Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/GaGSszqzXd4_LJfVJV7nmplu5fA.roa
File: GaGSszqzXd4_LJfVJV7nmplu5fA.roa (raw, json)
Hash identifier: qorfpRRMqPmdFJLIDp8VYdBkDX6/Txom/ON9T+zr5NI=
Subject key identifier: 19:A1:92:B3:3A:B3:5D:DE:3F:2C:97:D5:25:5E:E7:9A:99:6E:E5:F0
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 01854EFA8FC200DFEFB36CA19E7351189801
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/GaGSszqzXd4_LJfVJV7nmplu5fA.roa
Signing time: Mon 26 Dec 2022 15:08:41 +0000
ROA not before: Mon 26 Dec 2022 15:08:41 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:185:3dcc:d8f/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:4e:fa:8f:c2:00:df:ef:b3:6c:a1:9e:73:51:18:98:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Dec 26 15:08:41 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=19a192b33ab35dde3f2c97d5255ee79a996ee5f0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:f1:49:86:3d:5d:bc:9b:c6:e6:18:2e:ae:71:
fd:54:49:0a:4d:db:c7:ec:ee:8d:f9:73:70:7e:c4:
e1:46:5f:90:49:80:78:3b:05:85:11:8e:69:cc:ef:
f8:6b:b9:56:84:e1:b5:bd:4d:f2:38:6b:e0:83:7d:
80:cd:3b:09:46:a1:7e:bc:20:ab:dc:fa:28:47:bb:
dc:12:f2:01:d7:c3:4b:7b:49:38:4d:4b:ce:c0:2d:
f9:f2:91:de:de:93:ec:02:41:ff:9a:d4:7c:b2:40:
95:12:23:16:27:0b:0f:8a:bb:e0:3e:8f:e0:2d:4b:
9c:c4:cc:9a:7a:7b:00:b9:b4:cc:a7:2c:d2:da:ed:
66:81:55:03:48:68:b6:8e:da:6d:ae:a5:64:88:d2:
0b:f4:ed:a4:4c:29:50:00:b9:71:e7:0a:11:93:7b:
d8:51:2a:b8:f7:a2:42:e6:52:84:a6:6d:05:2e:8b:
4d:4f:21:fb:68:2d:04:5f:b5:5a:ef:36:48:fe:e7:
4c:9b:40:bd:c1:be:93:ed:63:25:03:c4:60:36:4f:
8e:cb:c8:9c:6f:39:0d:3f:1c:d6:64:6b:96:c4:90:
23:ca:43:19:aa:f9:bc:22:06:d6:cf:83:5f:18:14:
93:4e:b2:21:bf:a2:31:6b:52:80:5a:ac:19:19:ec:
c0:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:A1:92:B3:3A:B3:5D:DE:3F:2C:97:D5:25:5E:E7:9A:99:6E:E5:F0
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/GaGSszqzXd4_LJfVJV7nmplu5fA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
74:59:4e:5b:f6:9a:04:39:a2:a0:75:ce:60:a2:d9:1d:fb:09:
64:04:db:ed:1d:3d:42:9c:fa:97:40:7e:89:4a:4b:e9:ce:0b:
4a:5e:7d:c2:d6:ba:3d:cb:5a:e6:07:36:37:01:cd:35:98:1c:
e3:84:b3:1d:97:d7:b7:27:0a:06:8d:2c:58:88:2f:c5:06:e1:
01:ee:e7:39:6b:a6:9e:68:de:be:b0:d4:5a:9a:26:15:71:a7:
16:af:c0:bf:79:38:f6:82:3c:bb:da:51:c2:f1:f2:17:56:b3:
6d:24:89:48:52:e7:0d:6e:07:10:69:07:60:bf:ea:dd:d7:b4:
7d:0d:ee:e1:85:50:c0:b9:f2:41:8e:46:df:ae:c5:ec:b7:c8:
fe:da:2a:8a:e0:4e:74:76:d6:76:b2:6c:a3:f5:87:8b:c9:01:
de:3c:07:df:55:9c:17:63:ab:bc:2a:d6:17:67:d0:df:dc:7c:
55:f4:f7:68:7f:25:7e:e5:40:5f:bc:12:5e:2b:e8:29:1b:d9:
92:68:b9:49:d6:16:65:5c:c0:03:d4:c9:79:d8:52:49:f4:3b:
7d:c4:a4:c9:02:da:cf:5d:2d:6d:c7:fe:f9:0b:94:38:1b:01:
3f:92:09:fc:94:b4:5a:76:b0:5b:49:0e:20:4b:96:61:f6:c5:
b1:9e:7c:15
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYVO+o/CAN/vs2yhnnNRGJgBMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcyMDQ3YmUxNWIyNzU5MDJkY2Y2MTdkYzNkMGUxNmRjMWYz
MDgwMjIwHhcNMjIxMjI2MTUwODQxWhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxOWExOTJiMzNhYjM1ZGRlM2YyYzk3ZDUyNTVlZTc5YTk5NmVlNWYwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi/FJhj1dvJvG5hgurnH9VEkKTdvH
7O6N+XNwfsThRl+QSYB4OwWFEY5pzO/4a7lWhOG1vU3yOGvgg32AzTsJRqF+vCCr
3PooR7vcEvIB18NLe0k4TUvOwC358pHe3pPsAkH/mtR8skCVEiMWJwsPirvgPo/g
LUucxMyaensAubTMpyzS2u1mgVUDSGi2jtptrqVkiNIL9O2kTClQALlx5woRk3vY
USq496JC5lKEpm0FLotNTyH7aC0EX7Va7zZI/udMm0C9wb6T7WMlA8RgNk+Oy8ic
bzkNPxzWZGuWxJAjykMZqvm8IgbWz4NfGBSTTrIhv6Ixa1KAWqwZGezApwIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFBmhkrM6s13ePyyX1SVe55qZbuXwMB8GA1UdIwQY
MBaAFHIEe+FbJ1kC3PYX3D0OFtwfMIAiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMt
MWFiZTNhYzEwYWE2LzEvR2FHU3N6cXpYZDRfTEpmVkpWN25tcGx1NWZBLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMtMWFiZTNhYzEwYWE2
LzEvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBAHRZTlv2mgQ5oqB1zmCi
2R37CWQE2+0dPUKc+pdAfolKS+nOC0pefcLWuj3LWuYHNjcBzTWYHOOEsx2X17cn
CgaNLFiIL8UG4QHu5zlrpp5o3r6w1FqaJhVxpxavwL95OPaCPLvaUcLx8hdWs20k
iUhS5w1uBxBpB2C/6t3XtH0N7uGFUMC58kGORt+uxey3yP7aKorgTnR21naybKP1
h4vJAd48B99VnBdjq7wq1hdn0N/cfFX092h/JX7lQF+8El4r6Ckb2ZJouUnWFmVc
wAPUyXnYUkn0O33EpMkC2s9dLW3H/vkLlDgbAT+SCfyUtFp2sFtJDiBLlmH2xbGe
fBU=
-----END CERTIFICATE-----
Generated at Fri May 2 23:11:41 2025 by rpki-client