80:71:6e:ee:
b4:fe:f7:60:5d:9b:de:88:37:21:e6:2e:5b:9f:71:
a3:d3:7e:f7:35:2b:78:12:68:c5:ba:1c:fb:8c:7a:
74:81:9e:55:da:81:07:7c:9a:a5:94:9c:19:5a:be:
c4:b7:40:e0:e3:77:31:5a:92:bf:b8:e6:99:a1:39:
0b:f3:5f:c1:b7:ea:a7:c5:dd:f4:1d:01:30:b6:79:
d1:07:31:4b:4c:20:3b:a1:c8:91:7a:0f:28:43:79:
8e:49:a6:8c:84:5a:91:37:83:74:47:c8:4d:9a:e7:
cc:6b:02:fe:60:24:56:ae:16:14:b5:83:67:76:94:
bc:57:cd:d1:e4:7a:7c:b4:6d:fe:b9:f8:b7:a6:e0:
a9:46:f5:16:18:59:0a:7b:33:65:78:ca:0b:bc:b9:
8d:ca:e1:6c:e8:46:52:65:93:11:41:73:01:69:71:
d8:6e:95:72:e3:50:3b:4f:e9:58:9b:ff:b4:93:a0:
98:a3:8f:ad:54:fa:04:97:f6:15:3d:a9:32:68:bb:
9f:ea:72:78:58:fa:71:a4:3e:dc:c0:45:fc:c5:2f:
7f:ee:5c:60:03:ab:ee:d7:7a:de:ca:28:dd:e3:05:
1a:7b:d9:50:f6:38:76:ff:c4:b7:08:f4:6b:3b:46:
ac:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:DC:47:E1:3D:84:A4:82:D0:E6:E4:66:77:F4:2C:D4:5F:F2:87:37
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/gdxH4T2EpILQ5uRmd_Qs1F_yhzc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
45:bd:8b:1d:0f:ce:42:f0:aa:c3:30:76:00:7a:b0:08:81:2f:
0b:39:e6:b5:50:81:1b:a6:f7:a0:cf:60:62:86:17:00:8d:60:
3a:5a:ee:a3:0c:85:7a:d9:5d:03:4f:4e:0b:3a:58:fb:77:98:
19:a9:e5:2c:10:93:fd:b1:19:e1:21:60:89:ad:22:c1:6c:01:
c6:8f:19:cb:ec:b7:56:0e:7a:08:b0:b4:06:77:d4:a4:47:f8:
aa:a6:80:47:f7:e5:60:78:71:e6:94:40:1e:c0:22:ff:78:dc:
f4:5d:09:29:11:16:37:b2:e0:92:cf:c9:79:4f:fd:ef:f0:96:
56:7c:23:97:8b:60:f4:e3:09:c0:9b:04:11:2e:16:93:dd:19:
b8:41:b5:6c:bc:25:9e:31:46:00:6e:76:bf:88:46:93:d1:ae:
9a:da:34:e3:8e:12:99:cc:e5:1f:3a:68:2f:42:68:ec:22:d5:
22:1b:53:a8:c1:94:98:4b:13:1c:29:d5:41:bb:e9:15:a5:bd:
10:54:9b:93:05:9d:e9:03:f8:7e:9d:84:ba:34:92:c1:52:7a:
6b:48:d4:ec:89:26:6f:af:09:5d:75:5e:5c:8b:00:1b:a7:61:
8f:74:0c:e9:41:ed:53:5f:51:74:2a:5f:d3:cf:8e:f3:f6:14:
ee:a1:23:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 22:23:44 2025 by rpki-client