Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/GX72dyVRYe5KN-yKEXvjToC2wwY.roa
File: GX72dyVRYe5KN-yKEXvjToC2wwY.roa (raw, json)
Hash identifier: rx05GhrQ/XDZAvjRB4bKFK++/j3b78CCA18a8p/Wll4=
Subject key identifier: 19:7E:F6:77:25:51:61:EE:4A:37:EC:8A:11:7B:E3:4E:80:B6:C3:06
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 01869C3F652C6D33F0B759A74F9C01E6CD89
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/GX72dyVRYe5KN-yKEXvjToC2wwY.roa
Signing time: Wed 01 Mar 2023 08:17:25 +0000
ROA not before: Wed 01 Mar 2023 08:17:25 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:9c:3f:65:2c:6d:33:f0:b7:59:a7:4f:9c:01:e6:cd:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Mar 1 08:17:25 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=197ef677255161ee4a37ec8a117be34e80b6c306
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:13:1f:6d:90:c9:de:6c:d4:8e:05:48:0f:e4:
d0:57:51:e1:ac:b1:a1:79:11:25:84:4a:0c:02:c7:
1c:96:fa:72:a1:f8:47:8d:1a:03:82:26:be:6b:84:
6b:0e:36:aa:38:db:ee:a4:04:c3:da:e0:82:f4:90:
ee:55:4e:20:68:af:e1:14:fc:0c:48:ec:c5:fd:ac:
35:88:4b:ec:89:78:09:e4:53:b4:2b:38:6a:6c:39:
e7:d9:3c:84:89:dd:3b:c1:b2:3a:84:a2:33:b9:11:
f7:91:f5:04:ce:5e:ff:b3:0c:9a:c4:27:91:c3:f3:
b4:63:c3:e2:ed:76:70:5a:b5:b0:ca:24:e3:22:6e:
49:11:96:d6:57:61:4d:74:24:13:96:2e:a2:ae:63:
ec:65:70:66:c5:4a:39:91:43:41:2c:23:34:14:3c:
0e:68:ab:ab:67:81:38:e1:3d:13:70:a5:9c:8c:e9:
8b:33:15:60:4c:cb:a5:24:c3:7e:6a:70:1f:f1:37:
c2:24:40:f6:53:ac:f7:ed:68:f5:26:42:40:ab:90:
3e:7f:0d:20:62:e7:bd:4a:ec:93:4f:11:19:6f:84:
a9:8c:9b:06:c8:e1:8c:38:e0:a7:5b:de:6b:1e:60:
21:d1:f2:28:d7:b4:78:72:ad:1c:be:47:c0:40:ea:
8a:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:7E:F6:77:25:51:61:EE:4A:37:EC:8A:11:7B:E3:4E:80:B6:C3:06
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/GX72dyVRYe5KN-yKEXvjToC2wwY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
50:e1:a5:55:de:62:2b:2b:87:e9:56:bd:a4:7d:e8:4d:01:be:
fc:a4:fb:2c:12:9b:d1:d0:f1:80:f4:2d:f6:ee:dc:95:09:3e:
08:46:41:c0:65:a4:01:dd:88:0a:20:83:3e:1c:6c:84:91:80:
0f:9f:e4:20:76:29:b8:9f:70:26:0c:a0:91:1c:cf:e9:a0:16:
2f:41:a3:ed:08:34:9d:b4:94:40:de:b1:9b:a6:da:8d:69:c3:
59:5f:a4:c6:8a:62:a3:09:b4:8b:cc:e9:e4:80:59:f3:90:28:
ab:b3:b3:04:1d:7a:1e:c5:af:b6:f8:08:b4:88:c5:65:ab:8b:
28:01:49:6b:db:0a:0b:1d:d8:d1:e1:34:20:7c:c4:d6:79:96:
4d:15:aa:a5:58:83:62:27:fc:31:e2:dd:eb:68:96:22:64:85:
32:13:54:01:19:0b:d8:c2:3a:b3:cf:38:d7:f7:37:76:4b:bd:
49:ee:6b:84:d3:7c:98:b5:7d:51:8d:46:ca:7b:99:b4:9b:93:
de:94:1c:42:da:86:1a:28:3b:42:de:49:b3:13:68:db:c2:de:
68:1d:19:56:73:9e:4c:55:9a:55:fe:ae:7a:ea:65:31:b0:63:
67:c9:4d:53:e3:6c:2e:a2:04:bc:a2:a1:23:cb:c6:b0:29:e2:
df:6e:3f:2b
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYacP2UsbTPwt1mnT5wB5s2JMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcyMDQ3YmUxNWIyNzU5MDJkY2Y2MTdkYzNkMGUxNmRjMWYz
MDgwMjIwHhcNMjMwMzAxMDgxNzI1WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxOTdlZjY3NzI1NTE2MWVlNGEzN2VjOGExMTdiZTM0ZTgwYjZjMzA2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqBMfbZDJ3mzUjgVID+TQV1HhrLGh
eRElhEoMAscclvpyofhHjRoDgia+a4RrDjaqONvupATD2uCC9JDuVU4gaK/hFPwM
SOzF/aw1iEvsiXgJ5FO0KzhqbDnn2TyEid07wbI6hKIzuRH3kfUEzl7/swyaxCeR
w/O0Y8Pi7XZwWrWwyiTjIm5JEZbWV2FNdCQTli6irmPsZXBmxUo5kUNBLCM0FDwO
aKurZ4E44T0TcKWcjOmLMxVgTMulJMN+anAf8TfCJED2U6z37Wj1JkJAq5A+fw0g
Yue9SuyTTxEZb4SpjJsGyOGMOOCnW95rHmAh0fIo17R4cq0cvkfAQOqKXQIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFBl+9nclUWHuSjfsihF7406AtsMGMB8GA1UdIwQY
MBaAFHIEe+FbJ1kC3PYX3D0OFtwfMIAiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMt
MWFiZTNhYzEwYWE2LzEvR1g3MmR5VlJZZTVLTi15S0VYdmpUb0Myd3dZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMtMWFiZTNhYzEwYWE2
LzEvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBAFDhpVXeYisrh+lWvaR9
6E0Bvvyk+ywSm9HQ8YD0Lfbu3JUJPghGQcBlpAHdiAoggz4cbISRgA+f5CB2Kbif
cCYMoJEcz+mgFi9Bo+0INJ20lEDesZum2o1pw1lfpMaKYqMJtIvM6eSAWfOQKKuz
swQdeh7Fr7b4CLSIxWWriygBSWvbCgsd2NHhNCB8xNZ5lk0VqqVYg2In/DHi3eto
liJkhTITVAEZC9jCOrPPONf3N3ZLvUnua4TTfJi1fVGNRsp7mbSbk96UHELahhoo
O0LeSbMTaNvC3mgdGVZznkxVmlX+rnrqZTGwY2fJTVPjbC6iBLyioSPLxrAp4t9u
Pys=
-----END CERTIFICATE-----
Generated at Thu May 1 11:38:10 2025 by rpki-client