Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/GKPkZlgRrtwFTR-ZiJ7cYwm7wQ8.roa
File: GKPkZlgRrtwFTR-ZiJ7cYwm7wQ8.roa (raw, json)
Hash identifier: HN73cNfFjQVWP6gMMUzWCFOLGss2IyduzUFpsGFqroQ=
Subject key identifier: 18:A3:E4:66:58:11:AE:DC:05:4D:1F:99:88:9E:DC:63:09:BB:C1:0F
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 01835DD3924A59BCE1DFB03FA6676B234833
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/GKPkZlgRrtwFTR-ZiJ7cYwm7wQ8.roa
Signing time: Wed 21 Sep 2022 02:14:50 +0000
ROA not before: Wed 21 Sep 2022 02:14:50 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:182:3f1d:a803/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:183:50b3:5643/128 maxlen: 128
2001:67c:64:ffff:0:182:7cb2:99d4/128 maxlen: 128
2001:67c:64:ffff:0:183:1279:659d/128 maxlen: 128
2001:67c:64:ffff:0:182:383f:6b78/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:5d:d3:92:4a:59:bc:e1:df:b0:3f:a6:67:6b:23:48:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Sep 21 02:14:50 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=18a3e4665811aedc054d1f99889edc6309bbc10f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:31:5c:4e:78:ca:81:5b:d3:04:87:d7:ec:b8:
ba:8f:16:f4:b1:6b:fe:8a:fe:9c:16:b6:e0:99:bb:
1a:f4:7e:a3:f6:07:9a:e8:24:2d:bf:c3:67:da:4a:
51:ad:f2:3d:bf:02:23:8f:96:f9:97:64:85:97:c5:
13:d2:ce:b2:3d:53:1c:6a:84:52:93:39:96:69:b6:
4e:11:29:da:d8:d8:99:ba:2a:bd:2a:0e:b8:15:a1:
36:2d:04:07:28:8d:81:8f:92:94:14:90:f4:2e:e0:
6f:72:56:07:1b:c8:2e:9d:11:89:0a:ca:7b:af:26:
c5:d2:5b:05:ea:3a:8a:01:7e:9c:6f:98:cc:b2:ea:
69:e7:24:62:e3:10:da:aa:02:8b:e8:6f:7f:14:40:
b0:d4:2c:b4:40:e0:81:da:f0:95:78:57:f8:21:3d:
63:e0:83:f6:23:9f:da:3f:03:b7:7d:7d:76:d7:7f:
92:62:e2:1c:89:ca:23:64:4d:d4:db:4d:b0:64:a9:
b1:9a:f5:2e:bb:da:1f:ff:ad:1b:64:90:d5:9d:12:
4d:7e:62:0a:fb:d6:5d:c7:3b:be:34:4e:85:c0:a5:
b8:27:ca:c7:16:6d:79:18:2b:ad:89:76:78:79:45:
13:77:be:35:0e:65:1d:d4:1e:15:f4:4a:db:b5:a5:
87:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:A3:E4:66:58:11:AE:DC:05:4D:1F:99:88:9E:DC:63:09:BB:C1:0F
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/GKPkZlgRrtwFTR-ZiJ7cYwm7wQ8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
11:27:5c:7e:46:18:9c:3c:e3:6f:a2:d0:31:5e:c2:09:3a:6a:
6a:2b:60:c3:4e:6d:3d:7c:46:c4:0c:f2:6b:33:25:2a:9d:56:
7a:05:be:44:0e:96:54:1e:c9:82:ad:df:2a:76:dc:e2:64:6d:
8b:47:57:f4:bf:02:37:b0:c7:2c:7a:00:11:65:69:a3:b0:a3:
11:06:c0:bf:ea:fa:1d:a0:8d:9d:e4:77:45:88:3b:ca:20:fb:
e1:f9:cc:fc:3a:ec:4c:ec:72:da:58:e5:e5:83:90:1f:42:28:
0d:dd:19:01:b2:3f:c1:2c:fe:3f:de:aa:f5:1b:4b:c4:4f:22:
98:9f:4b:58:75:dd:22:61:a5:e9:49:60:ca:b3:19:c3:7e:48:
70:8d:b3:d3:ee:5f:05:b1:fa:f4:fd:3a:a5:55:a9:18:6a:a6:
af:47:83:af:d7:f5:90:46:5c:3a:d3:fa:f6:4c:26:ea:2b:ae:
c0:c3:49:5f:59:54:50:d7:ee:fc:4a:cb:63:46:9f:ff:b8:32:
19:d1:05:7b:71:b4:91:31:07:58:02:59:56:4f:2b:2f:b0:b7:
95:6f:aa:ea:bb:90:b8:ab:cf:7f:42:ff:e1:c1:2c:8c:06:5a:
1d:ac:db:cc:c1:f4:52:54:8c:b8:45:9c:d1:bd:39:e5:06:26:
bb:7c:0b:89
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYNd05JKWbzh37A/pmdrI0gzMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcyMDQ3YmUxNWIyNzU5MDJkY2Y2MTdkYzNkMGUxNmRjMWYz
MDgwMjIwHhcNMjIwOTIxMDIxNDUwWhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxOGEzZTQ2NjU4MTFhZWRjMDU0ZDFmOTk4ODllZGM2MzA5YmJjMTBmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgDFcTnjKgVvTBIfX7Li6jxb0sWv+
iv6cFrbgmbsa9H6j9gea6CQtv8Nn2kpRrfI9vwIjj5b5l2SFl8UT0s6yPVMcaoRS
kzmWabZOESna2NiZuiq9Kg64FaE2LQQHKI2Bj5KUFJD0LuBvclYHG8gunRGJCsp7
rybF0lsF6jqKAX6cb5jMsupp5yRi4xDaqgKL6G9/FECw1Cy0QOCB2vCVeFf4IT1j
4IP2I5/aPwO3fX1213+SYuIcicojZE3U202wZKmxmvUuu9of/60bZJDVnRJNfmIK
+9Zdxzu+NE6FwKW4J8rHFm15GCutiXZ4eUUTd741DmUd1B4V9ErbtaWHSwIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFBij5GZYEa7cBU0fmYie3GMJu8EPMB8GA1UdIwQY
MBaAFHIEe+FbJ1kC3PYX3D0OFtwfMIAiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMt
MWFiZTNhYzEwYWE2LzEvR0tQa1psZ1JydHdGVFItWmlKN2NZd203d1E4LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMtMWFiZTNhYzEwYWE2
LzEvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBABEnXH5GGJw842+i0DFe
wgk6amorYMNObT18RsQM8mszJSqdVnoFvkQOllQeyYKt3yp23OJkbYtHV/S/Ajew
xyx6ABFlaaOwoxEGwL/q+h2gjZ3kd0WIO8og++H5zPw67EzsctpY5eWDkB9CKA3d
GQGyP8Es/j/eqvUbS8RPIpifS1h13SJhpelJYMqzGcN+SHCNs9PuXwWx+vT9OqVV
qRhqpq9Hg6/X9ZBGXDrT+vZMJuorrsDDSV9ZVFDX7vxKy2NGn/+4MhnRBXtxtJEx
B1gCWVZPKy+wt5Vvquq7kLirz39C/+HBLIwGWh2s28zB9FJUjLhFnNG9OeUGJrt8
C4k=
-----END CERTIFICATE-----
Generated at Sun May 4 08:10:57 2025 by rpki-client