Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/GyhILHGybB5oCIsOlL0R7mCiglo.roa
File: GyhILHGybB5oCIsOlL0R7mCiglo.roa (raw, json)
Hash identifier: a0zEyfNDzEwRGPOxoFtI0L5xiAeGFvatfFEAyMe1SfQ=
Subject key identifier: 1B:28:48:2C:71:B2:6C:1E:68:08:8B:0E:94:BD:11:EE:60:A2:82:5A
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0186AB426531BD845922ADB0C2C184C41984
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/GyhILHGybB5oCIsOlL0R7mCiglo.roa
Signing time: Sat 04 Mar 2023 06:15:00 +0000
ROA not before: Sat 04 Mar 2023 06:15:00 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:ab:42:65:31:bd:84:59:22:ad:b0:c2:c1:84:c4:19:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Mar 4 06:15:00 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=1b28482c71b26c1e68088b0e94bd11ee60a2825a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:e9:2e:b9:91:e2:14:2a:7c:25:90:05:1e:a8:
0e:32:7d:c9:e7:3c:b5:c6:55:8c:a2:53:5b:db:e0:
04:9e:18:06:45:b9:f9:cc:8c:49:0c:22:b4:5d:20:
fe:15:1d:39:b1:27:54:51:d2:e3:84:c7:a2:d6:3e:
96:30:fb:8d:f4:18:97:a1:25:8b:da:75:38:f3:06:
af:60:7b:9c:44:92:8b:0e:43:63:0a:04:37:cc:a4:
17:59:36:3f:85:2a:29:bd:68:d5:b5:cd:7d:17:03:
66:cf:ca:43:1f:d6:b9:eb:89:cd:e1:d1:bf:36:54:
7e:87:86:fe:e9:18:c5:4d:40:19:ba:da:8a:89:a9:
ac:92:c4:d7:c8:84:6b:20:4d:7f:51:c2:e6:29:b8:
ab:f2:74:de:18:12:d4:8b:c6:b0:93:5a:97:95:5c:
2e:08:6e:29:02:38:23:7b:aa:d0:d8:ac:01:5f:61:
82:c7:b8:15:6a:21:f5:7a:7a:d6:88:9d:8a:66:e3:
87:d9:c7:40:62:3d:e3:4e:a6:86:c8:f8:30:e4:38:
9d:eb:3e:bd:7d:95:3b:b5:42:0c:6f:7f:02:0f:c2:
9f:4a:ca:dd:d2:98:8e:af:2a:92:e4:b6:76:2c:98:
cc:8a:4a:bd:80:8d:08:3f:db:7b:3e:8b:aa:3c:aa:
ee:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:28:48:2C:71:B2:6C:1E:68:08:8B:0E:94:BD:11:EE:60:A2:82:5A
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/GyhILHGybB5oCIsOlL0R7mCiglo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
0f:f1:b9:57:1b:4e:2f:e5:94:12:e3:59:1c:5e:95:9a:78:1c:
10:5d:fd:c9:4a:ca:68:0b:46:09:3e:a1:db:8f:be:d3:20:a4:
d9:a9:1d:9b:3c:5e:9c:63:bf:bf:f0:13:08:46:1b:4f:72:ce:
0d:bf:aa:e8:2f:9f:e1:10:01:29:6f:6b:0d:2c:47:e5:20:8f:
30:01:8a:2e:28:f5:9a:fe:22:c3:81:95:3b:a8:54:d1:25:4c:
4d:db:4b:1b:a6:4b:1a:97:d7:27:5d:15:94:b2:c2:cb:bb:cb:
24:af:f2:42:9e:c0:24:0e:b6:2b:bd:c2:d1:9f:bd:6f:ad:8f:
7c:1d:6a:e4:e3:07:a0:5b:02:f7:7f:b8:32:2b:ab:ed:12:21:
f4:11:ef:3c:7d:50:09:e9:36:42:af:d5:a1:71:54:32:58:57:
51:67:65:33:3c:2c:1d:0c:c9:97:16:c7:07:21:c2:94:a3:92:
d0:82:23:84:36:8d:81:e4:80:a8:a6:36:16:71:f3:b6:dc:ae:
21:68:e3:c0:e5:ba:75:10:c0:cf:10:09:59:79:d5:a8:9e:9a:
44:00:9c:ab:06:ce:9d:13:a6:83:79:6e:64:e8:e1:96:4f:a9:
b2:24:71:1b:3f:0f:64:f6:4e:38:f1:80:0f:06:38:18:8f:8f:
07:5d:96:2b
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYarQmUxvYRZIq2wwsGExBmEMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcyMDQ3YmUxNWIyNzU5MDJkY2Y2MTdkYzNkMGUxNmRjMWYz
MDgwMjIwHhcNMjMwMzA0MDYxNTAwWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxYjI4NDgyYzcxYjI2YzFlNjgwODhiMGU5NGJkMTFlZTYwYTI4MjVhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApukuuZHiFCp8JZAFHqgOMn3J5zy1
xlWMolNb2+AEnhgGRbn5zIxJDCK0XSD+FR05sSdUUdLjhMei1j6WMPuN9BiXoSWL
2nU48wavYHucRJKLDkNjCgQ3zKQXWTY/hSopvWjVtc19FwNmz8pDH9a564nN4dG/
NlR+h4b+6RjFTUAZutqKiamsksTXyIRrIE1/UcLmKbir8nTeGBLUi8awk1qXlVwu
CG4pAjgje6rQ2KwBX2GCx7gVaiH1enrWiJ2KZuOH2cdAYj3jTqaGyPgw5Did6z69
fZU7tUIMb38CD8KfSsrd0piOryqS5LZ2LJjMikq9gI0IP9t7PouqPKruowIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFBsoSCxxsmweaAiLDpS9Ee5gooJaMB8GA1UdIwQY
MBaAFHIEe+FbJ1kC3PYX3D0OFtwfMIAiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMt
MWFiZTNhYzEwYWE2LzEvR3loSUxIR3liQjVvQ0lzT2xMMFI3bUNpZ2xvLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMtMWFiZTNhYzEwYWE2
LzEvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBAA/xuVcbTi/llBLjWRxe
lZp4HBBd/clKymgLRgk+oduPvtMgpNmpHZs8Xpxjv7/wEwhGG09yzg2/qugvn+EQ
ASlvaw0sR+UgjzABii4o9Zr+IsOBlTuoVNElTE3bSxumSxqX1yddFZSywsu7yySv
8kKewCQOtiu9wtGfvW+tj3wdauTjB6BbAvd/uDIrq+0SIfQR7zx9UAnpNkKv1aFx
VDJYV1FnZTM8LB0MyZcWxwchwpSjktCCI4Q2jYHkgKimNhZx87bcriFo48DlunUQ
wM8QCVl51aiemkQAnKsGzp0TpoN5bmTo4ZZPqbIkcRs/D2T2TjjxgA8GOBiPjwdd
lis=
-----END CERTIFICATE-----
Generated at Wed Apr 30 22:53:50 2025 by rpki-client