Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/GsKTwm6JYlS8EW5stDiLXY04MtY.roa
File: GsKTwm6JYlS8EW5stDiLXY04MtY.roa (raw, json)
Hash identifier: 5mqAxYzUCp3wFwXBdxn13y4xv+WsyO39OfbeMqaOzuA=
Subject key identifier: 1A:C2:93:C2:6E:89:62:54:BC:11:6E:6C:B4:38:8B:5D:8D:38:32:D6
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 68F9AA13
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/GsKTwm6JYlS8EW5stDiLXY04MtY.roa
Signing time: Tue 08 Feb 2022 20:04:45 +0000
ROA not before: Tue 08 Feb 2022 20:04:45 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:17e:d7ee:e040/128 maxlen: 128
2001:67c:64:ffff:0:17e:d592:92a4/128 maxlen: 128
2001:67c:64:ffff:0:17e:d600:60b0/128 maxlen: 128
2001:67c:64:ffff:0:17e:d524:ead9/128 maxlen: 128
2001:67c:64:ffff:0:17e:d901:fecb/128 maxlen: 128
2001:67c:64:ffff:0:17e:d7b8:3101/128 maxlen: 128
2001:67c:64:ffff:0:17e:d6a5:23ae/128 maxlen: 128
2001:67c:64:ffff:0:17e:d9a6:5e4a/128 maxlen: 128
2001:67c:64:ffff:0:17e:a0dd:2f5b/128 maxlen: 128
2001:67c:64:ffff:0:17e:dab9:26f6/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:17e:d826:2565/128 maxlen: 128
2001:67c:64:ffff:0:17e:da82:41aa/128 maxlen: 128
2001:67c:64:ffff:0:17e:d713:9aeb/128 maxlen: 128
2001:67c:64:ffff:0:17e:d55b:c264/128 maxlen: 128
2001:67c:64:ffff:0:17e:d66e:8559/128 maxlen: 128
2001:67c:64:ffff:0:17e:d938:ba2e/128 maxlen: 128
2001:67c:64:ffff:0:17e:d85c:d348/128 maxlen: 128
2001:67c:64:ffff:0:17e:d96f:7a13/128 maxlen: 128
2001:67c:64:ffff:0:17e:daf0:4034/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1761192467 (0x68f9aa13)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Feb 8 20:04:45 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=1ac293c26e896254bc116e6cb4388b5d8d3832d6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:07:13:c1:57:65:2c:d1:b3:c7:c9:f6:b8:b4:
d8:7d:fb:c0:5a:3d:8a:ec:01:d4:31:d4:46:bb:3f:
7e:69:0b:30:6c:ce:10:3c:88:1a:b6:f5:7e:21:73:
5a:4e:d5:37:a5:d7:da:b5:e4:57:c3:a4:4d:d8:1f:
c2:30:c2:c5:52:1d:0d:88:53:45:13:e0:12:f2:9b:
d1:94:42:92:82:b3:07:af:b7:6c:60:06:b7:76:13:
fb:11:56:24:60:31:5c:c0:43:16:9a:72:3e:a4:07:
b8:2e:ad:76:f4:80:6b:c3:0f:e8:3a:3a:f4:88:f7:
6e:b6:57:d5:4c:75:29:4c:39:6c:60:80:44:23:aa:
41:9e:dc:a6:ba:48:59:c4:07:e0:47:5b:35:df:71:
54:37:65:ee:4d:c3:8a:22:1d:95:15:35:c5:3a:70:
29:0a:41:97:bd:1f:ea:67:a9:f6:69:db:2a:af:3a:
0f:ed:5f:aa:23:2d:35:56:eb:f2:2d:ce:1b:60:a0:
bd:36:ed:93:49:c7:e2:27:18:69:14:0e:a4:eb:6d:
25:1f:99:83:96:e9:41:d7:b4:75:69:21:ac:66:d7:
85:ab:ab:2f:ba:7f:f3:6e:bb:d5:d8:d0:5e:84:f0:
07:97:1d:35:e3:a4:48:49:04:e2:d3:e0:de:58:0e:
ce:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:C2:93:C2:6E:89:62:54:BC:11:6E:6C:B4:38:8B:5D:8D:38:32:D6
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/GsKTwm6JYlS8EW5stDiLXY04MtY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
6d:2d:8b:b4:44:43:a2:ad:66:ca:0d:c2:cf:ef:ba:fa:a3:d6:
c1:85:d5:52:8e:6f:97:be:c5:69:0c:3a:9a:22:78:ff:a9:29:
70:98:f0:c1:2f:60:4e:62:a6:e3:88:59:bd:4b:b7:42:87:fe:
f3:f6:ca:ef:3b:c2:77:9d:ce:98:d8:d4:68:48:e9:86:94:fd:
9e:c3:3e:99:5b:b5:d7:1f:77:51:cc:a4:aa:5c:9b:2c:33:a9:
13:f6:f8:8f:c2:53:f5:93:7a:9c:27:d8:1b:98:8c:5b:71:c7:
d3:96:c4:a0:d4:f6:db:b7:26:00:dc:56:94:38:9c:63:89:10:
68:21:2d:db:11:a1:f8:d1:73:a1:03:3c:69:7a:54:fb:16:08:
32:60:13:0f:b2:b7:86:a2:da:1b:87:9a:6f:c9:60:fe:79:7f:
94:7d:04:22:3e:55:5b:2a:c3:67:f1:b5:fe:c7:33:d0:66:28:
a2:f7:a6:cc:c0:b0:08:e3:7b:99:fe:1d:09:bd:58:6a:1b:3a:
d9:32:83:5c:59:c5:9c:9b:99:2b:85:89:9f:5b:74:fe:41:95:
a0:9b:54:a6:88:18:93:70:cf:94:82:de:ac:db:b9:85:42:87:
15:0e:b1:1d:5f:58:81:c4:01:e0:10:7b:f0:05:4a:3a:b5:24:
6b:f8:12:04
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgIEaPmqEzANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg3
MjA0N2JlMTViMjc1OTAyZGNmNjE3ZGMzZDBlMTZkYzFmMzA4MDIyMB4XDTIyMDIw
ODIwMDQ0NVoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoMWFjMjkzYzI2ZTg5
NjI1NGJjMTE2ZTZjYjQzODhiNWQ4ZDM4MzJkNjCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAJoHE8FXZSzRs8fJ9ri02H37wFo9iuwB1DHURrs/fmkLMGzO
EDyIGrb1fiFzWk7VN6XX2rXkV8OkTdgfwjDCxVIdDYhTRRPgEvKb0ZRCkoKzB6+3
bGAGt3YT+xFWJGAxXMBDFppyPqQHuC6tdvSAa8MP6Do69Ij3brZX1Ux1KUw5bGCA
RCOqQZ7cprpIWcQH4EdbNd9xVDdl7k3DiiIdlRU1xTpwKQpBl70f6mep9mnbKq86
D+1fqiMtNVbr8i3OG2CgvTbtk0nH4icYaRQOpOttJR+Zg5bpQde0dWkhrGbXhaur
L7p/82671djQXoTwB5cdNeOkSEkE4tPg3lgOztkCAwEAAaOCAhowggIWMB0GA1Ud
DgQWBBQawpPCboliVLwRbmy0OItdjTgy1jAfBgNVHSMEGDAWgBRyBHvhWydZAtz2
F9w9DhbcHzCAIjAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L2NnUjc0VnNuV1FMYzloZmNQUTRXM0I4d2dDSS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvNWUvNzk4NDQ3LTIxZjQtNDVhYi05OWRjLTFhYmUzYWMxMGFhNi8x
L0dzS1R3bTZKWWxTOEVXNXN0RGlMWFkwNE10WS5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNWUv
Nzk4NDQ3LTIxZjQtNDVhYi05OWRjLTFhYmUzYWMxMGFhNi8xL2NnUjc0VnNuV1FM
YzloZmNQUTRXM0I4d2dDSS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAw
BggrBgEFBQcBBwEB/wQhMB8wDAQCAAEwBgMEA8EAGDAPBAIAAjAJAwcAIAEGfABk
MA0GCSqGSIb3DQEBCwUAA4IBAQBtLYu0REOirWbKDcLP77r6o9bBhdVSjm+XvsVp
DDqaInj/qSlwmPDBL2BOYqbjiFm9S7dCh/7z9srvO8J3nc6Y2NRoSOmGlP2ewz6Z
W7XXH3dRzKSqXJssM6kT9viPwlP1k3qcJ9gbmIxbccfTlsSg1PbbtyYA3FaUOJxj
iRBoIS3bEaH40XOhAzxpelT7FggyYBMPsreGotobh5pvyWD+eX+UfQQiPlVbKsNn
8bX+xzPQZiii96bMwLAI43uZ/h0JvVhqGzrZMoNcWcWcm5krhYmfW3T+QZWgm1Sm
iBiTcM+Ugt6s27mFQocVDrEdX1iBxAHgEHvwBUo6tSRr+BIE
-----END CERTIFICATE-----
Generated at Thu May 1 16:06:56 2025 by rpki-client