Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/isGbxG5Is11FIyTDTZEHJgOGhYk.roa
File: isGbxG5Is11FIyTDTZEHJgOGhYk.roa (raw, json)
Hash identifier: WfVuAhvgdvWzSV730SYXpKiEUj8nWQoHAZqHfcKbZ3U=
Subject key identifier: 8A:C1:9B:C4:6E:48:B3:5D:45:23:24:C3:4D:91:07:26:03:86:85:89
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 7E22F248
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/isGbxG5Is11FIyTDTZEHJgOGhYk.roa
Signing time: Sun 24 Apr 2022 17:10:51 +0000
ROA not before: Sun 24 Apr 2022 17:10:51 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:180:466e:42dd/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:180:457:1e3f/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2116219464 (0x7e22f248)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Apr 24 17:10:51 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=8ac19bc46e48b35d452324c34d91072603868589
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:5f:6b:3c:fa:07:72:07:d3:f1:7a:33:dc:85:
b5:a4:33:fa:c3:07:bc:90:08:1f:47:49:e3:61:5f:
51:f5:2c:a3:e8:47:2c:f8:65:55:3d:19:29:ab:9e:
0b:df:7f:62:71:dd:7e:48:eb:d3:ae:fd:ac:dd:a8:
6c:0c:fe:88:73:07:ff:c0:f2:2b:08:11:55:1f:ad:
04:e4:d2:46:a7:3b:1d:02:22:33:11:c0:ef:ee:ad:
77:52:82:fc:a6:d7:3f:bf:b7:67:72:00:f9:b3:d3:
f5:a3:ae:f8:48:c9:68:fb:a7:d1:bb:0e:e5:7c:5b:
36:6a:4f:81:2c:f1:c4:27:06:7c:cd:f7:a2:5c:48:
09:59:31:11:a6:a9:87:06:21:86:1f:f3:da:69:63:
47:53:2d:5b:80:91:85:72:8c:3b:a1:c2:36:1c:cb:
f9:a8:dd:17:7e:e1:72:7c:87:86:22:2d:52:e0:e8:
56:e9:b4:6f:b6:fb:29:f5:4d:c9:3f:45:2e:34:04:
e8:03:b8:58:c8:fd:e3:76:7b:1d:f0:e1:6b:90:5a:
56:b3:2a:a8:08:04:00:73:bc:33:2c:5c:37:81:dc:
fc:3b:9b:c5:98:48:6c:3f:b5:83:16:70:8f:9c:59:
02:8d:3b:3f:0f:8d:64:f9:60:09:93:af:1a:9b:8e:
e6:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:C1:9B:C4:6E:48:B3:5D:45:23:24:C3:4D:91:07:26:03:86:85:89
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/isGbxG5Is11FIyTDTZEHJgOGhYk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
48:b9:de:17:43:a7:d2:8e:c8:04:bb:d1:b9:c3:0a:d8:39:70:
fe:96:92:29:ec:0d:24:6d:9c:88:13:e8:b0:cd:a0:bb:01:a5:
6b:88:75:8e:fc:93:b5:e0:a7:e2:26:83:ff:67:f9:96:c1:0b:
31:06:ef:18:5a:11:c5:31:13:09:9a:cf:a0:f6:69:01:fe:f8:
f0:cb:66:ea:f7:65:a5:b0:d0:73:b1:49:6c:33:b2:ed:b7:88:
55:39:04:d1:21:2f:76:11:69:12:2b:ca:ef:2e:83:50:65:f2:
91:65:1b:05:4e:6c:d6:49:cf:e3:d7:63:f5:2b:05:d3:aa:0c:
ea:3f:b7:79:39:50:36:35:e2:bd:26:4b:0c:8a:10:5a:b8:7c:
b3:d5:5b:02:b1:95:9e:bb:bc:36:94:52:44:da:00:78:bc:75:
be:6c:b5:14:b9:e2:ff:ab:52:d8:4e:b5:31:aa:56:64:4a:7b:
1b:6d:0f:4e:c6:53:a2:53:f0:e9:32:63:e3:f2:96:f9:b3:3f:
a5:4d:67:3b:5d:cf:52:bf:61:20:29:2b:ae:6a:b9:49:80:8e:
be:f1:61:b9:69:70:11:50:79:92:eb:c5:05:83:8e:e6:96:40:
eb:97:30:ed:e4:c6:5c:fd:20:2b:7b:af:1d:20:ad:4e:85:76:
1c:cb:4c:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 00:16:53 2025 by rpki-client