Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/GJrAR8vr7jDuPG2qTk5c8C-4ktQ.roa
File: GJrAR8vr7jDuPG2qTk5c8C-4ktQ.roa (raw, json)
Hash identifier: x6OVwL4VoG7SBwm/d0K9zQppka56+lnYckBZDkTHWUc=
Subject key identifier: 18:9A:C0:47:CB:EB:EE:30:EE:3C:6D:AA:4E:4E:5C:F0:2F:B8:92:D4
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 8E5C828A
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/GJrAR8vr7jDuPG2qTk5c8C-4ktQ.roa
Signing time: Mon 20 Jun 2022 10:09:45 +0000
ROA not before: Mon 20 Jun 2022 10:09:45 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:181:56ba:5b78/128 maxlen: 128
2001:67c:64:ffff:0:181:22f:7a99/128 maxlen: 128
2001:67c:64:ffff:0:181:477e:58d8/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2388427402 (0x8e5c828a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Jun 20 10:09:45 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=189ac047cbebee30ee3c6daa4e4e5cf02fb892d4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:6a:53:b6:79:19:a1:c1:c2:fe:00:d2:0b:fd:
aa:4a:58:f6:22:33:e6:9b:83:1c:01:bd:b7:52:99:
59:af:ea:5f:68:68:a8:1b:19:e0:5a:48:b0:fb:83:
ed:a1:1e:56:3b:ad:40:91:f8:a9:7c:4a:b7:f5:07:
c8:ba:61:03:4e:9f:a6:06:93:b1:9b:d6:f8:27:a6:
24:c3:58:6f:3c:18:82:fa:b8:f3:26:d6:3d:1c:8c:
99:cf:88:f5:7d:e7:ea:1f:97:c3:43:5b:cc:6d:4f:
60:61:81:58:0e:f5:bc:80:e4:03:b0:4c:af:fe:53:
30:36:57:bf:07:57:66:8d:87:a3:52:84:da:8f:73:
2a:28:7d:84:0c:c9:19:ab:54:06:2e:ef:b2:2f:5d:
69:70:6c:75:db:ab:00:66:40:ff:15:d3:be:64:b6:
92:0d:f1:36:16:e0:58:99:2e:ab:39:81:c5:66:09:
47:d2:5f:92:c8:e3:17:89:77:1f:2c:b5:bd:d1:6b:
71:86:c5:3f:b0:e5:82:96:d6:56:2e:9f:b9:fa:56:
ee:39:0a:71:18:d0:24:02:72:a3:31:53:41:12:9b:
cf:af:d0:21:4f:52:9c:10:f2:37:9e:a7:b9:29:bf:
4e:5f:96:d8:77:ab:94:3f:26:7e:e5:94:9c:0c:ea:
6f:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:9A:C0:47:CB:EB:EE:30:EE:3C:6D:AA:4E:4E:5C:F0:2F:B8:92:D4
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/GJrAR8vr7jDuPG2qTk5c8C-4ktQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
8e:dc:a4:d2:8d:19:7e:72:26:ee:8a:65:35:3d:05:37:4d:09:
48:8a:27:f4:6d:a7:56:d2:6f:72:45:98:77:e0:89:3a:ed:44:
ab:bf:7f:85:f4:56:55:3b:52:14:7e:53:90:67:07:7d:84:58:
90:9c:63:ef:65:11:44:63:08:d3:aa:8b:b2:0f:7c:69:62:17:
69:06:55:c5:59:c9:79:3b:1f:6a:c8:0a:0b:a5:c6:f8:7b:dc:
7f:eb:95:31:06:41:58:09:4e:9b:2f:ab:69:ab:27:d2:77:48:
aa:c9:ee:49:f9:37:de:fb:fe:b6:ca:46:fe:f8:b4:93:41:bb:
84:6f:1d:85:7e:da:24:0a:8c:6f:fe:58:3e:00:c6:dc:a5:88:
84:fa:78:7c:25:d5:ae:1c:45:63:c3:7d:4e:3f:3d:75:41:c6:
e6:29:3f:44:4f:1c:58:93:f7:67:68:2d:df:a6:ff:28:1a:79:
f0:90:47:1c:41:af:2b:99:f1:aa:a9:6c:ce:f0:da:d9:6f:61:
3f:f1:67:0b:8e:1f:19:84:0e:99:ab:38:29:93:9a:0f:7c:e7:
27:20:85:c5:9a:a9:35:53:74:e3:04:78:2b:75:7e:00:8a:19:
f4:5b:7f:12:09:a6:3b:42:03:2b:2e:2e:ed:7a:7b:6f:89:e6:
31:fc:27:e8
-----BEGIN CERTIFICATE-----
MIIFATCCA+mgAwIBAgIFAI5cgoowDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMo
NzIwNDdiZTE1YjI3NTkwMmRjZjYxN2RjM2QwZTE2ZGMxZjMwODAyMjAeFw0yMjA2
MjAxMDA5NDVaFw0yMzA3MDEwMDAwMDBaMDMxMTAvBgNVBAMTKDE4OWFjMDQ3Y2Jl
YmVlMzBlZTNjNmRhYTRlNGU1Y2YwMmZiODkyZDQwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQDGalO2eRmhwcL+ANIL/apKWPYiM+abgxwBvbdSmVmv6l9o
aKgbGeBaSLD7g+2hHlY7rUCR+Kl8Srf1B8i6YQNOn6YGk7Gb1vgnpiTDWG88GIL6
uPMm1j0cjJnPiPV95+ofl8NDW8xtT2BhgVgO9byA5AOwTK/+UzA2V78HV2aNh6NS
hNqPcyoofYQMyRmrVAYu77IvXWlwbHXbqwBmQP8V075ktpIN8TYW4FiZLqs5gcVm
CUfSX5LI4xeJdx8stb3Ra3GGxT+w5YKW1lYun7n6Vu45CnEY0CQCcqMxU0ESm8+v
0CFPUpwQ8jeep7kpv05flth3q5Q/Jn7llJwM6m81AgMBAAGjggIaMIICFjAdBgNV
HQ4EFgQUGJrAR8vr7jDuPG2qTk5c8C+4ktQwHwYDVR0jBBgwFoAUcgR74VsnWQLc
9hfcPQ4W3B8wgCIwDgYDVR0PAQH/BAQDAgeAMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvREVGQVVM
VC9jZ1I3NFZzbldRTGM5aGZjUFE0VzNCOHdnQ0kuY2VyMIGNBggrBgEFBQcBCwSB
gDB+MHwGCCsGAQUFBzALhnByc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9y
eS9ERUZBVUxULzVlLzc5ODQ0Ny0yMWY0LTQ1YWItOTlkYy0xYWJlM2FjMTBhYTYv
MS9HSnJBUjh2cjdqRHVQRzJxVGs1YzhDLTRrdFEucm9hMIGBBgNVHR8EejB4MHag
dKByhnByc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzVl
Lzc5ODQ0Ny0yMWY0LTQ1YWItOTlkYy0xYWJlM2FjMTBhYTYvMS9jZ1I3NFZzbldR
TGM5aGZjUFE0VzNCOHdnQ0kuY3JsMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw
MAYIKwYBBQUHAQcBAf8EITAfMAwEAgABMAYDBAPBABgwDwQCAAIwCQMHACABBnwA
ZDANBgkqhkiG9w0BAQsFAAOCAQEAjtyk0o0ZfnIm7oplNT0FN00JSIon9G2nVtJv
ckWYd+CJOu1Eq79/hfRWVTtSFH5TkGcHfYRYkJxj72URRGMI06qLsg98aWIXaQZV
xVnJeTsfasgKC6XG+Hvcf+uVMQZBWAlOmy+raasn0ndIqsnuSfk33vv+tspG/vi0
k0G7hG8dhX7aJAqMb/5YPgDG3KWIhPp4fCXVrhxFY8N9Tj89dUHG5ik/RE8cWJP3
Z2gt36b/KBp58JBHHEGvK5nxqqlszvDa2W9hP/FnC44fGYQOmas4KZOaD3znJyCF
xZqpNVN04wR4K3V+AIoZ9Ft/EgmmO0IDKy4u7Xp7b4nmMfwn6A==
-----END CERTIFICATE-----
Generated at Wed Apr 30 21:17:51 2025 by rpki-client