Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/_GgCDFasIRzvCSelHzjJXpui_X8.roa
File: _GgCDFasIRzvCSelHzjJXpui_X8.roa (raw, json)
Hash identifier: 56WuVNd0YPCt8igS3j3TLpvQxjLt2EimIQAmi6OzDeM=
Subject key identifier: FC:68:02:0C:56:AC:21:1C:EF:09:27:A5:1F:38:C9:5E:9B:A2:FD:7F
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0189A012B5169B866B294771BB9E6387F44A
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/_GgCDFasIRzvCSelHzjJXpui_X8.roa
Signing time: Sat 29 Jul 2023 05:15:27 +0000
ROA not before: Sat 29 Jul 2023 05:15:27 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:188:7858:a003/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:a0:12:b5:16:9b:86:6b:29:47:71:bb:9e:63:87:f4:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Jul 29 05:15:27 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=fc68020c56ac211cef0927a51f38c95e9ba2fd7f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:61:4b:73:49:e2:bb:4e:f1:08:49:ec:1e:63:
03:ca:80:41:97:3b:d7:72:26:32:89:22:44:67:97:
30:8c:84:29:8e:0b:7a:02:35:67:dc:8e:93:a7:4c:
e5:85:fd:a3:6c:b4:75:4e:cf:cb:8e:a9:0e:04:5b:
7d:31:17:c6:a1:5d:0d:05:70:55:20:d9:03:b2:0d:
b9:90:ee:ce:28:92:3e:62:6f:5f:8d:53:c9:ff:fb:
ff:21:da:7e:0a:81:71:7d:9b:40:ae:11:f0:05:5a:
71:b5:46:84:7c:6f:7d:c7:cc:5b:9a:c7:2f:22:21:
2c:a3:ff:cc:c4:eb:20:e3:15:c4:4e:2c:a9:cf:43:
ab:17:a3:83:9d:d7:5a:f7:70:a5:38:6c:60:5d:4e:
29:e7:e6:f7:ea:b3:6b:0d:4d:63:a8:f7:08:cd:c4:
e7:dd:a6:83:8f:64:46:ca:bd:fe:98:25:f0:4f:01:
0b:8f:08:37:1b:e6:32:44:a0:74:da:e1:9b:0c:b8:
2b:73:94:c9:62:af:18:ad:35:02:8c:9f:1f:29:8c:
ba:23:0e:aa:f8:e0:53:68:01:b4:e1:14:14:7b:1d:
33:64:8b:a3:7d:06:8a:b9:44:9c:f7:a4:e4:05:5a:
65:fd:15:3e:d2:b9:a9:36:59:c1:da:55:36:e2:e0:
42:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:68:02:0C:56:AC:21:1C:EF:09:27:A5:1F:38:C9:5E:9B:A2:FD:7F
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/_GgCDFasIRzvCSelHzjJXpui_X8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
a2:af:c1:c7:bd:39:c4:fe:c5:be:46:1f:76:20:af:2e:c9:a9:
43:ee:9a:76:2c:19:b7:5a:be:5a:aa:73:1d:ae:51:64:63:f5:
6a:55:6e:71:e6:e2:48:04:b1:6f:59:a5:c6:f8:48:fb:a7:11:
3d:3e:87:ef:52:a0:ff:3c:e6:52:3d:14:85:6f:16:3b:77:d4:
d3:33:de:b3:64:16:85:66:f5:05:a1:00:50:6b:3d:b0:a7:e1:
8f:c7:41:c7:dd:83:65:4d:a4:74:40:6d:3d:d0:44:76:ef:94:
c7:b9:88:02:29:a3:ff:7a:28:48:ab:8a:76:98:91:81:b1:5a:
98:66:fc:57:c1:da:5a:92:2b:04:35:78:3d:aa:9a:cd:bd:a0:
ae:bc:cd:8b:bf:51:bf:d8:e0:94:03:f0:5e:d0:2f:7a:99:1d:
4c:4d:91:38:29:45:92:c9:52:50:db:7b:e7:21:f0:08:af:85:
49:e9:e4:fe:88:5e:d2:a0:ba:df:9e:22:4d:6e:7d:84:87:c0:
72:67:f1:a0:9f:fc:77:be:92:c1:7b:19:b9:bb:ba:f2:83:ad:
2e:01:cc:be:69:51:b9:eb:17:69:81:3f:d8:f4:46:03:1a:b8:
96:d0:a7:e4:5b:99:97:a5:6e:80:ab:28:00:c3:2a:7d:9b:59:
cc:04:ff:2c
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYmgErUWm4ZrKUdxu55jh/RKMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcyMDQ3YmUxNWIyNzU5MDJkY2Y2MTdkYzNkMGUxNmRjMWYz
MDgwMjIwHhcNMjMwNzI5MDUxNTI3WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmYzY4MDIwYzU2YWMyMTFjZWYwOTI3YTUxZjM4Yzk1ZTliYTJmZDdmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqWFLc0niu07xCEnsHmMDyoBBlzvX
ciYyiSJEZ5cwjIQpjgt6AjVn3I6Tp0zlhf2jbLR1Ts/LjqkOBFt9MRfGoV0NBXBV
INkDsg25kO7OKJI+Ym9fjVPJ//v/Idp+CoFxfZtArhHwBVpxtUaEfG99x8xbmscv
IiEso//MxOsg4xXETiypz0OrF6ODndda93ClOGxgXU4p5+b36rNrDU1jqPcIzcTn
3aaDj2RGyr3+mCXwTwELjwg3G+YyRKB02uGbDLgrc5TJYq8YrTUCjJ8fKYy6Iw6q
+OBTaAG04RQUex0zZIujfQaKuUSc96TkBVpl/RU+0rmpNlnB2lU24uBCswIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFPxoAgxWrCEc7wknpR84yV6bov1/MB8GA1UdIwQY
MBaAFHIEe+FbJ1kC3PYX3D0OFtwfMIAiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMt
MWFiZTNhYzEwYWE2LzEvX0dnQ0RGYXNJUnp2Q1NlbEh6akpYcHVpX1g4LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMtMWFiZTNhYzEwYWE2
LzEvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBAKKvwce9OcT+xb5GH3Yg
ry7JqUPumnYsGbdavlqqcx2uUWRj9WpVbnHm4kgEsW9Zpcb4SPunET0+h+9SoP88
5lI9FIVvFjt31NMz3rNkFoVm9QWhAFBrPbCn4Y/HQcfdg2VNpHRAbT3QRHbvlMe5
iAIpo/96KEirinaYkYGxWphm/FfB2lqSKwQ1eD2qms29oK68zYu/Ub/Y4JQD8F7Q
L3qZHUxNkTgpRZLJUlDbe+ch8AivhUnp5P6IXtKgut+eIk1ufYSHwHJn8aCf/He+
ksF7Gbm7uvKDrS4BzL5pUbnrF2mBP9j0RgMauJbQp+RbmZelboCrKADDKn2bWcwE
/yw=
-----END CERTIFICATE-----
Generated at Thu May 1 12:52:24 2025 by rpki-client