Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/gCW5zkgPOvZ1tC4yTj8-b7CrlX4.roa
File: gCW5zkgPOvZ1tC4yTj8-b7CrlX4.roa (raw, json)
Hash identifier: vrxH/fprievVvdW3C+EBmEwasTkUrT9gvmVwjyAcgXo=
Subject key identifier: 80:25:B9:CE:48:0F:3A:F6:75:B4:2E:32:4E:3F:3E:6F:B0:AB:95:7E
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 018470E980A4ADCF3B6E2BA13CB4F8C5320B
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/gCW5zkgPOvZ1tC4yTj8-b7CrlX4.roa
Signing time: Sun 13 Nov 2022 12:14:21 +0000
ROA not before: Sun 13 Nov 2022 12:14:21 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:184:51c3:ad7c/128 maxlen: 128
2001:67c:64:ffff:0:184:3fbd:71f7/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:184:4250:a4df/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:70:e9:80:a4:ad:cf:3b:6e:2b:a1:3c:b4:f8:c5:32:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Nov 13 12:14:21 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=8025b9ce480f3af675b42e324e3f3e6fb0ab957e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:24:7a:4e:32:9b:41:2e:b2:37:04:51:16:e1:
ae:49:0c:c0:e9:f1:b4:d7:98:b5:0b:74:16:1f:c3:
08:d9:43:af:c7:c3:df:ed:43:80:91:49:db:3f:0b:
a0:09:0f:64:fc:cf:05:d8:69:03:4c:7d:83:aa:f4:
66:e5:57:1e:83:cb:77:dc:e7:61:42:bb:29:6b:29:
57:f0:3c:67:35:0d:80:b3:6b:54:ac:bd:d5:b7:c4:
79:06:5b:37:ef:7d:77:38:14:1f:7b:27:dc:b2:71:
80:e5:d6:60:76:71:e1:d5:ba:e7:13:6a:ff:28:65:
4c:dd:88:81:17:8a:cf:1d:f1:fe:e1:60:c8:53:f4:
81:e2:1b:47:95:bb:a0:22:bc:60:b5:23:3f:2e:43:
ac:b7:b8:ce:bc:45:f7:db:ac:b1:de:7f:74:a2:d6:
15:c8:47:47:0a:9f:23:76:91:15:a4:e8:1d:2a:bd:
cd:1e:b8:fd:7a:ed:ca:4d:9d:57:a2:70:2f:56:ca:
7b:85:61:0c:70:51:b6:cc:db:4b:99:fd:08:a7:d5:
4a:c7:eb:f4:d2:fc:26:82:00:2c:f1:1b:3d:9c:28:
b6:ca:10:e1:d1:df:d5:e7:36:09:2d:c1:67:80:ab:
c9:ad:32:22:64:03:bf:5b:7a:82:0c:4a:56:f2:91:
d4:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:25:B9:CE:48:0F:3A:F6:75:B4:2E:32:4E:3F:3E:6F:B0:AB:95:7E
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/gCW5zkgPOvZ1tC4yTj8-b7CrlX4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
75:3f:ef:7b:a4:da:b1:07:bd:dc:85:e6:49:1e:91:f2:e5:b2:
08:95:7a:fb:07:83:dd:1d:de:96:71:24:37:0c:05:62:e7:17:
4a:2f:33:d3:56:19:85:67:47:a9:bd:ff:83:d0:59:e6:a2:ed:
f3:10:99:b6:ee:64:dd:da:55:f2:d1:dc:ee:48:d9:13:a4:7f:
13:5b:6f:b4:8b:49:ab:b7:ee:42:64:30:dc:18:91:fb:61:12:
89:f5:c9:68:f5:a5:91:4e:3c:07:56:85:42:90:e7:f9:12:a4:
cc:12:86:a5:b8:f9:10:72:01:90:45:60:6e:a1:b0:d7:3e:d5:
44:16:6f:34:e8:95:db:13:0c:d6:d7:ab:ec:83:42:f1:71:83:
32:6a:bd:72:c8:39:b2:f4:09:a3:86:b7:08:cc:93:4a:1d:da:
e2:1c:db:b6:53:57:46:67:97:de:a0:06:13:28:50:07:14:37:
e3:8e:c2:50:78:62:1f:55:33:e9:b8:f9:1d:16:d8:a8:0d:a5:
4d:ec:17:6e:e2:ea:37:2d:ab:aa:ed:a0:9b:02:4d:6e:59:ed:
ab:d9:31:ba:3f:0c:aa:19:cb:65:65:a0:58:15:8b:06:ce:22:
1b:f8:4c:8d:9a:6d:99:c8:30:65:4d:f9:92:56:7a:6b:de:38:
d6:3b:dd:c1
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYRw6YCkrc87biuhPLT4xTILMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcyMDQ3YmUxNWIyNzU5MDJkY2Y2MTdkYzNkMGUxNmRjMWYz
MDgwMjIwHhcNMjIxMTEzMTIxNDIxWhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4MDI1YjljZTQ4MGYzYWY2NzViNDJlMzI0ZTNmM2U2ZmIwYWI5NTdlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4iR6TjKbQS6yNwRRFuGuSQzA6fG0
15i1C3QWH8MI2UOvx8Pf7UOAkUnbPwugCQ9k/M8F2GkDTH2DqvRm5Vceg8t33Odh
QrspaylX8DxnNQ2As2tUrL3Vt8R5Bls37313OBQfeyfcsnGA5dZgdnHh1brnE2r/
KGVM3YiBF4rPHfH+4WDIU/SB4htHlbugIrxgtSM/LkOst7jOvEX326yx3n90otYV
yEdHCp8jdpEVpOgdKr3NHrj9eu3KTZ1XonAvVsp7hWEMcFG2zNtLmf0Ip9VKx+v0
0vwmggAs8Rs9nCi2yhDh0d/V5zYJLcFngKvJrTIiZAO/W3qCDEpW8pHUFwIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFIAluc5IDzr2dbQuMk4/Pm+wq5V+MB8GA1UdIwQY
MBaAFHIEe+FbJ1kC3PYX3D0OFtwfMIAiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMt
MWFiZTNhYzEwYWE2LzEvZ0NXNXprZ1BPdloxdEM0eVRqOC1iN0NybFg0LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMtMWFiZTNhYzEwYWE2
LzEvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBAHU/73uk2rEHvdyF5kke
kfLlsgiVevsHg90d3pZxJDcMBWLnF0ovM9NWGYVnR6m9/4PQWeai7fMQmbbuZN3a
VfLR3O5I2ROkfxNbb7SLSau37kJkMNwYkfthEon1yWj1pZFOPAdWhUKQ5/kSpMwS
hqW4+RByAZBFYG6hsNc+1UQWbzToldsTDNbXq+yDQvFxgzJqvXLIObL0CaOGtwjM
k0od2uIc27ZTV0Znl96gBhMoUAcUN+OOwlB4Yh9VM+m4+R0W2KgNpU3sF27i6jct
q6rtoJsCTW5Z7avZMbo/DKoZy2VloFgViwbOIhv4TI2abZnIMGVN+ZJWemveONY7
3cE=
-----END CERTIFICATE-----
Generated at Sun May 4 04:11:32 2025 by rpki-client