Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/Gab_NigO25_FzI8a2Wr9bDz78bg.roa
File: Gab_NigO25_FzI8a2Wr9bDz78bg.roa (raw, json)
Hash identifier: m8tlyAiVMXbqdjR8xaeuf8mothtSDWt0zIKUimiyQ4Q=
Subject key identifier: 19:A6:FF:36:28:0E:DB:9F:C5:CC:8F:1A:D9:6A:FD:6C:3C:FB:F1:B8
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 01874062E136036CAC119B9DD0D1E3E50B57
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/Gab_NigO25_FzI8a2Wr9bDz78bg.roa
Signing time: Sun 02 Apr 2023 05:13:54 +0000
ROA not before: Sun 02 Apr 2023 05:13:54 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:40:62:e1:36:03:6c:ac:11:9b:9d:d0:d1:e3:e5:0b:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Apr 2 05:13:54 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=19a6ff36280edb9fc5cc8f1ad96afd6c3cfbf1b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:55:7b:8d:4a:7a:f3:4a:2a:be:d3:1f:75:73:
6d:a8:a6:94:23:76:cc:e7:53:51:e3:f8:74:55:58:
3e:ca:b6:a4:13:27:c9:7a:b4:4d:e1:27:fb:0f:fd:
bd:ad:3f:ba:60:79:30:0c:e5:4b:98:84:0d:0b:57:
c6:d2:51:12:59:c1:6a:6c:a4:e8:9b:fe:af:24:a5:
0a:2f:52:2d:c5:88:67:57:6e:f7:aa:c5:55:6e:af:
1f:60:af:f9:f9:99:9b:d1:0d:f1:e3:f9:7c:74:f0:
35:02:a8:73:99:30:f5:c7:cf:66:c4:50:9c:68:13:
22:df:f3:94:c8:e5:44:d1:1a:4a:3c:f7:1f:2a:9e:
79:ce:4a:9f:a9:9b:c8:d4:dd:5e:66:b4:9e:64:e3:
ea:e6:96:e6:9d:0f:50:83:b5:38:a5:80:c8:a9:0a:
6b:87:ef:9f:40:84:99:59:fc:b2:11:48:9e:4a:a4:
bd:55:21:18:73:4f:11:66:85:36:15:b7:08:72:47:
36:f1:ad:3d:05:0f:15:f2:8e:89:2a:92:d9:24:5b:
6f:7a:df:e6:26:86:7a:61:24:f8:c1:44:a6:05:f7:
4c:4d:8e:05:e2:89:23:57:cc:93:3f:a7:80:22:ed:
39:4a:32:9c:48:55:b0:b9:99:ef:8f:70:aa:d9:16:
d8:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:A6:FF:36:28:0E:DB:9F:C5:CC:8F:1A:D9:6A:FD:6C:3C:FB:F1:B8
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/Gab_NigO25_FzI8a2Wr9bDz78bg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
17:90:83:af:3e:99:d1:d6:92:98:82:3d:48:84:d5:4a:6b:89:
84:03:90:1b:0e:6f:f2:25:04:a0:fe:20:82:f5:bb:67:52:62:
d2:b0:74:03:a8:77:75:6d:87:82:22:97:db:11:c8:8f:46:40:
ad:d3:f8:5c:b3:e6:d1:d6:5e:1a:3e:2c:1d:3b:9f:2f:52:31:
94:b9:54:df:e7:0d:17:db:a1:01:17:e9:70:49:5e:63:95:82:
08:6b:5d:17:8f:1c:a9:b4:ba:28:a2:36:eb:c2:c9:12:5a:61:
78:12:0a:61:2b:c8:3c:0c:a7:08:c7:e6:03:d9:b1:f6:25:8b:
70:f0:b8:57:be:1f:2f:3d:3b:5e:57:50:e0:dd:5e:39:e2:a7:
e7:28:6b:90:64:b0:96:34:6c:33:af:86:28:b8:cf:b4:0c:2c:
dc:27:89:1e:ad:0b:a8:4f:b7:61:af:1a:80:93:8d:a9:78:1f:
9d:7e:8f:fd:a9:53:97:fc:87:8d:d5:da:b3:05:e8:4d:c5:74:
d5:37:85:b4:65:49:7b:58:6a:b7:13:81:c7:da:01:b0:73:25:
c0:6d:70:0a:f7:49:cc:0c:74:3e:a3:1f:e2:34:92:07:d5:78:
68:1d:9e:7a:41:75:7b:e3:9b:bc:36:0e:21:3c:4e:f9:2b:6d:
a3:74:a4:aa
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYdAYuE2A2ysEZud0NHj5QtXMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcyMDQ3YmUxNWIyNzU5MDJkY2Y2MTdkYzNkMGUxNmRjMWYz
MDgwMjIwHhcNMjMwNDAyMDUxMzU0WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxOWE2ZmYzNjI4MGVkYjlmYzVjYzhmMWFkOTZhZmQ2YzNjZmJmMWI4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjFV7jUp680oqvtMfdXNtqKaUI3bM
51NR4/h0VVg+yrakEyfJerRN4Sf7D/29rT+6YHkwDOVLmIQNC1fG0lESWcFqbKTo
m/6vJKUKL1ItxYhnV273qsVVbq8fYK/5+Zmb0Q3x4/l8dPA1AqhzmTD1x89mxFCc
aBMi3/OUyOVE0RpKPPcfKp55zkqfqZvI1N1eZrSeZOPq5pbmnQ9Qg7U4pYDIqQpr
h++fQISZWfyyEUieSqS9VSEYc08RZoU2FbcIckc28a09BQ8V8o6JKpLZJFtvet/m
JoZ6YST4wUSmBfdMTY4F4okjV8yTP6eAIu05SjKcSFWwuZnvj3Cq2RbYywIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFBmm/zYoDtufxcyPGtlq/Ww8+/G4MB8GA1UdIwQY
MBaAFHIEe+FbJ1kC3PYX3D0OFtwfMIAiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMt
MWFiZTNhYzEwYWE2LzEvR2FiX05pZ08yNV9Gekk4YTJXcjliRHo3OGJnLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMtMWFiZTNhYzEwYWE2
LzEvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBABeQg68+mdHWkpiCPUiE
1UpriYQDkBsOb/IlBKD+IIL1u2dSYtKwdAOod3Vth4Iil9sRyI9GQK3T+Fyz5tHW
Xho+LB07ny9SMZS5VN/nDRfboQEX6XBJXmOVgghrXRePHKm0uiiiNuvCyRJaYXgS
CmEryDwMpwjH5gPZsfYli3DwuFe+Hy89O15XUODdXjnip+coa5BksJY0bDOvhii4
z7QMLNwniR6tC6hPt2GvGoCTjal4H51+j/2pU5f8h43V2rMF6E3FdNU3hbRlSXtY
arcTgcfaAbBzJcBtcAr3ScwMdD6jH+I0kgfVeGgdnnpBdXvjm7w2DiE8TvkrbaN0
pKo=
-----END CERTIFICATE-----
Generated at Fri May 2 22:19:06 2025 by rpki-client