Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/Gj5lTOX08FatQr7--KhcMrmn30Y.roa
File: Gj5lTOX08FatQr7--KhcMrmn30Y.roa (raw, json)
Hash identifier: 53jrqUDDmOvyFhzCZ1uYDxR/7ZnxAfrUY5dvXPRJ7zI=
Subject key identifier: 1A:3E:65:4C:E5:F4:F0:56:AD:42:BE:FE:F8:A8:5C:32:B9:A7:DF:46
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0185F35935BBED43B293FA728CD2183A0F6C
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/Gj5lTOX08FatQr7--KhcMrmn30Y.roa
Signing time: Fri 27 Jan 2023 13:09:48 +0000
ROA not before: Fri 27 Jan 2023 13:09:48 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:f3:59:35:bb:ed:43:b2:93:fa:72:8c:d2:18:3a:0f:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Jan 27 13:09:48 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=1a3e654ce5f4f056ad42befef8a85c32b9a7df46
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:d1:8e:c6:52:e8:d1:da:c0:57:61:e1:54:c2:
97:6c:03:cc:d1:57:c1:19:de:b4:1c:be:ab:f7:3e:
9f:a4:d3:37:7a:13:5f:00:98:bb:64:bf:0b:99:7c:
98:1d:71:0f:43:2d:4b:14:e5:69:8c:cb:bf:e8:06:
6f:66:7f:d6:c2:78:fd:2c:fd:9c:d3:46:f2:e6:20:
f7:72:a1:2b:fe:ef:0e:fe:a8:d3:94:04:dd:34:b4:
bf:b8:af:98:03:a3:40:d0:6c:8c:c4:c0:73:a3:f9:
e8:f0:ad:65:65:9e:3a:af:7f:c7:77:df:5e:05:d9:
19:23:2e:53:71:9f:a1:99:ab:53:5a:07:48:14:9c:
19:90:d9:26:fd:c1:5d:a4:1b:31:1d:84:cf:f6:d1:
09:60:3b:70:ee:f5:8e:2b:37:28:1d:cc:dc:c5:e8:
1f:8d:68:dd:75:40:e2:df:02:81:15:10:fe:27:83:
5b:3c:65:3f:b0:fd:c0:e7:df:89:3e:c1:29:08:55:
ef:5a:11:dd:83:1a:79:cc:63:b7:11:10:1d:76:b5:
b8:81:84:89:be:dd:6f:7f:7c:91:0f:99:98:af:91:
ea:70:de:82:fb:a4:53:49:76:90:6a:ed:fd:12:ae:
b6:27:e9:d9:dd:8d:f9:72:cf:d3:c2:75:a0:b2:47:
17:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:3E:65:4C:E5:F4:F0:56:AD:42:BE:FE:F8:A8:5C:32:B9:A7:DF:46
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/Gj5lTOX08FatQr7--KhcMrmn30Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
7f:b5:ec:ce:0a:d3:05:e7:8e:71:57:ec:87:3c:2d:74:c0:d5:
18:9b:86:82:43:6f:a4:5d:34:22:b1:36:d8:99:96:3e:c3:a6:
f4:93:1a:ed:7c:1a:0b:7a:f0:58:60:e6:0c:0f:69:19:1f:36:
e8:80:6a:a9:c8:0f:f3:1b:56:48:4b:fa:a8:a0:7f:e4:9a:f4:
b5:3f:aa:c6:3e:43:1d:b3:b2:ef:8e:98:0b:ec:08:56:18:65:
51:d5:54:86:07:b2:9e:0e:f5:cb:e9:72:77:b9:3b:f4:07:3e:
36:9f:fe:27:f3:57:dc:9e:6d:24:7e:45:ca:a5:cf:7d:dd:b8:
1f:af:4b:fb:9e:bc:ad:4c:9d:dc:f5:a6:de:d0:6f:ec:64:34:
db:42:8f:32:ef:95:dd:c1:9d:d1:a3:70:5f:b4:3f:96:48:5f:
48:83:aa:aa:dc:f0:19:3c:7c:7c:13:6a:15:1b:2b:82:5a:91:
e4:40:31:ea:69:f3:5c:c4:d3:a3:a5:88:cd:48:76:a1:a9:db:
8e:82:dc:8e:b9:dd:d4:85:09:f0:2c:5b:2a:c0:29:39:62:b9:
b5:31:c0:03:0d:85:c8:70:f2:3d:80:5a:b5:c6:7e:f6:f7:6f:
c6:63:94:15:3e:d3:cd:3d:83:30:0c:1c:16:d8:79:45:37:a4:
4d:a7:af:46
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYXzWTW77UOyk/pyjNIYOg9sMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcyMDQ3YmUxNWIyNzU5MDJkY2Y2MTdkYzNkMGUxNmRjMWYz
MDgwMjIwHhcNMjMwMTI3MTMwOTQ4WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxYTNlNjU0Y2U1ZjRmMDU2YWQ0MmJlZmVmOGE4NWMzMmI5YTdkZjQ2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgtGOxlLo0drAV2HhVMKXbAPM0VfB
Gd60HL6r9z6fpNM3ehNfAJi7ZL8LmXyYHXEPQy1LFOVpjMu/6AZvZn/Wwnj9LP2c
00by5iD3cqEr/u8O/qjTlATdNLS/uK+YA6NA0GyMxMBzo/no8K1lZZ46r3/Hd99e
BdkZIy5TcZ+hmatTWgdIFJwZkNkm/cFdpBsxHYTP9tEJYDtw7vWOKzcoHczcxegf
jWjddUDi3wKBFRD+J4NbPGU/sP3A59+JPsEpCFXvWhHdgxp5zGO3ERAddrW4gYSJ
vt1vf3yRD5mYr5HqcN6C+6RTSXaQau39Eq62J+nZ3Y35cs/TwnWgskcXeQIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFBo+ZUzl9PBWrUK+/vioXDK5p99GMB8GA1UdIwQY
MBaAFHIEe+FbJ1kC3PYX3D0OFtwfMIAiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMt
MWFiZTNhYzEwYWE2LzEvR2o1bFRPWDA4RmF0UXI3LS1LaGNNcm1uMzBZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMtMWFiZTNhYzEwYWE2
LzEvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBAH+17M4K0wXnjnFX7Ic8
LXTA1RibhoJDb6RdNCKxNtiZlj7DpvSTGu18Ggt68Fhg5gwPaRkfNuiAaqnID/Mb
VkhL+qigf+Sa9LU/qsY+Qx2zsu+OmAvsCFYYZVHVVIYHsp4O9cvpcne5O/QHPjaf
/ifzV9yebSR+Rcqlz33duB+vS/uevK1Mndz1pt7Qb+xkNNtCjzLvld3BndGjcF+0
P5ZIX0iDqqrc8Bk8fHwTahUbK4JakeRAMepp81zE06OliM1IdqGp246C3I653dSF
CfAsWyrAKTliubUxwAMNhchw8j2AWrXGfvb3b8ZjlBU+0809gzAMHBbYeUU3pE2n
r0Y=
-----END CERTIFICATE-----
Generated at Thu May 1 03:57:11 2025 by rpki-client