Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/gvcpyuScYdybuXTnE9pjeZ2g4QU.roa
File: gvcpyuScYdybuXTnE9pjeZ2g4QU.roa (raw, json)
Hash identifier: F66Hw7ZOBOgl0wXS817XRs1yT+EOITf9YRgoXKDGK5o=
Subject key identifier: 82:F7:29:CA:E4:9C:61:DC:9B:B9:74:E7:13:DA:63:79:9D:A0:E1:05
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0184EBA43F56B53260E96B35B59F94C5711B
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/gvcpyuScYdybuXTnE9pjeZ2g4QU.roa
Signing time: Wed 07 Dec 2022 08:12:00 +0000
ROA not before: Wed 07 Dec 2022 08:12:00 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:eb:a4:3f:56:b5:32:60:e9:6b:35:b5:9f:94:c5:71:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Dec 7 08:12:00 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=82f729cae49c61dc9bb974e713da63799da0e105
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:de:3a:2d:a5:80:88:ad:26:5f:96:2b:c4:18:
b0:43:ae:a9:02:c4:28:da:05:fc:01:f9:81:55:ac:
a9:fa:ce:d0:c2:83:e9:99:7d:db:6c:3a:4c:ee:c1:
1c:50:47:25:99:3d:6a:0b:30:88:c4:71:c7:93:b5:
8b:3c:cd:36:32:54:3b:15:37:2f:af:6c:af:5b:97:
a6:1d:59:df:95:a3:88:9d:7f:c4:2d:b8:7b:68:a6:
fa:4b:90:18:b6:3f:ec:5b:25:68:8f:aa:1a:4f:a7:
79:d8:2d:6c:6d:df:b0:aa:5f:29:55:19:fc:66:9e:
23:de:bf:e2:4b:f3:ea:0c:d5:a8:3f:b3:97:0e:72:
c2:b3:c5:1b:98:cb:a3:2a:5b:3c:24:67:28:92:5b:
7f:ad:7e:18:fb:e2:cd:0e:a0:0f:51:dd:32:94:d2:
74:92:52:5c:71:04:35:94:a3:ab:42:8e:03:b2:02:
32:d4:94:9d:a5:aa:e9:30:cc:f4:3d:80:1c:2d:bf:
fc:74:b9:e6:cf:4d:5b:e3:43:61:ee:34:00:9d:ec:
be:07:9d:fb:37:2d:20:18:b7:ae:c8:f6:22:f3:77:
b4:79:55:be:9b:fb:64:74:7a:b9:ed:51:53:eb:16:
c9:68:73:0e:42:20:8a:79:02:dc:94:05:7d:bb:4b:
53:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:F7:29:CA:E4:9C:61:DC:9B:B9:74:E7:13:DA:63:79:9D:A0:E1:05
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/gvcpyuScYdybuXTnE9pjeZ2g4QU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
8f:f2:b0:4e:d2:0d:d0:52:bd:9e:c4:af:6b:95:4d:ab:f5:98:
41:68:42:cd:0d:fd:12:56:b3:cd:6f:87:6c:25:4a:57:67:d6:
92:50:8c:72:7a:a4:b8:ca:c1:42:30:eb:c1:d7:5d:f0:02:89:
94:9a:ad:29:dc:7c:ed:61:fb:2a:12:de:a3:37:78:18:53:2d:
03:45:87:58:b4:53:a2:2f:72:76:ac:ed:6b:a4:bd:13:62:e0:
79:f0:18:3c:6a:a2:d3:7c:1e:d7:54:62:28:f5:36:6c:68:27:
d1:0b:f2:4c:5a:03:89:08:e3:24:d7:d2:81:f5:fd:a5:2e:fa:
ba:4b:67:ae:ab:c9:71:1a:65:7c:84:08:57:09:1c:9a:28:4f:
a9:32:dc:3a:16:f3:5e:b0:99:45:6e:84:26:eb:f1:a5:fc:08:
84:5c:a4:6d:11:52:7f:8e:1f:f0:4a:3d:87:d8:cb:d9:20:20:
cf:77:f8:b8:04:bb:84:4f:eb:09:1e:2f:38:17:85:3c:59:ed:
54:e5:fa:d1:eb:65:e2:d2:a1:a8:ea:80:66:2a:d0:7f:26:ea:
19:7e:b2:a5:90:aa:3c:bd:56:70:96:ef:85:30:99:09:a2:b5:
cf:5a:75:31:95:2d:bd:60:ba:3d:f2:c4:75:6e:3e:06:bd:51:
e7:d5:21:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 2 13:43:32 2025 by rpki-client