Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/G1eqjB2Hr9oWfbeA8tmQJBDaz7E.roa
File: G1eqjB2Hr9oWfbeA8tmQJBDaz7E.roa (raw, json)
Hash identifier: K7LIRxxTDqwSlbTxT3JhiIcsCDSj8TiFqadnWKdQeoE=
Subject key identifier: 1B:57:AA:8C:1D:87:AF:DA:16:7D:B7:80:F2:D9:90:24:10:DA:CF:B1
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0189CB2A5EE49E501FAC1DD9A05EA2A5754E
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/G1eqjB2Hr9oWfbeA8tmQJBDaz7E.roa
Signing time: Sun 06 Aug 2023 14:04:58 +0000
ROA not before: Sun 06 Aug 2023 14:04:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:188:7858:a003/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:189:a0e4:5c7d/128 maxlen: 128
2001:67c:64:ffff:0:189:cb29:b7c5/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:cb:2a:5e:e4:9e:50:1f:ac:1d:d9:a0:5e:a2:a5:75:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Aug 6 14:04:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=1b57aa8c1d87afda167db780f2d9902410dacfb1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:7a:10:33:4a:84:61:cf:91:9a:05:12:04:e4:
a6:24:aa:bb:2c:1d:72:a1:a8:52:6a:8c:17:d0:c6:
7a:e6:12:ce:c7:6c:85:67:94:e5:e8:71:c9:da:67:
fb:c1:6e:8f:74:57:fe:9a:f6:88:ca:90:14:c1:b0:
b3:bc:3a:52:8f:4d:07:b0:99:74:b0:55:c4:14:73:
00:34:4d:0d:b1:b5:e0:05:da:a6:f9:24:1d:4d:4c:
b3:40:28:d4:86:2b:6f:84:49:ed:40:e3:4c:35:79:
b0:e4:a4:07:8f:06:a9:74:5f:bb:1e:3f:b8:bd:10:
68:81:7a:57:c8:21:27:17:69:8e:02:61:ec:9f:2a:
16:93:9d:2d:7d:c4:6f:b8:14:fa:cc:4c:78:b6:16:
55:a8:9a:a0:c0:e3:86:62:e1:0c:9f:e2:01:78:ba:
40:0a:63:eb:14:46:9d:fb:93:80:37:81:9e:9c:f8:
44:ee:6e:23:79:97:83:23:0b:ec:a5:46:ce:53:f8:
c6:6e:94:ab:5f:11:c5:7c:95:17:d1:4b:8a:e9:cd:
e7:67:4a:d9:8a:80:8f:ff:b7:78:a6:bf:a1:f9:06:
e4:86:3b:e3:2f:57:ff:88:07:4a:80:ab:3f:a4:66:
67:b7:e4:87:8e:1a:1e:16:76:b9:a8:96:43:2c:6e:
be:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:57:AA:8C:1D:87:AF:DA:16:7D:B7:80:F2:D9:90:24:10:DA:CF:B1
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/G1eqjB2Hr9oWfbeA8tmQJBDaz7E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
5b:9f:17:6b:91:5a:9c:84:9b:6d:79:67:b1:b5:c8:87:e1:3b:
d2:cc:62:42:b7:ca:78:c6:e3:c4:6e:a0:38:93:9e:41:69:bb:
6e:fb:3b:e9:57:0b:36:82:ce:30:af:a0:20:40:84:96:20:1f:
95:e4:be:80:38:cf:6b:12:16:b2:de:63:62:ec:3d:01:26:fa:
0e:d6:5c:ae:82:4b:fe:e2:07:a2:c3:b4:82:e7:9a:02:32:d5:
26:e0:38:db:76:77:7d:9f:e8:43:84:66:77:22:ba:3a:10:b8:
4c:70:08:33:d4:4e:3f:76:87:6b:73:3d:1a:ed:26:1e:52:66:
8e:59:ed:c5:3d:26:a1:d8:22:73:a7:d5:aa:07:f5:a8:76:23:
74:90:44:42:44:69:eb:64:f4:bb:46:de:4a:75:6a:f5:a3:ad:
5c:d8:f5:99:99:aa:ef:d7:ad:4c:b8:b5:a9:49:40:5f:b5:de:
4f:46:2f:c9:89:db:b9:65:31:89:44:86:70:c8:4e:b6:87:45:
60:b8:06:48:91:d9:16:c2:3d:8b:44:6d:f0:ec:f9:52:74:6f:
df:8d:07:32:9b:7c:54:1c:8e:86:a2:b9:46:f6:c5:d2:ab:89:
48:08:9f:d5:d5:47:b9:65:54:b8:bc:79:ad:03:d2:03:fc:f9:
9c:8b:2d:f2
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYnLKl7knlAfrB3ZoF6ipXVOMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcyMDQ3YmUxNWIyNzU5MDJkY2Y2MTdkYzNkMGUxNmRjMWYz
MDgwMjIwHhcNMjMwODA2MTQwNDU4WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxYjU3YWE4YzFkODdhZmRhMTY3ZGI3ODBmMmQ5OTAyNDEwZGFjZmIxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1XoQM0qEYc+RmgUSBOSmJKq7LB1y
oahSaowX0MZ65hLOx2yFZ5Tl6HHJ2mf7wW6PdFf+mvaIypAUwbCzvDpSj00HsJl0
sFXEFHMANE0NsbXgBdqm+SQdTUyzQCjUhitvhEntQONMNXmw5KQHjwapdF+7Hj+4
vRBogXpXyCEnF2mOAmHsnyoWk50tfcRvuBT6zEx4thZVqJqgwOOGYuEMn+IBeLpA
CmPrFEad+5OAN4GenPhE7m4jeZeDIwvspUbOU/jGbpSrXxHFfJUX0UuK6c3nZ0rZ
ioCP/7d4pr+h+QbkhjvjL1f/iAdKgKs/pGZnt+SHjhoeFna5qJZDLG6+9QIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFBtXqowdh6/aFn23gPLZkCQQ2s+xMB8GA1UdIwQY
MBaAFHIEe+FbJ1kC3PYX3D0OFtwfMIAiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMt
MWFiZTNhYzEwYWE2LzEvRzFlcWpCMkhyOW9XZmJlQTh0bVFKQkRhejdFLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMtMWFiZTNhYzEwYWE2
LzEvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBAFufF2uRWpyEm215Z7G1
yIfhO9LMYkK3ynjG48RuoDiTnkFpu277O+lXCzaCzjCvoCBAhJYgH5XkvoA4z2sS
FrLeY2LsPQEm+g7WXK6CS/7iB6LDtILnmgIy1SbgONt2d32f6EOEZnciujoQuExw
CDPUTj92h2tzPRrtJh5SZo5Z7cU9JqHYInOn1aoH9ah2I3SQREJEaetk9LtG3kp1
avWjrVzY9ZmZqu/XrUy4talJQF+13k9GL8mJ27llMYlEhnDITraHRWC4BkiR2RbC
PYtEbfDs+VJ0b9+NBzKbfFQcjoaiuUb2xdKriUgIn9XVR7llVLi8ea0D0gP8+ZyL
LfI=
-----END CERTIFICATE-----
Generated at Thu May 1 02:59:54 2025 by rpki-client