Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/r3GEKzX36jdy1_lHb4z5Rv4nEC0.roa
File: r3GEKzX36jdy1_lHb4z5Rv4nEC0.roa (raw, json)
Hash identifier: xtUtqZwbAI3MmkYS1OuPH2goX5mQQvkaGsMFPA9Ofwo=
Subject key identifier: AF:71:84:2B:35:F7:EA:37:72:D7:F9:47:6F:8C:F9:46:FE:27:10:2D
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 7999B6C0
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/r3GEKzX36jdy1_lHb4z5Rv4nEC0.roa
Signing time: Fri 08 Apr 2022 19:10:45 +0000
ROA not before: Fri 08 Apr 2022 19:10:45 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:180:457:1e3f/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2040116928 (0x7999b6c0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Apr 8 19:10:45 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=af71842b35f7ea3772d7f9476f8cf946fe27102d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:49:33:f7:f2:f0:e6:26:50:e7:e0:28:04:75:
ef:9e:d5:48:38:6d:be:f4:a3:18:78:8c:e6:1d:ea:
d8:4c:d3:8c:a7:41:8f:e1:6f:38:46:5b:c8:fe:d1:
fe:4d:5f:15:f6:39:b1:c7:f9:19:bb:74:0c:7c:8f:
cf:4a:01:b0:fe:16:dd:db:86:b6:12:9c:ae:a8:50:
bb:d3:2b:10:f8:79:f0:d6:39:c0:72:04:29:ff:de:
68:3d:40:1d:1a:f4:7e:46:23:2e:50:73:27:77:03:
54:a4:13:65:1f:a1:d7:04:46:10:30:bb:3c:26:77:
46:7d:e7:21:e3:77:99:a6:0c:c9:90:e6:4a:2f:29:
7b:cb:97:54:88:18:74:cb:49:35:8f:5f:30:13:8b:
64:93:1e:e6:50:49:47:07:31:8d:0b:7b:15:b9:8f:
57:ec:1d:2e:38:a7:16:52:9e:74:3a:a2:b6:ae:18:
ac:eb:25:4a:2e:5f:c7:ff:7c:02:b9:72:8b:5a:7e:
c3:ab:bf:56:1a:42:2d:2d:1d:e3:08:c1:39:2c:5c:
71:8e:95:c9:f5:58:d2:4a:ad:78:75:6a:3e:2c:a9:
eb:92:dc:a7:88:51:2d:4a:97:43:36:11:a6:57:b5:
98:ab:40:a8:ba:19:c1:49:3f:75:01:49:66:d2:2b:
f4:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:71:84:2B:35:F7:EA:37:72:D7:F9:47:6F:8C:F9:46:FE:27:10:2D
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/r3GEKzX36jdy1_lHb4z5Rv4nEC0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
54:4b:d2:47:d8:94:fe:0a:1f:7b:ab:65:72:01:93:b8:1f:80:
7f:b3:08:92:29:91:3d:2f:c0:62:b6:5c:ca:ff:52:b3:a4:0d:
66:de:12:47:b8:8d:10:db:6f:93:b8:33:7c:df:30:f4:40:22:
5d:de:de:f3:a6:17:94:8a:19:41:59:3f:34:d9:42:f1:69:29:
f9:be:a3:fa:fa:6e:81:a4:4e:f9:80:eb:c7:39:5e:ef:b2:5a:
5a:2c:8c:34:7e:88:87:3c:dc:6f:f9:ff:86:ac:a1:de:f4:1e:
7f:70:04:6c:a6:20:bd:b5:a2:80:24:2f:34:dd:83:c7:84:cf:
f3:0a:13:2c:3e:34:d3:73:78:a1:04:a0:1e:43:75:c2:b4:e1:
87:44:4a:b5:3b:35:e4:49:2b:64:ee:26:91:31:58:d5:c6:ff:
30:32:bc:44:ca:9b:b9:85:9d:08:b9:b7:a0:be:ca:0a:82:07:
10:53:5f:f1:3c:78:55:18:88:eb:75:95:09:30:0f:fe:60:fa:
ea:36:1f:9a:91:ff:38:a0:a1:6b:64:b1:58:88:a4:64:9e:b7:
08:3e:f4:78:a4:70:54:f0:e5:f7:e8:6d:3b:f6:46:1b:6d:65:
dc:8a:97:d7:dd:b0:8b:3a:b3:86:3d:75:09:04:1e:c2:d2:ad:
0c:6b:ce:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 06:02:07 2025 by rpki-client