Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/GjG9gNI-L2Oyo77Skv8iRkJi00o.roa
File: GjG9gNI-L2Oyo77Skv8iRkJi00o.roa (raw, json)
Hash identifier: XZ+SJs6ZwPhDhm11J+KA4S6gnFP3TRlc4PEu2oCAl3s=
Subject key identifier: 1A:31:BD:80:D2:3E:2F:63:B2:A3:BE:D2:92:FF:22:46:42:62:D3:4A
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 018945154DF8628B3DA2E92F6B37E2B77D9B
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/GjG9gNI-L2Oyo77Skv8iRkJi00o.roa
Signing time: Tue 11 Jul 2023 13:12:51 +0000
ROA not before: Tue 11 Jul 2023 13:12:51 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:188:5fe2:b396/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:187:4695:a68a/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:188:7858:a003/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64:ffff:0:187:fa9a:b088/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:187:b2b8:a7dd/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:45:15:4d:f8:62:8b:3d:a2:e9:2f:6b:37:e2:b7:7d:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Jul 11 13:12:51 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=1a31bd80d23e2f63b2a3bed292ff22464262d34a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:e6:ad:d1:84:c1:84:d1:69:3b:24:8c:2e:0d:
02:06:b6:58:ef:d0:bf:09:1c:d0:65:30:26:8f:f0:
2c:2e:23:9d:ec:fb:2d:4b:07:6a:39:b7:5b:17:f0:
a6:92:44:cd:28:41:c3:72:45:58:85:9f:1d:f8:e2:
5c:97:98:59:26:da:f0:a6:87:ed:8d:ef:c3:83:d0:
e0:0e:03:01:82:88:e4:29:e9:1c:bb:0f:bf:b6:fd:
e9:d4:50:ab:72:b0:c4:ca:55:0c:43:d2:48:aa:74:
ac:22:8d:59:47:f0:36:c9:3a:db:2d:0e:3f:58:96:
e2:41:9f:94:18:ae:ad:12:5e:3a:d7:c1:96:f6:73:
94:ad:ad:73:84:4b:02:d7:e5:f8:7a:38:48:64:e1:
4d:91:58:75:65:33:b4:62:a6:51:d2:a7:56:2c:6b:
85:82:64:1f:dc:a8:09:9e:6b:7e:f6:5f:81:6f:1d:
ac:bf:b9:c9:71:92:19:6b:a8:fd:8c:47:03:44:dc:
13:bb:5b:2b:a6:33:4b:9f:0c:46:74:5e:fe:42:b4:
39:da:6b:7d:ee:11:ae:63:6f:8b:56:e5:72:f7:91:
4a:47:90:82:0e:4f:7d:49:4e:81:6b:92:b3:0b:7d:
ba:d6:96:31:65:8c:f2:44:b0:65:db:8d:63:cb:a6:
e8:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:31:BD:80:D2:3E:2F:63:B2:A3:BE:D2:92:FF:22:46:42:62:D3:4A
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/GjG9gNI-L2Oyo77Skv8iRkJi00o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
6e:91:b0:e2:d9:b3:57:17:8a:43:26:8f:be:00:84:c1:3c:8b:
c9:b1:08:20:41:4c:be:8e:7f:99:2a:6b:38:f7:f4:5e:e1:0e:
29:41:a1:2e:7e:29:76:3b:25:14:30:1b:9b:bb:32:d1:91:b7:
8e:fd:50:20:18:bd:75:21:a8:c0:39:d4:95:73:1c:5d:5d:6b:
0e:76:ac:32:89:b6:b4:04:32:69:3d:59:0d:3d:cb:a4:50:8c:
37:81:fc:d2:58:d2:db:da:0c:0b:ab:41:f3:4c:af:4f:19:83:
b4:ee:35:62:45:1a:41:25:b4:84:99:9d:0d:e1:51:6d:7c:3b:
8a:3d:fa:07:5a:b6:4d:b0:dd:35:45:9a:1b:2f:c0:5d:ae:08:
b0:98:7c:a2:43:e4:51:b1:e8:d7:1f:fb:42:4f:c3:80:9d:d2:
86:53:09:6e:ee:7b:18:70:0f:59:dd:50:96:44:04:fc:97:62:
a5:a0:b6:c2:e7:b4:fd:ae:bd:a8:77:d1:74:17:dc:51:9d:3c:
10:d6:17:fc:0c:10:6f:1a:60:0c:c0:6f:62:8d:f2:d9:0a:2e:
98:c5:fb:47:4d:06:78:00:7c:ee:3f:76:4b:4f:8d:44:99:71:
2b:54:fd:9c:d8:f4:fd:54:f7:0d:2a:16:79:6d:67:fa:9d:ab:
2b:21:23:6b
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYlFFU34Yos9oukvazfit32bMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcyMDQ3YmUxNWIyNzU5MDJkY2Y2MTdkYzNkMGUxNmRjMWYz
MDgwMjIwHhcNMjMwNzExMTMxMjUxWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxYTMxYmQ4MGQyM2UyZjYzYjJhM2JlZDI5MmZmMjI0NjQyNjJkMzRhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu+at0YTBhNFpOySMLg0CBrZY79C/
CRzQZTAmj/AsLiOd7PstSwdqObdbF/CmkkTNKEHDckVYhZ8d+OJcl5hZJtrwpoft
je/Dg9DgDgMBgojkKekcuw+/tv3p1FCrcrDEylUMQ9JIqnSsIo1ZR/A2yTrbLQ4/
WJbiQZ+UGK6tEl4618GW9nOUra1zhEsC1+X4ejhIZOFNkVh1ZTO0YqZR0qdWLGuF
gmQf3KgJnmt+9l+Bbx2sv7nJcZIZa6j9jEcDRNwTu1srpjNLnwxGdF7+QrQ52mt9
7hGuY2+LVuVy95FKR5CCDk99SU6Ba5KzC3261pYxZYzyRLBl241jy6bo5wIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFBoxvYDSPi9jsqO+0pL/IkZCYtNKMB8GA1UdIwQY
MBaAFHIEe+FbJ1kC3PYX3D0OFtwfMIAiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMt
MWFiZTNhYzEwYWE2LzEvR2pHOWdOSS1MMk95bzc3U2t2OGlSa0ppMDBvLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMtMWFiZTNhYzEwYWE2
LzEvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBAG6RsOLZs1cXikMmj74A
hME8i8mxCCBBTL6Of5kqazj39F7hDilBoS5+KXY7JRQwG5u7MtGRt479UCAYvXUh
qMA51JVzHF1daw52rDKJtrQEMmk9WQ09y6RQjDeB/NJY0tvaDAurQfNMr08Zg7Tu
NWJFGkEltISZnQ3hUW18O4o9+gdatk2w3TVFmhsvwF2uCLCYfKJD5FGx6Ncf+0JP
w4Cd0oZTCW7uexhwD1ndUJZEBPyXYqWgtsLntP2uvah30XQX3FGdPBDWF/wMEG8a
YAzAb2KN8tkKLpjF+0dNBngAfO4/dktPjUSZcStU/ZzY9P1U9w0qFnltZ/qdqysh
I2s=
-----END CERTIFICATE-----
Generated at Wed Apr 30 17:51:11 2025 by rpki-client