Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/gP9BOccW-SORV7MjAj65xz46cAI.roa
File: gP9BOccW-SORV7MjAj65xz46cAI.roa (raw, json)
Hash identifier: YOdud5fYxOhAKly9Mdp5uIajpjAD4LS6xJKBzZGmWJo=
Subject key identifier: 80:FF:41:39:C7:16:F9:23:91:57:B3:23:02:3E:B9:C7:3E:3A:70:02
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 01858EB19AD7258233806EA93226237905A2
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/gP9BOccW-SORV7MjAj65xz46cAI.roa
Signing time: Sun 08 Jan 2023 00:04:42 +0000
ROA not before: Sun 08 Jan 2023 00:04:42 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:185:8eb1:2942/128 maxlen: 128
2001:67c:64:ffff:0:185:3dcc:d8f/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:8e:b1:9a:d7:25:82:33:80:6e:a9:32:26:23:79:05:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Jan 8 00:04:42 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=80ff4139c716f9239157b323023eb9c73e3a7002
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:3f:a0:32:6f:4a:1e:c4:58:a4:ae:11:50:8e:
4b:83:05:bb:d9:4c:e4:d0:f8:84:28:72:bb:c1:1c:
84:65:55:b8:ac:a8:ed:e6:7a:56:20:89:d3:d7:58:
2a:ba:d1:ee:1c:43:0e:ad:42:c3:79:67:d1:82:dd:
6e:20:f4:d7:2d:f1:07:50:8e:93:f0:e3:94:ad:db:
48:1b:de:49:7a:e9:b6:a9:8a:ed:bc:e5:e7:1b:21:
f8:e5:96:4f:97:5a:1b:77:0e:d7:6c:1e:36:20:8d:
95:d0:b3:28:73:c7:f0:c4:6a:f8:ea:07:d4:16:5c:
05:ca:b4:c3:24:19:97:a5:db:db:48:1b:29:6d:0b:
fd:6e:40:d4:c7:44:32:b6:97:8f:f0:39:ff:05:53:
89:76:67:30:cb:8f:bb:c2:10:2a:90:f8:f9:28:8c:
09:1b:3d:b2:22:10:0a:78:6f:17:19:e8:7a:04:e1:
88:62:c3:66:ff:b5:1c:04:b8:62:24:a6:05:c5:93:
05:32:ab:e7:e2:8f:62:7a:5c:17:24:5d:23:e3:6c:
ab:d2:1f:d8:0a:9e:fc:dd:f1:87:fa:68:a2:93:3e:
53:3d:59:eb:d9:82:e1:64:4f:38:fb:ee:96:66:7a:
ef:38:5d:86:3e:1e:54:66:97:be:ba:5b:c2:c2:68:
91:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:FF:41:39:C7:16:F9:23:91:57:B3:23:02:3E:B9:C7:3E:3A:70:02
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/gP9BOccW-SORV7MjAj65xz46cAI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
b0:0f:fc:e1:7e:eb:a6:50:e1:3e:33:a5:70:13:a5:49:23:9e:
eb:e9:53:5a:3e:fd:ef:29:a5:8d:87:88:bf:6d:86:7b:5f:b5:
90:8c:6b:5a:73:f5:e0:1e:50:dc:a9:d0:cd:51:c3:71:41:50:
79:62:d6:74:de:9f:ba:2f:3b:22:73:0d:89:15:ad:b9:37:19:
91:cb:44:81:0b:1b:26:48:b4:3b:5b:17:5e:44:8e:63:86:34:
ef:80:6f:91:9f:0c:25:91:79:9c:18:b1:3d:b2:8d:61:3b:d7:
bc:19:b7:18:f3:16:d2:b8:16:db:ef:2d:29:1d:e9:d5:57:43:
e0:01:5b:52:36:84:72:0b:b2:2c:f0:fd:1d:3f:72:e5:17:e7:
90:dc:68:7e:d1:80:34:ea:f9:52:c3:14:6d:e4:af:30:1c:1c:
8c:3a:9c:12:27:fc:6d:89:11:14:09:24:52:87:cb:02:5e:d7:
24:df:fb:fa:0a:a5:b8:48:15:61:e6:31:7f:20:05:e2:b6:68:
2a:86:e3:d7:ad:1b:59:ef:c8:59:c6:37:24:bb:e8:df:ef:60:
e4:24:00:bb:e3:e6:3e:47:6c:8a:14:b3:78:7c:de:53:5e:d6:
a9:e6:f6:63:5a:bf:3c:21:f8:85:05:c0:93:ae:2b:e4:85:e7:
e3:ee:7d:ea
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYWOsZrXJYIzgG6pMiYjeQWiMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcyMDQ3YmUxNWIyNzU5MDJkY2Y2MTdkYzNkMGUxNmRjMWYz
MDgwMjIwHhcNMjMwMTA4MDAwNDQyWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4MGZmNDEzOWM3MTZmOTIzOTE1N2IzMjMwMjNlYjljNzNlM2E3MDAyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiT+gMm9KHsRYpK4RUI5LgwW72Uzk
0PiEKHK7wRyEZVW4rKjt5npWIInT11gqutHuHEMOrULDeWfRgt1uIPTXLfEHUI6T
8OOUrdtIG95Jeum2qYrtvOXnGyH45ZZPl1obdw7XbB42II2V0LMoc8fwxGr46gfU
FlwFyrTDJBmXpdvbSBspbQv9bkDUx0QytpeP8Dn/BVOJdmcwy4+7whAqkPj5KIwJ
Gz2yIhAKeG8XGeh6BOGIYsNm/7UcBLhiJKYFxZMFMqvn4o9ielwXJF0j42yr0h/Y
Cp783fGH+miikz5TPVnr2YLhZE84++6WZnrvOF2GPh5UZpe+ulvCwmiRiQIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFID/QTnHFvkjkVezIwI+ucc+OnACMB8GA1UdIwQY
MBaAFHIEe+FbJ1kC3PYX3D0OFtwfMIAiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMt
MWFiZTNhYzEwYWE2LzEvZ1A5Qk9jY1ctU09SVjdNakFqNjV4ejQ2Y0FJLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMtMWFiZTNhYzEwYWE2
LzEvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBALAP/OF+66ZQ4T4zpXAT
pUkjnuvpU1o+/e8ppY2HiL9thntftZCMa1pz9eAeUNyp0M1Rw3FBUHli1nTen7ov
OyJzDYkVrbk3GZHLRIELGyZItDtbF15EjmOGNO+Ab5GfDCWReZwYsT2yjWE717wZ
txjzFtK4FtvvLSkd6dVXQ+ABW1I2hHILsizw/R0/cuUX55DcaH7RgDTq+VLDFG3k
rzAcHIw6nBIn/G2JERQJJFKHywJe1yTf+/oKpbhIFWHmMX8gBeK2aCqG49etG1nv
yFnGNyS76N/vYOQkALvj5j5HbIoUs3h83lNe1qnm9mNavzwh+IUFwJOuK+SF5+Pu
feo=
-----END CERTIFICATE-----
Generated at Wed Apr 30 20:06:32 2025 by rpki-client