Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/Gq3pE9E3FFhzi766GsxrX7QeXRc.roa
File: Gq3pE9E3FFhzi766GsxrX7QeXRc.roa (raw, json)
Hash identifier: tDjVerZONDadRojAgY10NAWJxS0ggGteCVEcm7mhDWc=
Subject key identifier: 1A:AD:E9:13:D1:37:14:58:73:8B:BE:BA:1A:CC:6B:5F:B4:1E:5D:17
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 76D2E4A7
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/Gq3pE9E3FFhzi766GsxrX7QeXRc.roa
Signing time: Wed 30 Mar 2022 00:11:24 +0000
ROA not before: Wed 30 Mar 2022 00:11:24 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:17f:1bf4:40b5/128 maxlen: 128
2001:67c:64:ffff:0:17f:20ac:a2bd/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:17f:87e3:2531/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1993532583 (0x76d2e4a7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Mar 30 00:11:24 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=1aade913d1371458738bbeba1acc6b5fb41e5d17
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:f2:56:4a:e1:2d:1c:6c:2d:ee:03:88:ca:7b:
fe:60:59:18:1f:ff:2c:6c:de:89:a2:9d:84:fe:92:
16:03:4f:e7:19:56:8a:fe:2f:38:3b:73:bb:a9:a1:
75:65:05:14:8b:12:b8:2f:36:6c:d7:58:bc:00:0b:
83:84:2d:99:f8:50:57:5c:af:d5:c7:63:c4:cf:10:
a9:8f:d0:f2:06:e0:68:34:5b:7c:36:54:0b:dd:91:
92:d2:68:14:f9:04:16:61:31:57:7b:d3:d9:6e:a9:
11:81:26:71:09:0f:c6:87:34:65:c6:0e:2a:65:33:
c6:91:3f:1a:52:fa:5d:4e:fd:ea:e0:6b:0a:60:4f:
a9:67:e4:02:4a:25:df:10:98:03:72:bd:ec:96:d2:
86:83:6b:24:ae:18:6b:58:de:87:a4:a6:93:7d:d4:
db:d5:c3:fd:f7:6b:0c:ab:91:d5:67:8f:c6:45:56:
21:5d:cc:be:b9:ad:e4:59:ea:10:b2:61:a4:68:6a:
81:ef:27:06:50:7e:7a:8c:29:29:df:ab:9b:ee:d8:
dd:06:98:14:34:eb:20:2f:3d:b3:1f:2e:40:e6:7b:
31:12:c8:1a:9d:39:f8:71:68:13:14:8a:bc:e1:ab:
34:f4:ec:5b:8b:02:a1:37:d9:89:69:b7:7b:b4:f0:
53:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:AD:E9:13:D1:37:14:58:73:8B:BE:BA:1A:CC:6B:5F:B4:1E:5D:17
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/Gq3pE9E3FFhzi766GsxrX7QeXRc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
b2:d2:4b:29:0f:8a:0f:05:fe:03:d8:e0:ef:2e:1d:1e:11:ab:
8b:9f:ba:36:c0:92:ee:b5:de:83:08:cf:d1:da:c1:36:32:e8:
df:42:ad:28:06:cd:a8:68:1d:70:c2:4c:31:09:63:f1:c2:3b:
9b:f9:2f:77:61:f8:0e:99:9f:e4:cc:61:90:be:ee:95:8b:cc:
bf:11:2d:b8:8c:08:94:4c:78:d5:6e:ec:86:15:62:73:3a:87:
cf:e9:9e:77:c6:eb:9b:bf:27:6e:e5:0c:52:27:5c:ea:ad:a0:
55:48:58:0a:f6:24:a4:3b:d5:03:4e:04:69:0b:52:17:4f:29:
63:17:27:10:c9:84:35:14:94:20:77:06:f2:b1:c6:54:36:50:
96:ae:44:a7:c5:b2:df:9f:4c:28:eb:4a:a8:34:ce:24:18:5c:
43:7c:c7:e2:3f:e9:8e:0e:c3:74:3a:2e:8b:09:b0:8d:f9:73:
f1:8e:3e:bf:f4:46:22:e5:72:05:7d:24:2b:b2:f2:50:3e:65:
35:fb:bb:c0:ed:2a:dd:d7:88:21:7e:9f:71:dc:51:02:2d:d9:
c2:09:65:05:22:a0:dd:c7:48:ff:2f:f1:fd:67:2d:54:64:05:
de:6d:65:6c:b7:70:c0:06:f8:87:06:cb:58:d9:a6:73:e8:c0:
13:df:eb:70
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgIEdtLkpzANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg3
MjA0N2JlMTViMjc1OTAyZGNmNjE3ZGMzZDBlMTZkYzFmMzA4MDIyMB4XDTIyMDMz
MDAwMTEyNFoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoMWFhZGU5MTNkMTM3
MTQ1ODczOGJiZWJhMWFjYzZiNWZiNDFlNWQxNzCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAMzyVkrhLRxsLe4DiMp7/mBZGB//LGzeiaKdhP6SFgNP5xlW
iv4vODtzu6mhdWUFFIsSuC82bNdYvAALg4QtmfhQV1yv1cdjxM8QqY/Q8gbgaDRb
fDZUC92RktJoFPkEFmExV3vT2W6pEYEmcQkPxoc0ZcYOKmUzxpE/GlL6XU796uBr
CmBPqWfkAkol3xCYA3K97JbShoNrJK4Ya1jeh6Smk33U29XD/fdrDKuR1WePxkVW
IV3Mvrmt5FnqELJhpGhqge8nBlB+eowpKd+rm+7Y3QaYFDTrIC89sx8uQOZ7MRLI
Gp05+HFoExSKvOGrNPTsW4sCoTfZiWm3e7TwUy8CAwEAAaOCAhowggIWMB0GA1Ud
DgQWBBQarekT0TcUWHOLvroazGtftB5dFzAfBgNVHSMEGDAWgBRyBHvhWydZAtz2
F9w9DhbcHzCAIjAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L2NnUjc0VnNuV1FMYzloZmNQUTRXM0I4d2dDSS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvNWUvNzk4NDQ3LTIxZjQtNDVhYi05OWRjLTFhYmUzYWMxMGFhNi8x
L0dxM3BFOUUzRkZoemk3NjZHc3hyWDdRZVhSYy5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNWUv
Nzk4NDQ3LTIxZjQtNDVhYi05OWRjLTFhYmUzYWMxMGFhNi8xL2NnUjc0VnNuV1FM
YzloZmNQUTRXM0I4d2dDSS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAw
BggrBgEFBQcBBwEB/wQhMB8wDAQCAAEwBgMEA8EAGDAPBAIAAjAJAwcAIAEGfABk
MA0GCSqGSIb3DQEBCwUAA4IBAQCy0kspD4oPBf4D2ODvLh0eEauLn7o2wJLutd6D
CM/R2sE2MujfQq0oBs2oaB1wwkwxCWPxwjub+S93YfgOmZ/kzGGQvu6Vi8y/ES24
jAiUTHjVbuyGFWJzOofP6Z53xuubvydu5QxSJ1zqraBVSFgK9iSkO9UDTgRpC1IX
TyljFycQyYQ1FJQgdwbyscZUNlCWrkSnxbLfn0wo60qoNM4kGFxDfMfiP+mODsN0
Oi6LCbCN+XPxjj6/9EYi5XIFfSQrsvJQPmU1+7vA7Srd14ghfp9x3FECLdnCCWUF
IqDdx0j/L/H9Zy1UZAXebWVst3DABviHBstY2aZz6MAT3+tw
-----END CERTIFICATE-----
Generated at Thu May 1 05:42:15 2025 by rpki-client