Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/G6sXLDFPkc7O6tpd4p33yGgX52E.roa
File: G6sXLDFPkc7O6tpd4p33yGgX52E.roa (raw, json)
Hash identifier: gBf6DZVKrXqgqI8Z0IfV6VEMFL2EGmEvWbDrFass9Ow=
Subject key identifier: 1B:AB:17:2C:31:4F:91:CE:CE:EA:DA:5D:E2:9D:F7:C8:68:17:E7:61
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 018992C14500D20E71194C8150E443F26155
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/G6sXLDFPkc7O6tpd4p33yGgX52E.roa
Signing time: Wed 26 Jul 2023 15:11:26 +0000
ROA not before: Wed 26 Jul 2023 15:11:26 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:188:7858:a003/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:92:c1:45:00:d2:0e:71:19:4c:81:50:e4:43:f2:61:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Jul 26 15:11:26 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=1bab172c314f91ceceeada5de29df7c86817e761
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:e0:ea:3d:26:9a:66:b6:7c:51:26:16:c2:fb:
99:a2:df:cb:f9:95:e0:b4:bc:aa:90:87:09:0a:a3:
b7:56:71:00:7a:0a:ad:c0:7a:ac:5e:67:8d:51:e1:
8f:bc:6f:f6:f5:ca:18:33:d5:e4:59:27:1b:93:08:
4a:7e:37:9e:8a:56:04:c2:39:78:89:e8:73:8f:58:
3d:21:7f:5c:66:ed:b1:26:b1:11:e2:d4:0a:2e:23:
09:fc:69:76:83:32:6d:57:eb:6d:1c:07:60:59:d0:
6f:03:72:c2:cf:8a:a2:81:be:26:90:5a:1c:1c:00:
05:87:2f:c6:9f:d1:43:e1:a0:83:9d:8c:7d:55:e1:
af:4a:32:e4:6a:e2:d3:6a:1c:c9:bb:4b:06:b0:20:
16:e5:3c:4c:06:9f:c0:28:df:2b:ef:05:c2:bc:7f:
df:d1:96:76:98:d8:bc:88:d4:7e:40:d2:61:ad:10:
31:52:53:d2:95:4d:f6:32:95:65:3f:15:ba:47:ce:
d2:77:6e:cf:3b:16:cf:fa:07:50:ee:05:d6:b1:c8:
1d:19:a0:06:13:ea:77:88:35:af:57:a9:5e:25:54:
fe:a3:cc:c5:52:d6:e9:06:15:9e:b2:e0:e0:82:d8:
fa:c2:ea:53:be:75:ed:68:ac:82:c7:ed:b1:43:2d:
07:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:AB:17:2C:31:4F:91:CE:CE:EA:DA:5D:E2:9D:F7:C8:68:17:E7:61
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/G6sXLDFPkc7O6tpd4p33yGgX52E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
6d:f3:bb:62:06:d5:31:f5:ab:57:fc:e4:a3:eb:b3:6a:ae:c1:
c0:ef:b7:31:87:cd:ce:58:4b:35:20:34:ab:ea:08:c1:6f:58:
5e:1c:4d:b0:69:fc:0c:52:7e:d3:81:cd:01:2d:61:32:b8:29:
3b:d0:74:12:8a:c9:5f:cb:4b:e2:99:3c:73:16:ad:2f:c5:c5:
c8:62:e6:61:46:d2:ca:e2:5f:74:92:ab:aa:4f:b2:9f:13:15:
a1:b2:55:5a:a7:2c:78:3c:24:22:e8:c8:fe:26:1c:ca:10:9c:
3d:59:ce:c9:59:d6:77:a9:d4:af:2f:5e:89:c5:3b:63:d3:56:
c6:0e:85:a8:d5:55:3f:41:43:f2:bc:4c:47:3b:7c:0d:28:85:
1c:56:ae:55:20:47:3d:d1:32:81:a3:8b:2a:c6:cb:88:36:9b:
1e:5f:82:d2:0e:89:44:71:03:c1:78:20:1d:1f:fe:87:c5:a0:
8b:f8:da:89:54:1c:f5:c2:14:e9:80:14:17:24:ee:54:b0:ad:
79:c2:c3:57:56:db:f5:29:7b:67:cc:02:a1:eb:45:11:2e:25:
8a:06:f1:af:c5:ab:76:3f:a5:28:ef:a7:50:92:b8:64:f5:d9:
e0:b5:1b:11:8e:8c:fc:d1:a6:8e:ea:e8:4b:af:e7:61:ce:86:
d6:3f:61:f9
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYmSwUUA0g5xGUyBUORD8mFVMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcyMDQ3YmUxNWIyNzU5MDJkY2Y2MTdkYzNkMGUxNmRjMWYz
MDgwMjIwHhcNMjMwNzI2MTUxMTI2WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxYmFiMTcyYzMxNGY5MWNlY2VlYWRhNWRlMjlkZjdjODY4MTdlNzYxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApODqPSaaZrZ8USYWwvuZot/L+ZXg
tLyqkIcJCqO3VnEAegqtwHqsXmeNUeGPvG/29coYM9XkWScbkwhKfjeeilYEwjl4
iehzj1g9IX9cZu2xJrER4tQKLiMJ/Gl2gzJtV+ttHAdgWdBvA3LCz4qigb4mkFoc
HAAFhy/Gn9FD4aCDnYx9VeGvSjLkauLTahzJu0sGsCAW5TxMBp/AKN8r7wXCvH/f
0ZZ2mNi8iNR+QNJhrRAxUlPSlU32MpVlPxW6R87Sd27POxbP+gdQ7gXWscgdGaAG
E+p3iDWvV6leJVT+o8zFUtbpBhWesuDggtj6wupTvnXtaKyCx+2xQy0HIwIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFBurFywxT5HOzuraXeKd98hoF+dhMB8GA1UdIwQY
MBaAFHIEe+FbJ1kC3PYX3D0OFtwfMIAiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMt
MWFiZTNhYzEwYWE2LzEvRzZzWExERlBrYzdPNnRwZDRwMzN5R2dYNTJFLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMtMWFiZTNhYzEwYWE2
LzEvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBAG3zu2IG1TH1q1f85KPr
s2quwcDvtzGHzc5YSzUgNKvqCMFvWF4cTbBp/AxSftOBzQEtYTK4KTvQdBKKyV/L
S+KZPHMWrS/Fxchi5mFG0sriX3SSq6pPsp8TFaGyVVqnLHg8JCLoyP4mHMoQnD1Z
zslZ1nep1K8vXonFO2PTVsYOhajVVT9BQ/K8TEc7fA0ohRxWrlUgRz3RMoGjiyrG
y4g2mx5fgtIOiURxA8F4IB0f/ofFoIv42olUHPXCFOmAFBck7lSwrXnCw1dW2/Up
e2fMAqHrRREuJYoG8a/Fq3Y/pSjvp1CSuGT12eC1GxGOjPzRpo7q6Euv52HOhtY/
Yfk=
-----END CERTIFICATE-----
Generated at Thu May 1 05:05:28 2025 by rpki-client