Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/GfCgbAhxm9JB_wg7cpeFaVu_pR0.roa
File: GfCgbAhxm9JB_wg7cpeFaVu_pR0.roa (raw, json)
Hash identifier: ymMImOT4P83Q8BMoS6ZPdrHxrLUzVWeRoQ69Tjlz6b0=
Subject key identifier: 19:F0:A0:6C:08:71:9B:D2:41:FF:08:3B:72:97:85:69:5B:BF:A5:1D
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0183D1AD4BD5EB8E372EFAB324AF217FC170
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/GfCgbAhxm9JB_wg7cpeFaVu_pR0.roa
Signing time: Thu 13 Oct 2022 14:08:58 +0000
ROA not before: Thu 13 Oct 2022 14:08:58 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:183:d1a9:8095/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:d1:ad:4b:d5:eb:8e:37:2e:fa:b3:24:af:21:7f:c1:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Oct 13 14:08:58 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=19f0a06c08719bd241ff083b729785695bbfa51d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:38:0c:09:1f:80:31:41:77:26:43:2c:51:c3:
f7:91:bc:ad:60:b9:89:2e:04:26:dc:21:e1:41:88:
ec:17:f0:7f:da:70:4c:2e:a0:31:11:c8:01:21:7a:
e5:49:cd:2f:d5:5e:19:88:52:ab:6d:aa:70:c2:c3:
2b:d8:fc:82:b5:1c:18:52:6e:5e:f8:1e:e2:a1:fa:
96:99:01:89:bb:f0:ef:eb:87:58:ca:f0:8b:70:f1:
7f:b7:23:64:0e:2c:ba:5a:08:ad:6e:ae:ce:8b:40:
38:b0:ae:05:8a:85:78:31:7a:68:19:e9:68:6f:12:
d7:32:87:ef:e8:e5:df:17:fa:f7:39:48:eb:9e:54:
50:58:f7:4e:69:7b:ca:c5:5c:33:90:db:74:5b:d4:
cd:46:75:ff:c8:55:7c:f5:b9:0d:5a:a9:6f:5e:e4:
63:c7:5d:4c:bf:ee:71:8d:45:64:b2:3c:50:2e:b8:
b9:d5:e4:87:0a:ae:5b:c2:e4:54:fc:eb:85:b7:0e:
cd:70:27:7e:df:2c:c4:a4:74:8c:f6:30:5e:f3:9b:
83:37:8c:83:f5:9a:c5:05:2b:53:67:8d:fb:66:55:
be:3a:b8:fd:9d:84:58:d4:97:e4:ec:d1:c0:9a:be:
0c:37:12:51:64:24:e5:dd:f8:f5:75:21:7e:eb:be:
e9:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:F0:A0:6C:08:71:9B:D2:41:FF:08:3B:72:97:85:69:5B:BF:A5:1D
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/GfCgbAhxm9JB_wg7cpeFaVu_pR0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
6b:11:9c:4e:de:37:2e:cd:0a:93:df:38:ac:d9:44:41:11:04:
fa:4f:44:b1:c5:09:4d:a6:4a:a9:89:a2:5c:99:0c:83:5f:ed:
7a:b7:cc:74:c5:31:36:b5:cc:5c:9e:10:25:16:a2:fe:0a:da:
fb:94:2b:07:1e:52:8e:72:57:3a:09:92:f2:23:98:13:f9:e5:
e5:a1:5e:35:d3:c7:d1:71:98:33:85:8a:44:51:24:4f:f1:c8:
9e:63:04:5c:bc:a9:35:df:95:09:7a:28:8f:44:46:12:aa:3e:
22:eb:c4:66:db:a8:6d:6c:ff:03:53:f6:21:93:12:00:46:3c:
0d:f4:2d:9b:52:17:2c:47:f2:52:f8:f5:16:b2:08:8a:10:87:
3f:b1:9b:6a:47:64:a4:d2:c6:80:f7:d0:b3:24:e6:ca:42:a3:
2e:4c:2a:d8:0c:db:4b:3b:b2:fa:b1:d3:20:13:00:92:9c:f6:
14:ea:e9:58:3e:a1:fc:6a:d9:4e:70:ee:8c:d2:b2:89:49:06:
eb:b6:82:10:ba:7c:bd:f4:ce:0c:47:7e:cc:9c:9f:f7:74:46:
8c:33:5e:83:b9:89:20:f8:1d:b8:23:3f:66:1b:df:90:12:c2:
01:d9:b5:b1:5d:47:d3:99:aa:59:18:bb:22:c0:09:2d:2f:de:
68:a2:8f:a0
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYPRrUvV6443LvqzJK8hf8FwMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcyMDQ3YmUxNWIyNzU5MDJkY2Y2MTdkYzNkMGUxNmRjMWYz
MDgwMjIwHhcNMjIxMDEzMTQwODU4WhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxOWYwYTA2YzA4NzE5YmQyNDFmZjA4M2I3Mjk3ODU2OTViYmZhNTFkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhzgMCR+AMUF3JkMsUcP3kbytYLmJ
LgQm3CHhQYjsF/B/2nBMLqAxEcgBIXrlSc0v1V4ZiFKrbapwwsMr2PyCtRwYUm5e
+B7iofqWmQGJu/Dv64dYyvCLcPF/tyNkDiy6Wgitbq7Oi0A4sK4FioV4MXpoGelo
bxLXMofv6OXfF/r3OUjrnlRQWPdOaXvKxVwzkNt0W9TNRnX/yFV89bkNWqlvXuRj
x11Mv+5xjUVksjxQLri51eSHCq5bwuRU/OuFtw7NcCd+3yzEpHSM9jBe85uDN4yD
9ZrFBStTZ437ZlW+Orj9nYRY1Jfk7NHAmr4MNxJRZCTl3fj1dSF+677prwIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFBnwoGwIcZvSQf8IO3KXhWlbv6UdMB8GA1UdIwQY
MBaAFHIEe+FbJ1kC3PYX3D0OFtwfMIAiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMt
MWFiZTNhYzEwYWE2LzEvR2ZDZ2JBaHhtOUpCX3dnN2NwZUZhVnVfcFIwLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMtMWFiZTNhYzEwYWE2
LzEvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBAGsRnE7eNy7NCpPfOKzZ
REERBPpPRLHFCU2mSqmJolyZDINf7Xq3zHTFMTa1zFyeECUWov4K2vuUKwceUo5y
VzoJkvIjmBP55eWhXjXTx9FxmDOFikRRJE/xyJ5jBFy8qTXflQl6KI9ERhKqPiLr
xGbbqG1s/wNT9iGTEgBGPA30LZtSFyxH8lL49RayCIoQhz+xm2pHZKTSxoD30LMk
5spCoy5MKtgM20s7svqx0yATAJKc9hTq6Vg+ofxq2U5w7ozSsolJBuu2ghC6fL30
zgxHfsycn/d0RowzXoO5iSD4HbgjP2Yb35ASwgHZtbFdR9OZqlkYuyLACS0v3mii
j6A=
-----END CERTIFICATE-----
Generated at Thu May 1 11:11:28 2025 by rpki-client