Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/GJr_EnW7LKRHbBc_MIewSKvxdX0.roa
File: GJr_EnW7LKRHbBc_MIewSKvxdX0.roa (raw, json)
Hash identifier: +PA9rKTPWXQkGh32E7c3Y3Au82nxa9EFTKrMseSu9Wk=
Subject key identifier: 18:9A:FF:12:75:BB:2C:A4:47:6C:17:3F:30:87:B0:48:AB:F1:75:7D
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 018957C149CA213116919538C214A49F8413
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/GJr_EnW7LKRHbBc_MIewSKvxdX0.roa
Signing time: Sat 15 Jul 2023 04:13:52 +0000
ROA not before: Sat 15 Jul 2023 04:13:52 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:188:5fe2:b396/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:187:4695:a68a/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:188:7858:a003/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64:ffff:0:187:fa9a:b088/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:187:b2b8:a7dd/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:57:c1:49:ca:21:31:16:91:95:38:c2:14:a4:9f:84:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Jul 15 04:13:52 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=189aff1275bb2ca4476c173f3087b048abf1757d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f1:b5:d8:f2:3d:ec:6a:f3:93:66:f6:90:19:dc:
43:3d:6e:d9:9a:dc:91:e6:3a:62:0a:54:1c:aa:f8:
58:b2:23:86:2f:fe:99:07:a9:3f:e5:9e:ec:74:20:
56:d2:15:7e:75:45:c8:c4:6d:f4:c1:bd:05:fe:ff:
94:65:df:49:ee:3e:6a:eb:45:b5:05:dc:0d:02:c3:
0e:ba:96:3a:72:f7:9f:b7:03:04:ed:f6:7d:7a:1d:
c8:66:a8:44:b0:85:fa:0b:26:29:48:c7:16:42:2d:
1e:3c:52:0a:c1:e0:e0:d6:ca:bb:f4:ca:8c:4b:70:
42:65:5c:fb:77:f6:68:93:e1:5f:92:f5:f6:56:dc:
09:a5:dd:6b:df:2b:2c:a7:b4:c8:83:7d:ef:7b:25:
aa:eb:98:12:b7:d4:f8:f9:b2:1d:b2:db:e2:20:7e:
c4:04:ce:a8:fc:68:48:bc:30:68:fc:f3:f4:dd:11:
c1:68:09:22:c7:2a:85:6f:cf:25:15:09:48:fb:4c:
0e:ad:6e:4d:63:86:fd:66:8b:63:6c:c3:5a:8f:71:
b5:3c:c2:e4:94:cc:0c:74:90:77:ab:89:ec:fb:d5:
de:a2:3f:72:47:bd:68:7d:1b:fd:48:fa:a7:7e:58:
0f:0f:95:e2:d4:41:47:97:e0:35:d2:66:e8:65:4c:
be:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:9A:FF:12:75:BB:2C:A4:47:6C:17:3F:30:87:B0:48:AB:F1:75:7D
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/GJr_EnW7LKRHbBc_MIewSKvxdX0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
89:14:4d:e3:0b:2c:12:8c:1a:62:c4:fe:60:98:fd:ed:bd:4f:
2a:2f:75:57:01:17:5b:0a:b5:e7:74:0f:1d:1f:81:71:f7:71:
4a:43:22:5d:91:ad:6f:e9:7a:32:43:bd:83:3c:07:37:d4:bf:
de:23:c1:5f:96:da:c0:a2:48:4e:89:b1:33:11:76:16:e4:b5:
0a:a7:92:32:2b:76:56:8f:d3:38:a0:eb:83:c4:26:3c:64:50:
7a:ae:da:53:1f:f9:a9:b3:ef:36:bb:ca:6d:57:f5:de:56:26:
d4:92:2e:ec:3c:fd:e8:ac:67:29:61:81:7b:c3:19:bb:d1:06:
7d:b6:ed:3f:3f:8b:e9:0b:9d:ee:8a:ba:78:36:db:d3:b5:5a:
6c:b5:56:39:af:b8:7a:55:81:82:89:b4:3f:7b:39:fd:5a:a5:
09:09:bf:1c:41:cd:db:7e:6b:54:5b:12:8a:c0:95:19:10:0b:
35:f6:f0:30:db:2c:b9:10:7e:34:52:8e:00:23:0b:cd:78:32:
e0:36:15:0a:0e:9f:43:47:d9:70:78:2b:1a:f2:f4:2b:e2:9c:
34:73:d6:50:1e:7e:a5:90:03:1b:81:fa:70:5a:79:af:d5:71:
f0:e6:64:75:2f:96:c0:10:36:ab:9f:16:4f:1a:5c:52:84:ac:
0d:de:9c:72
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYlXwUnKITEWkZU4whSkn4QTMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcyMDQ3YmUxNWIyNzU5MDJkY2Y2MTdkYzNkMGUxNmRjMWYz
MDgwMjIwHhcNMjMwNzE1MDQxMzUyWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxODlhZmYxMjc1YmIyY2E0NDc2YzE3M2YzMDg3YjA0OGFiZjE3NTdkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8bXY8j3savOTZvaQGdxDPW7ZmtyR
5jpiClQcqvhYsiOGL/6ZB6k/5Z7sdCBW0hV+dUXIxG30wb0F/v+UZd9J7j5q60W1
BdwNAsMOupY6cveftwME7fZ9eh3IZqhEsIX6CyYpSMcWQi0ePFIKweDg1sq79MqM
S3BCZVz7d/Zok+FfkvX2VtwJpd1r3yssp7TIg33veyWq65gSt9T4+bIdstviIH7E
BM6o/GhIvDBo/PP03RHBaAkixyqFb88lFQlI+0wOrW5NY4b9ZotjbMNaj3G1PMLk
lMwMdJB3q4ns+9Xeoj9yR71ofRv9SPqnflgPD5Xi1EFHl+A10mboZUy+uQIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFBia/xJ1uyykR2wXPzCHsEir8XV9MB8GA1UdIwQY
MBaAFHIEe+FbJ1kC3PYX3D0OFtwfMIAiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMt
MWFiZTNhYzEwYWE2LzEvR0pyX0VuVzdMS1JIYkJjX01JZXdTS3Z4ZFgwLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMtMWFiZTNhYzEwYWE2
LzEvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBAIkUTeMLLBKMGmLE/mCY
/e29TyovdVcBF1sKted0Dx0fgXH3cUpDIl2RrW/pejJDvYM8BzfUv94jwV+W2sCi
SE6JsTMRdhbktQqnkjIrdlaP0zig64PEJjxkUHqu2lMf+amz7za7ym1X9d5WJtSS
Luw8/eisZylhgXvDGbvRBn227T8/i+kLne6Kung229O1Wmy1VjmvuHpVgYKJtD97
Of1apQkJvxxBzdt+a1RbEorAlRkQCzX28DDbLLkQfjRSjgAjC814MuA2FQoOn0NH
2XB4Kxry9CvinDRz1lAefqWQAxuB+nBaea/VcfDmZHUvlsAQNqufFk8aXFKErA3e
nHI=
-----END CERTIFICATE-----
Generated at Thu May 1 01:48:04 2025 by rpki-client