Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/gD7fIDDDikLafCU1gS_MxTqDWQY.roa
File: gD7fIDDDikLafCU1gS_MxTqDWQY.roa (raw, json)
Hash identifier: KGMPPLIyB/qz99hrkYPN6mwja5OrBFEZgbG3Hjub5sM=
Subject key identifier: 80:3E:DF:20:30:C3:8A:42:DA:7C:25:35:81:2F:CC:C5:3A:83:59:06
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 018963C48A2816368E6DCFFA58D46B217F01
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/gD7fIDDDikLafCU1gS_MxTqDWQY.roa
Signing time: Mon 17 Jul 2023 12:12:52 +0000
ROA not before: Mon 17 Jul 2023 12:12:52 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:188:5fe2:b396/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:187:4695:a68a/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:188:7858:a003/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64:ffff:0:187:fa9a:b088/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:187:b2b8:a7dd/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:63:c4:8a:28:16:36:8e:6d:cf:fa:58:d4:6b:21:7f:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Jul 17 12:12:52 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=803edf2030c38a42da7c2535812fccc53a835906
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:b2:56:5f:0b:92:73:14:9a:53:95:58:ac:1e:
53:8d:68:ee:2c:7f:40:fb:6b:c3:2c:df:cf:bd:e1:
8d:d0:1b:a4:4f:55:5d:4c:24:2c:41:08:d1:89:50:
46:7f:9a:6b:de:a3:6e:9f:26:e1:d2:79:7d:18:91:
0d:03:36:4f:bb:05:ce:f9:0f:26:f2:03:5a:5b:e2:
ad:52:8f:3e:0f:11:d0:3b:53:88:91:ac:d1:be:c6:
cc:77:9b:f3:53:ec:91:6a:03:c8:72:ad:60:d2:ff:
f7:26:e5:f8:0b:3d:f0:7e:21:f9:17:a0:12:be:35:
c2:5c:00:0c:b1:db:da:15:81:b4:e6:2d:2d:2d:51:
63:a9:92:33:f7:c5:c7:00:d8:b2:48:e9:17:f7:21:
66:6f:42:20:fc:78:9b:89:23:7a:62:a9:3c:79:f3:
17:ce:a0:6e:a2:3f:a5:81:a6:82:42:e1:b4:8f:7c:
d0:c0:c5:21:bb:c8:cb:c0:24:a8:24:93:b1:7f:2e:
18:7d:b9:d5:e2:e1:e5:d5:ec:21:cc:c9:9b:fa:34:
d5:67:ed:77:62:50:56:4a:0c:df:14:31:28:3a:80:
ae:bc:b9:ae:06:51:e2:44:df:5e:56:9c:e1:64:01:
f5:24:cc:1e:90:ee:bc:c8:b6:b1:4c:eb:8c:3b:d0:
9e:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:3E:DF:20:30:C3:8A:42:DA:7C:25:35:81:2F:CC:C5:3A:83:59:06
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/gD7fIDDDikLafCU1gS_MxTqDWQY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
1f:99:46:29:1e:1e:2d:a1:79:51:76:65:cf:6a:c4:ed:1f:32:
86:0a:fe:ad:30:47:62:09:24:f7:01:1d:c7:0b:c8:ae:af:06:
da:ff:c5:5a:75:3a:66:18:62:a5:85:42:b1:38:e2:df:74:c5:
f4:46:0f:a1:28:0d:c0:a3:bc:96:3f:bb:b7:b8:f9:62:3f:b6:
f6:a7:39:40:d5:58:6e:b0:a5:22:12:f2:a6:4b:35:9a:71:6e:
26:6a:38:be:91:b5:87:38:22:a7:01:ee:e7:06:3c:29:58:16:
77:61:9c:13:5b:28:91:3f:cb:36:59:1b:42:1f:3d:19:6e:e3:
f2:f4:f7:2c:6c:ee:5a:ab:4a:c7:a7:8f:e4:33:44:8c:aa:48:
55:ab:49:eb:43:38:cf:bc:d6:b1:e0:40:5e:24:ea:4d:ab:e5:
9d:7c:2f:ab:b2:76:7f:97:95:d4:26:2d:a9:c1:15:87:c6:c3:
bc:16:17:65:cb:62:cc:cf:62:43:5a:6d:c1:52:42:0e:12:91:
af:6d:2c:77:18:63:2b:79:95:b6:b8:8a:5c:ac:c0:7d:38:6d:
3e:67:13:17:31:a6:1d:67:9c:a3:2f:68:6c:e7:9e:e4:bd:c9:
91:44:f5:b8:18:46:8d:16:82:e7:e3:f6:3b:4a:86:c2:6d:96:
94:2a:a8:86
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYljxIooFjaObc/6WNRrIX8BMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcyMDQ3YmUxNWIyNzU5MDJkY2Y2MTdkYzNkMGUxNmRjMWYz
MDgwMjIwHhcNMjMwNzE3MTIxMjUyWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4MDNlZGYyMDMwYzM4YTQyZGE3YzI1MzU4MTJmY2NjNTNhODM1OTA2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAprJWXwuScxSaU5VYrB5TjWjuLH9A
+2vDLN/PveGN0BukT1VdTCQsQQjRiVBGf5pr3qNunybh0nl9GJENAzZPuwXO+Q8m
8gNaW+KtUo8+DxHQO1OIkazRvsbMd5vzU+yRagPIcq1g0v/3JuX4Cz3wfiH5F6AS
vjXCXAAMsdvaFYG05i0tLVFjqZIz98XHANiySOkX9yFmb0Ig/HibiSN6Yqk8efMX
zqBuoj+lgaaCQuG0j3zQwMUhu8jLwCSoJJOxfy4YfbnV4uHl1ewhzMmb+jTVZ+13
YlBWSgzfFDEoOoCuvLmuBlHiRN9eVpzhZAH1JMwekO68yLaxTOuMO9Ce6wIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFIA+3yAww4pC2nwlNYEvzMU6g1kGMB8GA1UdIwQY
MBaAFHIEe+FbJ1kC3PYX3D0OFtwfMIAiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMt
MWFiZTNhYzEwYWE2LzEvZ0Q3ZklERERpa0xhZkNVMWdTX014VHFEV1FZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMtMWFiZTNhYzEwYWE2
LzEvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBAB+ZRikeHi2heVF2Zc9q
xO0fMoYK/q0wR2IJJPcBHccLyK6vBtr/xVp1OmYYYqWFQrE44t90xfRGD6EoDcCj
vJY/u7e4+WI/tvanOUDVWG6wpSIS8qZLNZpxbiZqOL6RtYc4IqcB7ucGPClYFndh
nBNbKJE/yzZZG0IfPRlu4/L09yxs7lqrSsenj+QzRIyqSFWrSetDOM+81rHgQF4k
6k2r5Z18L6uydn+XldQmLanBFYfGw7wWF2XLYszPYkNabcFSQg4Ska9tLHcYYyt5
lba4ilyswH04bT5nExcxph1nnKMvaGznnuS9yZFE9bgYRo0Wgufj9jtKhsJtlpQq
qIY=
-----END CERTIFICATE-----
Generated at Sat May 3 00:04:37 2025 by rpki-client