Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/CgF_GUszHVMK1SZXUpX_eRF0yAo.roa
File: CgF_GUszHVMK1SZXUpX_eRF0yAo.roa (raw, json)
Hash identifier: 9gGXes29Dwloma8FYaTGACVFrs5yC7s/aXI0mrTS7FQ=
Subject key identifier: 0A:01:7F:19:4B:33:1D:53:0A:D5:26:57:52:95:FF:79:11:74:C8:0A
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 6809E3F1
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/CgF_GUszHVMK1SZXUpX_eRF0yAo.roa
Signing time: Sat 05 Feb 2022 06:09:34 +0000
ROA not before: Sat 05 Feb 2022 06:09:34 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:17e:a0dd:2f5b/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1745478641 (0x6809e3f1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Feb 5 06:09:34 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=0a017f194b331d530ad526575295ff791174c80a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:8b:92:42:b9:33:a3:15:04:c2:de:3f:4a:8d:
7e:f8:9e:02:dc:ff:04:81:e3:c1:cd:94:b3:82:a1:
ef:83:fa:a1:b2:54:be:85:43:41:47:3e:bd:15:fd:
15:7e:d2:78:2d:79:16:37:f6:46:ad:f4:c9:6f:a4:
6b:4c:3b:f6:3d:15:0b:a1:a5:14:86:02:05:b1:82:
c7:ce:19:77:8d:1a:a3:70:fe:fd:bb:59:0a:6a:0c:
31:39:e9:82:1c:20:ff:15:31:cb:12:49:15:05:13:
38:79:52:42:de:50:71:72:b7:5a:7e:4d:87:f5:76:
b1:6c:9e:fa:16:59:1e:55:78:11:e1:96:15:08:fa:
88:3d:8b:83:39:f9:89:bc:3a:61:63:7e:2c:2e:96:
5d:87:e5:25:9c:fc:c4:9f:0b:ac:39:22:51:98:9b:
f6:1f:6d:66:2d:3d:48:cd:ef:a8:78:69:f8:97:32:
cb:ed:bf:ab:b1:8b:d7:ce:eb:dd:c1:93:5d:d0:71:
77:f8:88:bf:9f:56:9a:f5:da:26:94:98:63:b7:d7:
8d:57:7f:80:d4:c8:22:a0:8e:89:3c:35:43:6e:d4:
31:64:93:26:88:be:82:0a:f4:9c:66:00:7d:f2:a6:
6a:7e:cc:28:f9:5a:ef:31:22:16:7c:28:66:5f:0c:
f8:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:01:7F:19:4B:33:1D:53:0A:D5:26:57:52:95:FF:79:11:74:C8:0A
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/CgF_GUszHVMK1SZXUpX_eRF0yAo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
95:76:e3:d4:0c:c7:94:7f:76:3a:8a:72:66:de:20:e6:d8:5f:
18:1d:a6:68:3c:9b:69:34:26:a6:30:7d:6b:50:ba:29:b3:26:
f7:fe:e6:f9:17:f6:ee:18:4d:89:5c:ad:39:db:1c:6f:ba:30:
c8:60:a2:18:1e:79:91:68:50:dc:b8:53:0a:39:51:e7:d7:15:
02:f2:74:ad:15:03:4c:69:52:f8:b5:b2:fe:c8:73:22:c6:63:
e3:94:33:d2:15:08:15:ca:5f:48:3e:f4:33:2e:25:33:e1:bb:
99:81:0b:e1:17:8a:15:cc:ec:e7:1b:ab:ea:43:37:02:ee:eb:
e6:b7:e1:e6:23:c9:75:2b:a2:e8:20:7f:f7:b9:b5:51:a5:c0:
da:ac:eb:d6:5a:9b:a5:a8:93:df:ec:90:ce:1b:51:36:61:51:
06:b2:34:3f:91:f6:21:b0:37:f5:ae:10:9b:ee:6a:ce:5c:83:
d0:e7:f2:c9:ac:6d:92:4d:2e:3e:28:5f:6e:63:c5:a3:9e:d3:
a6:4e:94:0a:a2:c3:57:05:3e:84:09:4c:af:e6:dd:b9:7a:48:
0e:ff:02:07:68:a9:8c:a0:d8:7b:91:40:ff:04:bc:c1:49:3e:
74:91:60:a1:d4:5f:4d:62:de:4e:fe:0f:23:42:9a:44:a6:01:
ca:7b:7a:b9
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgIEaAnj8TANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg3
MjA0N2JlMTViMjc1OTAyZGNmNjE3ZGMzZDBlMTZkYzFmMzA4MDIyMB4XDTIyMDIw
NTA2MDkzNFoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoMGEwMTdmMTk0YjMz
MWQ1MzBhZDUyNjU3NTI5NWZmNzkxMTc0YzgwYTCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAMOLkkK5M6MVBMLeP0qNfvieAtz/BIHjwc2Us4Kh74P6obJU
voVDQUc+vRX9FX7SeC15Fjf2Rq30yW+ka0w79j0VC6GlFIYCBbGCx84Zd40ao3D+
/btZCmoMMTnpghwg/xUxyxJJFQUTOHlSQt5QcXK3Wn5Nh/V2sWye+hZZHlV4EeGW
FQj6iD2Lgzn5ibw6YWN+LC6WXYflJZz8xJ8LrDkiUZib9h9tZi09SM3vqHhp+Jcy
y+2/q7GL187r3cGTXdBxd/iIv59WmvXaJpSYY7fXjVd/gNTIIqCOiTw1Q27UMWST
Joi+ggr0nGYAffKman7MKPla7zEiFnwoZl8M+JsCAwEAAaOCAhowggIWMB0GA1Ud
DgQWBBQKAX8ZSzMdUwrVJldSlf95EXTICjAfBgNVHSMEGDAWgBRyBHvhWydZAtz2
F9w9DhbcHzCAIjAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L2NnUjc0VnNuV1FMYzloZmNQUTRXM0I4d2dDSS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvNWUvNzk4NDQ3LTIxZjQtNDVhYi05OWRjLTFhYmUzYWMxMGFhNi8x
L0NnRl9HVXN6SFZNSzFTWlhVcFhfZVJGMHlBby5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNWUv
Nzk4NDQ3LTIxZjQtNDVhYi05OWRjLTFhYmUzYWMxMGFhNi8xL2NnUjc0VnNuV1FM
YzloZmNQUTRXM0I4d2dDSS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAw
BggrBgEFBQcBBwEB/wQhMB8wDAQCAAEwBgMEA8EAGDAPBAIAAjAJAwcAIAEGfABk
MA0GCSqGSIb3DQEBCwUAA4IBAQCVduPUDMeUf3Y6inJm3iDm2F8YHaZoPJtpNCam
MH1rULopsyb3/ub5F/buGE2JXK052xxvujDIYKIYHnmRaFDcuFMKOVHn1xUC8nSt
FQNMaVL4tbL+yHMixmPjlDPSFQgVyl9IPvQzLiUz4buZgQvhF4oVzOznG6vqQzcC
7uvmt+HmI8l1K6LoIH/3ubVRpcDarOvWWpulqJPf7JDOG1E2YVEGsjQ/kfYhsDf1
rhCb7mrOXIPQ5/LJrG2STS4+KF9uY8WjntOmTpQKosNXBT6ECUyv5t25ekgO/wIH
aKmMoNh7kUD/BLzBST50kWCh1F9NYt5O/g8jQppEpgHKe3q5
-----END CERTIFICATE-----
Generated at Thu May 1 02:53:16 2025 by rpki-client