Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/Ge8JEQnwGebnfcyprdpu3qhJAmw.roa
File: Ge8JEQnwGebnfcyprdpu3qhJAmw.roa (raw, json)
Hash identifier: 13Yw3WmeTS9/q1x4FK2Qz/aU4/qGGL6iTP+i7peZwNk=
Subject key identifier: 19:EF:09:11:09:F0:19:E6:E7:7D:CC:A9:AD:DA:6E:DE:A8:49:02:6C
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0186A2B13C175111044E39BD5C396F4B871D
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/Ge8JEQnwGebnfcyprdpu3qhJAmw.roa
Signing time: Thu 02 Mar 2023 14:19:29 +0000
ROA not before: Thu 02 Mar 2023 14:19:29 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:a2:b1:3c:17:51:11:04:4e:39:bd:5c:39:6f:4b:87:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Mar 2 14:19:29 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=19ef091109f019e6e77dcca9adda6edea849026c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:f2:2f:1b:42:d5:66:c9:25:60:de:06:73:d5:
da:f7:31:00:02:d0:f4:ad:ee:27:c1:a0:ed:e1:74:
ff:f5:08:5a:03:cc:9b:1c:e8:88:cf:d2:ba:8d:6d:
4c:a4:ce:ea:2b:62:07:b7:0d:2d:c5:7e:ef:f3:ff:
6f:95:38:e1:bd:84:10:98:0e:bb:bc:2e:8a:42:37:
ee:f5:0f:cf:14:08:7f:d5:8b:ee:48:39:06:22:14:
53:cd:08:4b:9e:a1:3d:d2:54:15:a3:66:93:26:80:
74:22:c4:a1:16:b5:bc:e6:b8:05:5d:7a:18:22:1e:
d3:1d:72:ce:55:2b:dc:93:c9:19:e8:a4:91:7d:7b:
e4:8d:9a:e0:b7:1a:17:ef:da:95:fb:86:c1:45:33:
ea:ec:be:64:eb:3d:74:b3:9c:06:b8:10:08:f7:90:
c6:c7:61:bd:a5:05:a7:73:70:07:74:67:cf:72:59:
09:de:dc:1a:4d:29:ce:bf:ea:c4:62:47:cc:01:19:
3b:f6:4b:d7:a8:57:7e:c3:58:ed:4a:3c:2c:94:38:
ae:13:03:a9:ef:d4:96:84:51:7f:5c:0a:94:bf:da:
85:86:ba:06:79:bc:54:51:be:f9:29:59:fc:32:80:
3a:c5:34:18:fa:1d:71:f7:d7:cb:25:93:ac:28:4b:
a4:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:EF:09:11:09:F0:19:E6:E7:7D:CC:A9:AD:DA:6E:DE:A8:49:02:6C
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/Ge8JEQnwGebnfcyprdpu3qhJAmw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
41:d9:e9:c4:f5:7d:1f:de:cd:55:04:0b:c7:36:55:a8:56:3d:
9d:1e:09:17:eb:cc:cc:05:e3:1c:bd:b1:6b:ac:dd:7e:6c:13:
11:9b:33:21:1d:81:8a:18:a9:db:bd:9e:92:ca:d1:ce:d8:c7:
78:8c:e0:83:01:1d:70:0c:cc:3b:42:b3:a2:f1:70:38:cc:45:
2d:57:e1:74:72:64:0e:da:f5:1f:de:bf:2d:33:39:d6:b4:46:
9c:85:ee:e2:22:30:b5:1e:56:d8:6c:ec:89:20:f5:a5:c7:d3:
f3:9c:34:42:6a:35:91:53:00:7c:68:33:06:42:fd:b8:d8:27:
2e:9a:89:f7:e5:38:b0:46:44:e9:91:68:fa:3b:0f:b0:15:12:
4e:66:7a:4b:9d:b6:9e:39:2e:69:cc:05:22:e5:67:e2:12:49:
be:ec:08:a3:36:b5:0d:f3:d5:93:c4:e5:e6:9f:e8:74:6a:be:
aa:9b:49:38:4e:9c:cf:1d:89:25:e0:83:60:a7:f7:f1:7d:18:
80:cc:a1:83:a9:bf:95:a0:85:87:2b:c0:3f:62:72:53:4e:cb:
24:dd:ee:81:dd:4c:d7:09:2c:63:1d:ea:9b:3b:67:58:98:06:
9a:50:15:ae:8c:aa:59:80:6a:71:94:78:42:0d:c5:33:e0:38:
5c:07:1e:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 2 17:24:06 2025 by rpki-client