Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/GwzLm4drISqSnj8ig5Gp_AFsrE4.roa
File: GwzLm4drISqSnj8ig5Gp_AFsrE4.roa (raw, json)
Hash identifier: 1pZOA2DtuRTb129lUM1dA2tdzlAxeQPe5e2ywhJ1Q28=
Subject key identifier: 1B:0C:CB:9B:87:6B:21:2A:92:9E:3F:22:83:91:A9:FC:01:6C:AC:4E
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0186146418519FC5FE186920E8FCC3132B3E
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/GwzLm4drISqSnj8ig5Gp_AFsrE4.roa
Signing time: Thu 02 Feb 2023 23:09:09 +0000
ROA not before: Thu 02 Feb 2023 23:09:09 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:14:64:18:51:9f:c5:fe:18:69:20:e8:fc:c3:13:2b:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Feb 2 23:09:09 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=1b0ccb9b876b212a929e3f228391a9fc016cac4e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:79:be:38:43:77:b1:98:14:66:7a:bd:13:0f:
3f:0f:c3:6d:a6:01:be:5c:03:92:c4:58:15:cf:9c:
6f:91:ca:83:6d:33:fd:c5:02:03:98:2d:9d:71:28:
8b:22:ef:26:3d:eb:f1:e0:5d:c9:a3:60:62:72:9f:
35:ea:22:2f:11:47:24:67:dd:c8:d2:e4:35:30:6c:
c8:66:88:a3:ed:8a:49:a8:25:59:4d:18:d2:d2:d4:
00:d9:17:72:ab:60:a7:7d:df:c5:fa:d9:44:bb:1c:
80:4a:e5:68:40:71:71:cb:a7:e6:17:a7:03:a3:69:
6a:b9:d5:59:a2:b5:69:66:09:5e:ee:39:9f:e2:88:
80:e9:4f:2d:72:ad:50:c2:a4:33:c3:75:98:28:68:
42:59:6a:36:bd:e3:8c:98:df:65:d2:b8:d4:bf:89:
1f:51:86:65:9a:0f:a7:8a:82:98:5d:41:4a:48:58:
82:3a:ec:25:4d:f6:a4:1a:6e:b5:32:6a:7b:2e:c0:
1f:47:ac:11:fb:46:b6:7a:d3:ac:66:4a:12:27:0d:
9a:ee:60:37:90:a5:5f:3e:de:6a:71:9c:da:aa:87:
87:a2:cf:3a:10:07:aa:23:f2:0e:b1:69:b0:1b:f6:
fb:37:f8:4e:37:2f:d2:81:58:0f:4c:8a:c8:63:9d:
87:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:0C:CB:9B:87:6B:21:2A:92:9E:3F:22:83:91:A9:FC:01:6C:AC:4E
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/GwzLm4drISqSnj8ig5Gp_AFsrE4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
4e:ec:1c:6a:40:bb:1c:f0:63:b7:b8:b1:f2:d0:dc:4e:1e:5a:
bb:02:2c:fc:38:dc:66:3f:9e:91:f5:b9:89:8a:38:d6:0b:22:
f6:5b:d6:2e:35:91:01:c5:d7:f3:76:89:e8:f3:f6:4e:e8:ec:
1a:5e:d2:68:74:d3:2f:47:c1:79:a4:2e:92:15:a7:e7:22:19:
33:b6:99:7d:9a:e8:6e:b4:33:7f:66:7a:5a:f8:97:38:32:ab:
74:32:bd:84:92:77:cf:ae:a3:cd:c9:75:95:96:46:21:e4:11:
83:e8:e8:40:b1:37:f2:3c:e4:1c:57:21:41:a1:a4:d5:e9:55:
7a:0e:6a:68:3d:8d:79:98:ff:54:29:37:82:ea:29:ac:7d:78:
ef:10:79:89:a9:8c:3e:63:43:26:6c:92:96:a6:67:4f:7d:e3:
91:2f:20:c1:13:30:7d:ac:3d:68:b7:1e:86:5c:e9:3a:6e:b3:
42:d7:32:08:e2:66:1d:d7:51:46:68:da:a1:f7:7a:b8:dd:39:
db:1d:51:6b:f8:5a:66:9d:34:76:8e:0e:85:ec:de:61:57:c3:
78:5e:d3:d7:ca:38:86:77:19:bc:f3:2a:b3:6a:35:bc:7b:91:
2c:44:3f:53:ac:2c:be:7e:4f:da:55:a3:66:6e:41:0f:7e:35:
87:a6:ff:95
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYYUZBhRn8X+GGkg6PzDEys+MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcyMDQ3YmUxNWIyNzU5MDJkY2Y2MTdkYzNkMGUxNmRjMWYz
MDgwMjIwHhcNMjMwMjAyMjMwOTA5WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxYjBjY2I5Yjg3NmIyMTJhOTI5ZTNmMjI4MzkxYTlmYzAxNmNhYzRlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAknm+OEN3sZgUZnq9Ew8/D8NtpgG+
XAOSxFgVz5xvkcqDbTP9xQIDmC2dcSiLIu8mPevx4F3Jo2Bicp816iIvEUckZ93I
0uQ1MGzIZoij7YpJqCVZTRjS0tQA2Rdyq2Cnfd/F+tlEuxyASuVoQHFxy6fmF6cD
o2lqudVZorVpZgle7jmf4oiA6U8tcq1QwqQzw3WYKGhCWWo2veOMmN9l0rjUv4kf
UYZlmg+nioKYXUFKSFiCOuwlTfakGm61Mmp7LsAfR6wR+0a2etOsZkoSJw2a7mA3
kKVfPt5qcZzaqoeHos86EAeqI/IOsWmwG/b7N/hONy/SgVgPTIrIY52HqwIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFBsMy5uHayEqkp4/IoORqfwBbKxOMB8GA1UdIwQY
MBaAFHIEe+FbJ1kC3PYX3D0OFtwfMIAiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMt
MWFiZTNhYzEwYWE2LzEvR3d6TG00ZHJJU3FTbmo4aWc1R3BfQUZzckU0LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMtMWFiZTNhYzEwYWE2
LzEvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBAE7sHGpAuxzwY7e4sfLQ
3E4eWrsCLPw43GY/npH1uYmKONYLIvZb1i41kQHF1/N2iejz9k7o7Bpe0mh00y9H
wXmkLpIVp+ciGTO2mX2a6G60M39melr4lzgyq3QyvYSSd8+uo83JdZWWRiHkEYPo
6ECxN/I85BxXIUGhpNXpVXoOamg9jXmY/1QpN4LqKax9eO8QeYmpjD5jQyZskpam
Z09945EvIMETMH2sPWi3HoZc6Tpus0LXMgjiZh3XUUZo2qH3erjdOdsdUWv4Wmad
NHaODoXs3mFXw3he09fKOIZ3GbzzKrNqNbx7kSxEP1OsLL5+T9pVo2ZuQQ9+NYem
/5U=
-----END CERTIFICATE-----
Generated at Wed Apr 30 18:43:52 2025 by rpki-client