Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/GM52LvVDBI9ByKYvuQIRDpqZdEQ.roa
File: GM52LvVDBI9ByKYvuQIRDpqZdEQ.roa (raw, json)
Hash identifier: BwnSPLYLXlB92/HH/LB6eYM36SF3yjw+iijoYtd4KJA=
Subject key identifier: 18:CE:76:2E:F5:43:04:8F:41:C8:A6:2F:B9:02:11:0E:9A:99:74:44
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 8039101D
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/GM52LvVDBI9ByKYvuQIRDpqZdEQ.roa
Signing time: Sun 01 May 2022 19:09:19 +0000
ROA not before: Sun 01 May 2022 19:09:19 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:180:466e:42dd/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:180:457:1e3f/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2151223325 (0x8039101d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: May 1 19:09:19 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=18ce762ef543048f41c8a62fb902110e9a997444
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:a6:b5:2e:82:97:b1:a0:c4:fe:22:bb:05:a4:
da:46:23:3d:5a:25:e5:85:63:51:54:25:d6:1b:af:
a0:8a:be:54:82:2a:06:e1:67:ae:b6:74:6b:91:76:
b3:94:de:1a:95:0b:99:8b:5b:75:1b:19:99:3f:1c:
cb:d3:43:9d:b2:ef:ea:c3:1c:0c:66:56:e8:a6:4e:
fc:29:5d:40:2a:9d:6d:3d:7e:4d:f6:e7:98:f2:0c:
55:47:fa:52:ed:66:74:2f:62:79:7e:a7:59:3e:69:
2c:b8:cc:e1:7a:cc:0f:ee:13:26:8b:05:06:d7:42:
ad:1c:c1:98:e5:14:fb:61:f8:76:8e:3e:43:a2:28:
3a:52:fa:86:14:be:7d:f9:82:b7:bc:de:b9:77:63:
23:c8:61:2c:f4:cd:cd:92:3e:fd:7e:58:1f:ef:58:
62:50:bf:4a:63:56:14:0e:24:d3:ee:b9:f1:68:b5:
bd:03:ab:af:d5:13:97:51:4d:78:de:19:69:73:c7:
ea:dc:2b:9b:b2:9a:b3:56:a1:c4:00:e7:87:e3:22:
b0:98:d8:55:5c:19:d7:8d:8b:22:37:02:b7:97:24:
91:83:1b:8c:09:de:fb:aa:02:4e:b4:5b:a4:87:37:
3b:55:81:5e:2c:7a:ff:ab:44:c0:6e:16:ab:9a:91:
68:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:CE:76:2E:F5:43:04:8F:41:C8:A6:2F:B9:02:11:0E:9A:99:74:44
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/GM52LvVDBI9ByKYvuQIRDpqZdEQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
02:b6:86:e3:2e:6a:57:d6:e5:24:f3:ef:3e:9a:e8:fd:e4:76:
fe:e6:67:86:73:b7:84:e5:d8:3c:82:98:92:c6:aa:af:b6:88:
28:a2:9e:ac:0f:01:6c:62:89:e5:31:46:88:f3:46:a1:53:d5:
77:5f:c0:cb:b1:89:72:32:de:44:62:6d:33:36:18:e1:7d:41:
bb:51:16:fb:e4:d6:85:41:db:85:a9:07:a7:72:28:57:90:63:
a8:67:8d:6a:44:81:e5:6d:7d:b5:1f:22:7f:05:1f:bb:a0:3e:
67:95:3f:68:a6:27:4b:91:ed:6d:98:9c:64:77:a1:7b:95:6d:
cc:88:0c:c2:65:9d:d3:90:c3:1b:98:4b:c7:bc:37:20:8a:e7:
b4:31:de:be:aa:ce:60:73:3b:60:82:20:5b:ec:99:a4:5d:59:
21:bc:ae:5a:31:fb:0e:5c:90:94:79:05:d1:b5:d7:57:9c:e7:
a7:44:e2:84:90:c4:b7:0b:98:24:09:17:a3:c6:9a:fd:aa:63:
7a:99:b6:ba:6e:ff:6a:12:62:aa:66:a1:86:4d:56:8c:7c:2d:
03:21:6b:db:9e:1d:4e:d9:42:56:af:b3:42:fb:f0:24:7f:5c:
9e:5c:f6:79:f6:18:6b:9f:90:1d:e4:60:ac:ad:e9:fc:74:5a:
8c:cd:56:89
-----BEGIN CERTIFICATE-----
MIIFATCCA+mgAwIBAgIFAIA5EB0wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMo
NzIwNDdiZTE1YjI3NTkwMmRjZjYxN2RjM2QwZTE2ZGMxZjMwODAyMjAeFw0yMjA1
MDExOTA5MTlaFw0yMzA3MDEwMDAwMDBaMDMxMTAvBgNVBAMTKDE4Y2U3NjJlZjU0
MzA0OGY0MWM4YTYyZmI5MDIxMTBlOWE5OTc0NDQwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQCYprUugpexoMT+IrsFpNpGIz1aJeWFY1FUJdYbr6CKvlSC
KgbhZ662dGuRdrOU3hqVC5mLW3UbGZk/HMvTQ52y7+rDHAxmVuimTvwpXUAqnW09
fk3255jyDFVH+lLtZnQvYnl+p1k+aSy4zOF6zA/uEyaLBQbXQq0cwZjlFPth+HaO
PkOiKDpS+oYUvn35gre83rl3YyPIYSz0zc2SPv1+WB/vWGJQv0pjVhQOJNPuufFo
tb0Dq6/VE5dRTXjeGWlzx+rcK5uymrNWocQA54fjIrCY2FVcGdeNiyI3AreXJJGD
G4wJ3vuqAk60W6SHNztVgV4sev+rRMBuFquakWjTAgMBAAGjggIaMIICFjAdBgNV
HQ4EFgQUGM52LvVDBI9ByKYvuQIRDpqZdEQwHwYDVR0jBBgwFoAUcgR74VsnWQLc
9hfcPQ4W3B8wgCIwDgYDVR0PAQH/BAQDAgeAMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvREVGQVVM
VC9jZ1I3NFZzbldRTGM5aGZjUFE0VzNCOHdnQ0kuY2VyMIGNBggrBgEFBQcBCwSB
gDB+MHwGCCsGAQUFBzALhnByc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9y
eS9ERUZBVUxULzVlLzc5ODQ0Ny0yMWY0LTQ1YWItOTlkYy0xYWJlM2FjMTBhYTYv
MS9HTTUyTHZWREJJOUJ5S1l2dVFJUkRwcVpkRVEucm9hMIGBBgNVHR8EejB4MHag
dKByhnByc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzVl
Lzc5ODQ0Ny0yMWY0LTQ1YWItOTlkYy0xYWJlM2FjMTBhYTYvMS9jZ1I3NFZzbldR
TGM5aGZjUFE0VzNCOHdnQ0kuY3JsMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw
MAYIKwYBBQUHAQcBAf8EITAfMAwEAgABMAYDBAPBABgwDwQCAAIwCQMHACABBnwA
ZDANBgkqhkiG9w0BAQsFAAOCAQEAAraG4y5qV9blJPPvPpro/eR2/uZnhnO3hOXY
PIKYksaqr7aIKKKerA8BbGKJ5TFGiPNGoVPVd1/Ay7GJcjLeRGJtMzYY4X1Bu1EW
++TWhUHbhakHp3IoV5BjqGeNakSB5W19tR8ifwUfu6A+Z5U/aKYnS5HtbZicZHeh
e5VtzIgMwmWd05DDG5hLx7w3IIrntDHevqrOYHM7YIIgW+yZpF1ZIbyuWjH7DlyQ
lHkF0bXXV5znp0TihJDEtwuYJAkXo8aa/apjepm2um7/ahJiqmahhk1WjHwtAyFr
254dTtlCVq+zQvvwJH9cnlz2efYYa5+QHeRgrK3p/HRajM1WiQ==
-----END CERTIFICATE-----
Generated at Sat May 3 03:15:05 2025 by rpki-client