Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/t-2GUbfDjVMegbCgAze0lr2MOOY.roa
File: t-2GUbfDjVMegbCgAze0lr2MOOY.roa (raw, json)
Hash identifier: gvZ4Eqd7LXDNZqYb/q1leM4KnowjpOKwRsdWP+Btggo=
Subject key identifier: B7:ED:86:51:B7:C3:8D:53:1E:81:B0:A0:03:37:B4:96:BD:8C:38:E6
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 018515B099658ACACBA580B8359E7CDDB7DB
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/t-2GUbfDjVMegbCgAze0lr2MOOY.roa
Signing time: Thu 15 Dec 2022 12:09:33 +0000
ROA not before: Thu 15 Dec 2022 12:09:33 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:15:b0:99:65:8a:ca:cb:a5:80:b8:35:9e:7c:dd:b7:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Dec 15 12:09:33 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=b7ed8651b7c38d531e81b0a00337b496bd8c38e6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:d9:e4:53:4e:86:46:8a:cb:5a:a3:3f:20:bb:
05:26:1f:d5:98:1a:3d:30:05:dd:eb:6a:96:f8:26:
23:73:14:4b:ee:fd:23:ad:51:d0:cb:62:f8:2d:d3:
5a:b0:5d:ac:0f:9c:fb:75:7b:4d:49:0a:62:6d:b3:
29:53:96:ea:59:7b:99:f2:31:f7:c8:31:20:85:69:
61:fc:1b:63:be:d2:8b:b2:72:f5:9a:ba:d8:53:d2:
bb:be:67:3c:e6:91:af:9d:8e:eb:68:e8:71:83:ff:
59:51:92:e8:b1:b7:35:3f:d1:b5:71:d4:d0:ad:31:
f9:2d:4d:66:0a:59:33:e8:d1:b7:e7:2d:23:1d:59:
10:b5:06:93:a6:c9:d6:5c:93:40:93:a2:62:d3:8f:
13:74:47:24:74:69:a5:55:5e:16:c8:54:ed:6e:bd:
9d:d9:49:26:45:30:03:cc:b7:06:bf:e3:27:f9:ce:
78:b5:bc:53:44:c8:fa:48:c6:08:df:d8:ed:17:cf:
c9:46:61:dc:ed:98:fc:3a:1a:fd:a1:25:94:5f:c0:
cf:89:8c:4b:c1:1a:03:f5:e0:b9:af:23:3a:53:85:
7e:9d:0c:14:dd:d2:e2:fd:fa:9c:53:9c:ac:15:67:
11:11:4c:f5:0e:a0:87:f4:1f:d3:a1:3b:93:34:bf:
04:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:ED:86:51:B7:C3:8D:53:1E:81:B0:A0:03:37:B4:96:BD:8C:38:E6
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/t-2GUbfDjVMegbCgAze0lr2MOOY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
60:c0:fb:02:d8:61:e3:7d:d8:df:dc:7c:bf:cc:41:20:88:79:
82:09:b4:f1:e1:32:b1:df:5a:ac:41:8d:9e:c3:6c:6a:5a:31:
94:e8:30:c1:90:00:e9:b8:0d:bf:86:37:19:aa:6c:cd:fd:5f:
92:b6:ad:67:57:01:8b:05:3f:79:f6:52:4f:6d:ac:31:e8:05:
78:72:62:87:2d:d7:9b:5d:44:47:4e:f3:9b:19:3d:44:e8:44:
cc:52:db:5f:eb:35:8d:e8:ce:a4:76:48:f2:9f:55:1d:24:8c:
9d:87:b2:87:dd:ab:ef:00:c8:42:ea:83:92:1d:b6:55:7b:2d:
5a:22:bd:06:f4:db:87:ed:4e:c7:bc:e9:24:d5:78:96:4d:a7:
04:9c:50:8a:2c:18:90:95:34:66:e4:e0:96:f3:1f:fb:f0:3f:
8a:2a:81:2c:10:d9:90:5d:a9:77:d2:45:ea:36:cb:24:2f:f0:
81:9e:84:d5:f8:61:af:5d:65:26:30:b3:0b:7b:98:80:5e:00:
e9:38:f0:e3:a1:b9:ea:7f:51:b6:ac:1b:b3:2f:d5:dc:3f:ac:
87:f0:28:a7:8a:2d:29:5e:ab:33:a3:3a:90:3a:2d:9a:d4:cb:
e4:57:13:b8:d3:98:ff:a1:38:93:e1:17:6c:ad:d5:82:aa:46:
3f:67:8e:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 06:59:23 2025 by rpki-client