Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/gALrpytyWduKaOcSzfi-b8Mki7k.roa
File: gALrpytyWduKaOcSzfi-b8Mki7k.roa (raw, json)
Hash identifier: /mSOl9rmQYIpIZkq8YpOOMRAqaerySI9S2qzeGEH/Gw=
Subject key identifier: 80:02:EB:A7:2B:72:59:DB:8A:68:E7:12:CD:F8:BE:6F:C3:24:8B:B9
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0185782D7179022260F90723E656C69335FF
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/gALrpytyWduKaOcSzfi-b8Mki7k.roa
Signing time: Tue 03 Jan 2023 15:08:42 +0000
ROA not before: Tue 03 Jan 2023 15:08:42 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:185:3dcc:d8f/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:78:2d:71:79:02:22:60:f9:07:23:e6:56:c6:93:35:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Jan 3 15:08:42 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=8002eba72b7259db8a68e712cdf8be6fc3248bb9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:8e:71:9e:25:4c:44:e2:05:14:71:ec:4d:2a:
3e:42:d3:e0:92:39:86:9b:77:38:e9:b0:69:ee:85:
8c:73:77:ca:d6:13:12:7f:9a:56:69:9a:22:9f:c5:
bc:23:72:67:8b:1e:84:ae:f5:4b:08:4c:6a:0b:97:
1d:37:7e:f4:b8:05:ba:f9:31:1f:9f:48:18:15:85:
4a:0d:8a:8b:a3:27:da:91:98:a4:23:10:78:66:27:
23:cc:13:13:04:90:48:99:d2:51:e7:57:8a:af:93:
6f:f1:49:aa:2c:97:b0:f3:68:bc:89:2a:35:04:db:
ed:06:89:b0:07:2b:94:e3:49:37:77:fd:a1:2d:28:
af:9e:2b:42:49:cd:1d:5a:1b:e4:ed:d4:55:c2:5d:
93:ba:7a:3d:eb:25:9f:76:9b:4d:de:c5:c3:f4:5b:
f8:a3:01:85:93:e7:ca:c9:cf:05:3f:43:fa:d1:9a:
0b:cf:06:2d:45:4c:84:1c:f5:02:4b:73:79:59:76:
68:e2:9f:1a:9d:2f:47:05:ed:0c:c8:6b:63:e8:7d:
80:b4:2c:e7:55:c3:e4:c0:78:bd:d5:68:2d:8e:60:
68:1c:fe:04:33:7b:eb:57:ec:3a:bf:39:94:d7:bd:
5b:83:f7:21:66:3b:ac:af:7b:2a:45:95:2a:76:ae:
ab:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:02:EB:A7:2B:72:59:DB:8A:68:E7:12:CD:F8:BE:6F:C3:24:8B:B9
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/gALrpytyWduKaOcSzfi-b8Mki7k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
48:fb:ff:bb:79:9c:2c:3c:26:6e:99:4e:70:ee:8d:b9:0a:db:
f7:f4:08:a0:61:f9:8d:76:ae:74:1f:c5:2a:b2:0d:1a:fd:d0:
43:56:00:da:68:04:ee:a7:a8:97:51:fc:db:da:77:a6:78:7a:
02:b7:01:92:c8:bb:d8:e1:f7:ed:f1:a6:86:21:7d:3e:05:8a:
58:d9:42:2b:31:95:4c:0c:da:f5:b9:1d:54:3d:3b:28:09:50:
e1:c4:6a:93:51:7a:17:95:56:c4:19:9c:e0:ed:1d:c4:99:3b:
d9:92:93:04:f7:30:41:24:93:39:62:74:b9:bb:8c:b5:21:38:
be:9b:ba:07:5d:d8:f0:c4:78:f9:11:13:f4:5b:de:b8:3a:2c:
c1:89:69:0c:8e:7c:d8:d4:9b:65:ae:9e:c4:c1:cd:7d:95:32:
16:61:6c:ec:31:4c:cb:8d:30:6c:7a:97:09:46:79:7e:3f:98:
c1:1f:68:3b:7b:ce:1d:8a:02:9a:07:26:e2:e6:c7:02:25:25:
04:e6:7f:68:26:a3:79:46:41:1a:07:69:df:e7:f7:4f:5a:21:
04:c9:8d:15:4f:ed:e4:2b:a1:74:de:85:d3:3f:c5:eb:aa:4d:
e8:72:aa:b8:31:23:22:cd:fd:7e:af:72:5c:7b:f2:c0:93:13:
a2:64:75:03
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYV4LXF5AiJg+Qcj5lbGkzX/MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcyMDQ3YmUxNWIyNzU5MDJkY2Y2MTdkYzNkMGUxNmRjMWYz
MDgwMjIwHhcNMjMwMTAzMTUwODQyWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4MDAyZWJhNzJiNzI1OWRiOGE2OGU3MTJjZGY4YmU2ZmMzMjQ4YmI5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6I5xniVMROIFFHHsTSo+QtPgkjmG
m3c46bBp7oWMc3fK1hMSf5pWaZoin8W8I3Jnix6ErvVLCExqC5cdN370uAW6+TEf
n0gYFYVKDYqLoyfakZikIxB4ZicjzBMTBJBImdJR51eKr5Nv8UmqLJew82i8iSo1
BNvtBomwByuU40k3d/2hLSivnitCSc0dWhvk7dRVwl2Tuno96yWfdptN3sXD9Fv4
owGFk+fKyc8FP0P60ZoLzwYtRUyEHPUCS3N5WXZo4p8anS9HBe0MyGtj6H2AtCzn
VcPkwHi91WgtjmBoHP4EM3vrV+w6vzmU171bg/chZjusr3sqRZUqdq6rOwIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFIAC66crclnbimjnEs34vm/DJIu5MB8GA1UdIwQY
MBaAFHIEe+FbJ1kC3PYX3D0OFtwfMIAiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMt
MWFiZTNhYzEwYWE2LzEvZ0FMcnB5dHlXZHVLYU9jU3pmaS1iOE1raTdrLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMtMWFiZTNhYzEwYWE2
LzEvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBAEj7/7t5nCw8Jm6ZTnDu
jbkK2/f0CKBh+Y12rnQfxSqyDRr90ENWANpoBO6nqJdR/Nvad6Z4egK3AZLIu9jh
9+3xpoYhfT4FiljZQisxlUwM2vW5HVQ9OygJUOHEapNReheVVsQZnODtHcSZO9mS
kwT3MEEkkzlidLm7jLUhOL6bugdd2PDEePkRE/Rb3rg6LMGJaQyOfNjUm2WunsTB
zX2VMhZhbOwxTMuNMGx6lwlGeX4/mMEfaDt7zh2KApoHJuLmxwIlJQTmf2gmo3lG
QRoHad/n909aIQTJjRVP7eQroXTehdM/xeuqTehyqrgxIyLN/X6vclx78sCTE6Jk
dQM=
-----END CERTIFICATE-----
Generated at Thu May 1 05:38:22 2025 by rpki-client