Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/d_gKqurBQyeCNfgCHZdlM0G7-bs.roa
File: d_gKqurBQyeCNfgCHZdlM0G7-bs.roa (raw, json)
Hash identifier: 5+CIcSDirBnk2//a97/gPiIm6OQfAYr50N0ZYRFogrI=
Subject key identifier: 77:F8:0A:AA:EA:C1:43:27:82:35:F8:02:1D:97:65:33:41:BB:F9:BB
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 018724AC2E52B5FCA13BE94007C50E57DB3B
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/d_gKqurBQyeCNfgCHZdlM0G7-bs.roa
Signing time: Mon 27 Mar 2023 20:04:36 +0000
ROA not before: Mon 27 Mar 2023 20:04:36 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
2001:67c:64:ffff:0:187:24ab:f7a1/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:24:ac:2e:52:b5:fc:a1:3b:e9:40:07:c5:0e:57:db:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Mar 27 20:04:36 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=77f80aaaeac143278235f8021d97653341bbf9bb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:33:c7:25:a2:74:86:c6:73:79:ac:60:11:17:
a1:3d:cd:ea:5c:3d:1e:42:be:8c:8c:46:26:a4:20:
26:e1:2c:12:b6:e3:e4:57:dd:17:60:47:01:9b:0a:
5a:d9:76:2a:b4:4c:ae:65:2f:de:ae:59:8d:88:70:
2e:e2:98:fa:87:04:eb:4d:97:44:7f:bb:f9:ec:4d:
99:ea:c9:5f:f5:97:96:8c:96:26:fb:64:77:66:dd:
83:54:09:e8:d0:9c:7c:b5:f6:8f:f2:0a:87:87:11:
56:3d:ec:73:a6:1e:87:19:a1:39:83:aa:1c:57:70:
cc:6d:bc:28:8e:45:f9:6b:31:ca:21:f1:1e:b3:17:
72:29:1f:cc:83:ef:24:2c:52:6a:2b:b8:59:27:51:
1e:9b:1f:2d:96:32:c9:bd:4f:72:24:a2:fa:87:bf:
94:21:a5:6e:6c:94:0c:2a:f1:31:30:57:f6:57:2b:
8a:15:cc:72:06:9a:ef:f9:03:ca:72:87:7d:23:a0:
b6:37:66:5f:08:a1:ae:60:62:f0:9c:4e:92:5d:f4:
a1:62:55:95:05:ea:7a:82:30:1a:a7:8f:0a:5a:60:
bb:33:f1:de:cb:62:a5:b9:d6:e5:a8:b6:69:e2:d8:
25:97:a7:19:8b:54:60:10:41:34:3e:2a:35:4b:89:
b9:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:F8:0A:AA:EA:C1:43:27:82:35:F8:02:1D:97:65:33:41:BB:F9:BB
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/d_gKqurBQyeCNfgCHZdlM0G7-bs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
21:36:ac:6f:dc:c7:12:34:72:4e:81:69:1a:eb:92:e6:5b:28:
5f:32:c7:e1:30:4a:5c:08:75:f5:7b:d3:69:9c:5a:5f:d2:35:
d3:d8:78:ee:db:c4:5e:66:12:2c:78:1b:b9:d2:09:c8:d9:6d:
85:c4:a5:0f:44:9d:fe:0e:6c:90:84:c4:9a:35:73:a1:85:40:
bf:31:4e:55:2e:17:57:28:d3:01:73:6d:22:6e:6f:a0:1f:d7:
9f:eb:18:99:a2:c3:58:bc:33:6b:0b:96:27:4b:11:f3:db:0f:
dc:81:52:85:2f:27:a0:82:41:16:05:62:be:49:5a:42:b0:8b:
14:d5:40:51:08:e1:ea:c7:a5:10:b5:d6:93:4c:d5:58:5c:91:
22:05:3f:c3:90:b0:dd:57:f4:84:e3:cb:95:a9:67:50:ca:ca:
ba:33:86:56:83:87:c2:be:19:1e:87:53:e9:d2:01:bf:ac:d2:
98:c4:f7:6e:19:74:76:1d:89:bf:74:8a:0b:f5:70:6e:04:46:
bf:09:bf:c6:bb:f0:2a:a3:99:bd:33:14:8d:a7:70:63:1c:08:
d2:85:22:74:2e:4f:f9:da:2d:fd:48:34:00:83:85:86:ba:bf:
ec:36:12:29:33:ee:f2:66:63:96:50:55:8c:92:a0:4a:63:ef:
9d:30:a3:4a
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYckrC5StfyhO+lAB8UOV9s7MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcyMDQ3YmUxNWIyNzU5MDJkY2Y2MTdkYzNkMGUxNmRjMWYz
MDgwMjIwHhcNMjMwMzI3MjAwNDM2WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3N2Y4MGFhYWVhYzE0MzI3ODIzNWY4MDIxZDk3NjUzMzQxYmJmOWJiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlDPHJaJ0hsZzeaxgERehPc3qXD0e
Qr6MjEYmpCAm4SwStuPkV90XYEcBmwpa2XYqtEyuZS/erlmNiHAu4pj6hwTrTZdE
f7v57E2Z6slf9ZeWjJYm+2R3Zt2DVAno0Jx8tfaP8gqHhxFWPexzph6HGaE5g6oc
V3DMbbwojkX5azHKIfEesxdyKR/Mg+8kLFJqK7hZJ1Eemx8tljLJvU9yJKL6h7+U
IaVubJQMKvExMFf2VyuKFcxyBprv+QPKcod9I6C2N2ZfCKGuYGLwnE6SXfShYlWV
Bep6gjAap48KWmC7M/Hey2KludblqLZp4tgll6cZi1RgEEE0Pio1S4m5/QIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFHf4CqrqwUMngjX4Ah2XZTNBu/m7MB8GA1UdIwQY
MBaAFHIEe+FbJ1kC3PYX3D0OFtwfMIAiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMt
MWFiZTNhYzEwYWE2LzEvZF9nS3F1ckJReWVDTmZnQ0haZGxNMEc3LWJzLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMtMWFiZTNhYzEwYWE2
LzEvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBACE2rG/cxxI0ck6BaRrr
kuZbKF8yx+EwSlwIdfV702mcWl/SNdPYeO7bxF5mEix4G7nSCcjZbYXEpQ9Enf4O
bJCExJo1c6GFQL8xTlUuF1co0wFzbSJub6Af15/rGJmiw1i8M2sLlidLEfPbD9yB
UoUvJ6CCQRYFYr5JWkKwixTVQFEI4erHpRC11pNM1VhckSIFP8OQsN1X9ITjy5Wp
Z1DKyrozhlaDh8K+GR6HU+nSAb+s0pjE924ZdHYdib90igv1cG4ERr8Jv8a78Cqj
mb0zFI2ncGMcCNKFInQuT/naLf1INACDhYa6v+w2Eikz7vJmY5ZQVYySoEpj750w
o0o=
-----END CERTIFICATE-----
Generated at Thu May 1 06:35:46 2025 by rpki-client