Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/gGxpL2iu-Ca1hEKEux8DNoW9P-o.roa
File: gGxpL2iu-Ca1hEKEux8DNoW9P-o.roa (raw, json)
Hash identifier: hOJR5usf/+n204kr7qgJn/+10yxeKOwFLxSfM9oBtDY=
Subject key identifier: 80:6C:69:2F:68:AE:F8:26:B5:84:42:84:BB:1F:03:36:85:BD:3F:EA
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0185CBA6CA270ADFD5EF77B845AE274A1E79
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/gGxpL2iu-Ca1hEKEux8DNoW9P-o.roa
Signing time: Thu 19 Jan 2023 20:09:43 +0000
ROA not before: Thu 19 Jan 2023 20:09:43 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:cb:a6:ca:27:0a:df:d5:ef:77:b8:45:ae:27:4a:1e:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Jan 19 20:09:43 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=806c692f68aef826b5844284bb1f033685bd3fea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:53:09:d6:4c:3b:83:97:75:e0:d0:c3:a8:05:
20:4a:72:3e:c9:22:70:91:22:2b:fa:9f:fe:76:9f:
7e:7c:ae:fb:80:b0:4e:99:ff:43:6f:f6:2e:71:54:
82:eb:30:d5:f5:0c:09:30:a5:66:88:66:0a:20:05:
c8:a8:db:a8:37:56:cf:a2:c2:20:87:90:9c:9a:39:
bf:19:87:d4:3e:d3:71:94:a2:b6:2f:f4:b8:34:91:
c9:14:08:a4:8b:e6:ac:70:d3:ec:8a:a2:70:ae:89:
bc:e7:ae:e9:3b:82:3c:b9:22:05:a4:de:44:13:1f:
db:22:5c:4b:be:8a:89:d6:cd:21:0e:3e:8c:8d:42:
70:59:fb:ad:c5:b6:3e:62:d4:a4:ae:ca:94:17:82:
77:d4:7b:d8:48:fb:65:30:f1:36:0e:97:ad:00:bc:
88:28:c3:fb:82:ab:8c:80:29:c6:53:a3:ac:a1:13:
5c:89:b1:4a:f3:9c:78:e1:fc:9f:88:aa:3e:0b:38:
72:29:61:f8:15:4c:1a:95:51:e2:a4:15:36:64:1c:
27:12:3f:3e:4c:7b:a7:f7:40:ce:e6:43:19:00:6e:
f1:a0:e7:ca:bc:28:36:da:ce:b8:49:32:6e:11:55:
a2:d0:b3:20:64:c5:67:32:9f:63:16:dc:f7:b4:fa:
3c:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:6C:69:2F:68:AE:F8:26:B5:84:42:84:BB:1F:03:36:85:BD:3F:EA
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/gGxpL2iu-Ca1hEKEux8DNoW9P-o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
44:d2:28:e2:49:81:12:85:47:bd:70:57:cc:f4:a2:92:61:1c:
c3:10:38:46:5a:43:3a:53:b4:f7:56:26:e0:2d:11:d0:13:e5:
42:24:30:a6:24:da:e0:14:a0:73:a7:1c:ce:20:a9:0d:46:c1:
1e:63:ff:2e:a3:29:5e:39:b4:58:a6:52:a1:59:fe:0f:f9:c8:
35:8a:99:07:96:24:66:2b:07:c0:f8:f1:41:e9:c8:a7:75:0d:
f9:ad:98:4d:5e:36:cb:a0:ec:f9:e5:ca:d2:98:c4:31:a3:18:
7f:0c:d6:e1:6f:8b:e4:94:94:24:4e:ad:33:67:91:9b:37:d0:
96:3d:29:8c:5a:12:37:e0:4a:2b:93:87:4a:69:4d:21:92:6d:
3e:ba:15:a1:45:d1:f4:37:02:59:4a:5b:0f:73:f9:8c:1d:89:
5c:a4:af:9d:95:bd:77:ed:f6:c8:ef:27:00:c9:c3:6e:0a:08:
f9:5a:f9:fa:a4:53:55:db:67:06:50:90:16:10:3a:97:1e:5a:
29:1f:dd:40:e0:0c:66:c8:61:17:1c:df:4f:1f:bd:be:64:8c:
74:e2:2f:f8:1b:82:92:cd:cc:cf:f4:6f:82:17:ec:cc:e2:a4:
7f:04:4b:17:3e:13:32:70:a4:83:42:50:28:a8:72:72:59:14:
f3:7f:1a:80
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYXLpsonCt/V73e4Ra4nSh55MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcyMDQ3YmUxNWIyNzU5MDJkY2Y2MTdkYzNkMGUxNmRjMWYz
MDgwMjIwHhcNMjMwMTE5MjAwOTQzWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4MDZjNjkyZjY4YWVmODI2YjU4NDQyODRiYjFmMDMzNjg1YmQzZmVhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo1MJ1kw7g5d14NDDqAUgSnI+ySJw
kSIr+p/+dp9+fK77gLBOmf9Db/YucVSC6zDV9QwJMKVmiGYKIAXIqNuoN1bPosIg
h5Ccmjm/GYfUPtNxlKK2L/S4NJHJFAiki+ascNPsiqJwrom8567pO4I8uSIFpN5E
Ex/bIlxLvoqJ1s0hDj6MjUJwWfutxbY+YtSkrsqUF4J31HvYSPtlMPE2DpetALyI
KMP7gquMgCnGU6OsoRNcibFK85x44fyfiKo+CzhyKWH4FUwalVHipBU2ZBwnEj8+
THun90DO5kMZAG7xoOfKvCg22s64STJuEVWi0LMgZMVnMp9jFtz3tPo8swIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFIBsaS9orvgmtYRChLsfAzaFvT/qMB8GA1UdIwQY
MBaAFHIEe+FbJ1kC3PYX3D0OFtwfMIAiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMt
MWFiZTNhYzEwYWE2LzEvZ0d4cEwyaXUtQ2ExaEVLRXV4OEROb1c5UC1vLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMtMWFiZTNhYzEwYWE2
LzEvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBAETSKOJJgRKFR71wV8z0
opJhHMMQOEZaQzpTtPdWJuAtEdAT5UIkMKYk2uAUoHOnHM4gqQ1GwR5j/y6jKV45
tFimUqFZ/g/5yDWKmQeWJGYrB8D48UHpyKd1DfmtmE1eNsug7PnlytKYxDGjGH8M
1uFvi+SUlCROrTNnkZs30JY9KYxaEjfgSiuTh0ppTSGSbT66FaFF0fQ3AllKWw9z
+YwdiVykr52VvXft9sjvJwDJw24KCPla+fqkU1XbZwZQkBYQOpceWikf3UDgDGbI
YRcc308fvb5kjHTiL/gbgpLNzM/0b4IX7MzipH8ESxc+EzJwpINCUCiocnJZFPN/
GoA=
-----END CERTIFICATE-----
Generated at Wed Apr 30 17:42:24 2025 by rpki-client