Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/GZ2SFsAUMUHNLR9GDHCAFZxCbS4.roa
File: GZ2SFsAUMUHNLR9GDHCAFZxCbS4.roa (raw, json)
Hash identifier: 16ZVZZV3yIH7LiokQfjcCiOusrwuRmmQXlSbVP7LlPU=
Subject key identifier: 19:9D:92:16:C0:14:31:41:CD:2D:1F:46:0C:70:80:15:9C:42:6D:2E
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 018620D7F6F48640C19108FB687CA8624474
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/GZ2SFsAUMUHNLR9GDHCAFZxCbS4.roa
Signing time: Sun 05 Feb 2023 09:11:09 +0000
ROA not before: Sun 05 Feb 2023 09:11:09 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:20:d7:f6:f4:86:40:c1:91:08:fb:68:7c:a8:62:44:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Feb 5 09:11:09 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=199d9216c0143141cd2d1f460c7080159c426d2e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:2f:2b:4f:50:03:fb:d0:77:44:a3:96:37:75:
56:70:30:d5:ea:99:b7:50:7f:d1:b0:54:9c:03:d3:
dd:40:eb:98:2d:c6:85:96:ab:78:b3:b0:f7:2d:9c:
d1:fe:b3:ea:5d:7c:33:66:ca:23:9c:31:75:d1:42:
4e:9e:80:7d:61:69:28:2c:0b:5d:72:54:43:3b:7e:
13:cd:49:5d:3c:9d:1e:78:8e:3b:c4:88:ec:7f:39:
cd:e0:0a:9b:f2:ed:66:f1:ca:a9:0d:37:17:1f:43:
51:94:e2:ff:7a:d5:7f:fd:f5:a0:14:10:7f:f2:c1:
c9:24:4a:b4:37:2d:0d:97:39:3a:13:51:a2:a3:5b:
f6:a3:1b:cb:50:83:26:6d:fe:10:52:cd:e6:7f:0e:
4d:19:e1:5f:06:26:ab:b2:e3:5e:3b:b3:6b:36:91:
cb:22:4b:7b:07:15:10:34:74:fa:fb:ad:59:28:50:
0c:86:ec:9a:74:4a:73:9a:79:5f:6d:17:85:2d:4c:
01:1d:e2:cd:eb:9d:c7:39:c8:0a:9e:e4:e7:85:91:
dc:84:71:af:6b:54:48:01:22:9e:33:3b:73:0f:9e:
53:5b:36:d9:28:f3:74:52:94:72:c8:4e:04:4d:1f:
fc:58:3d:e5:05:e4:a3:43:f5:dc:6e:77:b2:78:2b:
b1:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:9D:92:16:C0:14:31:41:CD:2D:1F:46:0C:70:80:15:9C:42:6D:2E
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/GZ2SFsAUMUHNLR9GDHCAFZxCbS4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
4e:38:fd:39:78:cd:be:16:b5:00:89:55:6f:c7:80:5b:04:5d:
2d:08:6b:09:76:fb:92:02:b7:81:09:ed:18:d9:c0:59:cf:f1:
8a:58:55:89:10:c7:5f:86:0e:2a:65:8d:22:17:cd:26:b7:50:
c7:27:f1:47:a2:e4:3b:f1:da:4b:b2:b7:5d:94:8f:d3:fe:77:
11:2a:5e:ef:e8:11:8d:cf:5f:78:2d:bf:9c:45:1e:68:36:d1:
19:07:7e:7b:99:00:5c:4f:10:70:ff:4b:3c:bf:5e:46:d7:9a:
cd:68:09:14:90:60:e4:2a:f4:ea:7d:72:b1:d6:46:ff:42:1b:
a8:4f:9d:45:61:41:64:38:e0:84:d3:de:8f:ad:e3:d9:be:2e:
d4:2d:81:85:2e:bc:a9:11:19:d9:9d:33:6f:1f:2d:a6:8c:2a:
da:42:9c:aa:30:e6:34:19:8b:80:df:d2:b8:78:df:4d:7c:92:
cb:8c:9a:ec:df:1e:da:13:31:8c:a4:53:47:73:b4:64:15:f2:
84:12:fa:0c:24:33:aa:07:53:e1:89:5d:49:41:0d:1f:89:09:
5b:b1:d7:d9:e4:b5:1d:b9:7f:3d:ca:23:83:bd:da:2a:00:42:
9a:ae:5a:4b:fa:97:99:90:fc:66:8d:09:a1:8d:f2:ec:87:5f:
49:53:b5:0c
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYYg1/b0hkDBkQj7aHyoYkR0MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcyMDQ3YmUxNWIyNzU5MDJkY2Y2MTdkYzNkMGUxNmRjMWYz
MDgwMjIwHhcNMjMwMjA1MDkxMTA5WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxOTlkOTIxNmMwMTQzMTQxY2QyZDFmNDYwYzcwODAxNTljNDI2ZDJlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArC8rT1AD+9B3RKOWN3VWcDDV6pm3
UH/RsFScA9PdQOuYLcaFlqt4s7D3LZzR/rPqXXwzZsojnDF10UJOnoB9YWkoLAtd
clRDO34TzUldPJ0eeI47xIjsfznN4Aqb8u1m8cqpDTcXH0NRlOL/etV//fWgFBB/
8sHJJEq0Ny0Nlzk6E1Gio1v2oxvLUIMmbf4QUs3mfw5NGeFfBiarsuNeO7NrNpHL
Ikt7BxUQNHT6+61ZKFAMhuyadEpzmnlfbReFLUwBHeLN653HOcgKnuTnhZHchHGv
a1RIASKeMztzD55TWzbZKPN0UpRyyE4ETR/8WD3lBeSjQ/XcbneyeCuxpwIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFBmdkhbAFDFBzS0fRgxwgBWcQm0uMB8GA1UdIwQY
MBaAFHIEe+FbJ1kC3PYX3D0OFtwfMIAiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMt
MWFiZTNhYzEwYWE2LzEvR1oyU0ZzQVVNVUhOTFI5R0RIQ0FGWnhDYlM0LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMtMWFiZTNhYzEwYWE2
LzEvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBAE44/Tl4zb4WtQCJVW/H
gFsEXS0Iawl2+5ICt4EJ7RjZwFnP8YpYVYkQx1+GDipljSIXzSa3UMcn8Uei5Dvx
2kuyt12Uj9P+dxEqXu/oEY3PX3gtv5xFHmg20RkHfnuZAFxPEHD/Szy/XkbXms1o
CRSQYOQq9Op9crHWRv9CG6hPnUVhQWQ44ITT3o+t49m+LtQtgYUuvKkRGdmdM28f
LaaMKtpCnKow5jQZi4Df0rh43018ksuMmuzfHtoTMYykU0dztGQV8oQS+gwkM6oH
U+GJXUlBDR+JCVux19nktR25fz3KI4O92ioAQpquWkv6l5mQ/GaNCaGN8uyHX0lT
tQw=
-----END CERTIFICATE-----
Generated at Thu May 1 05:38:30 2025 by rpki-client