Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/gXuWRyR93eJ2I9tx5vXOStF8e_4.roa
File: gXuWRyR93eJ2I9tx5vXOStF8e_4.roa (raw, json)
Hash identifier: KB7BCV9MZAgtSNx4u94/JWUZu+A9uag7T2+VX1gWuS4=
Subject key identifier: 81:7B:96:47:24:7D:DD:E2:76:23:DB:71:E6:F5:CE:4A:D1:7C:7B:FE
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 85590DFF
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/gXuWRyR93eJ2I9tx5vXOStF8e_4.roa
Signing time: Thu 19 May 2022 04:11:16 +0000
ROA not before: Thu 19 May 2022 04:11:16 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:180:a810:6542/128 maxlen: 128
2001:67c:64:ffff:0:180:466e:42dd/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:180:8961:505f/128 maxlen: 128
2001:67c:64:ffff:0:180:457:1e3f/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2237206015 (0x85590dff)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: May 19 04:11:16 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=817b9647247ddde27623db71e6f5ce4ad17c7bfe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:1f:1b:4f:8e:73:72:30:ec:bb:b5:99:15:1f:
6b:7c:f0:2e:d4:f3:d7:9f:fb:de:e7:96:1b:b6:b2:
1b:26:26:ed:d6:88:d6:13:c8:e0:5a:d4:0d:54:e2:
38:89:55:71:32:21:95:c1:a3:b6:53:bd:f2:ee:c8:
02:f9:30:0d:e4:a8:b9:e7:0b:63:4e:52:20:d0:cd:
9b:d4:81:16:3f:78:7b:69:ea:e5:2a:36:db:0b:b4:
ca:ac:d5:51:fd:5c:79:78:54:3c:5a:bd:44:65:f3:
f0:5d:43:46:7d:5e:14:be:17:45:67:ef:7f:87:b6:
0a:ce:a7:07:f5:31:18:7e:09:53:88:1d:8d:d6:f3:
a2:1d:0f:e8:a2:a4:09:dc:31:e8:6d:da:c6:ea:ee:
89:32:62:bd:aa:5a:34:ab:7f:d8:a5:74:cf:19:49:
fb:d2:62:57:10:2b:68:23:74:a6:26:ee:de:31:04:
e6:43:a4:9e:24:4a:ab:f0:59:2f:27:55:65:50:71:
94:91:cf:0e:f2:b7:1b:1c:85:d9:40:84:8e:6a:c7:
86:99:44:9b:67:55:4a:25:04:e7:4c:24:32:fa:4a:
91:2e:e4:7d:a4:f6:f9:4b:41:33:28:9b:a9:7c:8e:
61:29:08:70:06:25:c9:eb:29:4a:1e:f6:14:fc:b1:
81:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:7B:96:47:24:7D:DD:E2:76:23:DB:71:E6:F5:CE:4A:D1:7C:7B:FE
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/gXuWRyR93eJ2I9tx5vXOStF8e_4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
96:68:f4:93:87:54:4d:ae:a3:06:e0:23:79:5d:f3:4e:fd:c1:
23:bb:27:04:ec:c6:2b:fc:40:a7:57:eb:53:db:92:bb:2e:6f:
c8:09:5c:0e:ae:af:b5:5a:a8:fc:32:57:34:f0:f7:b1:a4:f0:
8b:c2:88:db:ab:72:b2:2c:5d:67:89:b1:9c:8c:b1:ee:63:e2:
67:4f:91:2b:e7:df:0d:b8:72:a5:b5:d1:60:a6:ac:a7:1c:58:
fb:01:82:99:e1:3c:66:e5:14:4a:4a:eb:42:ec:10:20:e5:10:
cf:8f:60:dd:85:73:64:25:68:3c:bf:1b:03:b2:26:12:60:a7:
7b:63:79:c5:7e:60:6e:d2:af:66:eb:ca:e9:15:1b:8c:f1:97:
26:74:ee:a7:10:0c:2a:c8:69:93:17:55:ea:25:23:c7:a2:67:
05:d3:6b:79:df:ce:ac:f6:89:15:8c:04:5e:c9:04:95:ae:82:
82:04:f7:a7:55:01:40:23:2b:e0:0b:76:00:0a:70:0f:23:b6:
15:01:07:52:93:85:6d:d2:a6:ee:6a:f8:87:07:60:51:cd:0a:
11:bd:ea:9e:41:3d:7a:5d:ec:74:b3:f1:21:e7:b9:28:b2:8b:
cb:80:3c:c5:65:98:f4:90:44:a6:98:e3:19:ca:42:48:a3:44:
81:44:dd:e9
-----BEGIN CERTIFICATE-----
MIIFATCCA+mgAwIBAgIFAIVZDf8wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMo
NzIwNDdiZTE1YjI3NTkwMmRjZjYxN2RjM2QwZTE2ZGMxZjMwODAyMjAeFw0yMjA1
MTkwNDExMTZaFw0yMzA3MDEwMDAwMDBaMDMxMTAvBgNVBAMTKDgxN2I5NjQ3MjQ3
ZGRkZTI3NjIzZGI3MWU2ZjVjZTRhZDE3YzdiZmUwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQDGHxtPjnNyMOy7tZkVH2t88C7U89ef+97nlhu2shsmJu3W
iNYTyOBa1A1U4jiJVXEyIZXBo7ZTvfLuyAL5MA3kqLnnC2NOUiDQzZvUgRY/eHtp
6uUqNtsLtMqs1VH9XHl4VDxavURl8/BdQ0Z9XhS+F0Vn73+HtgrOpwf1MRh+CVOI
HY3W86IdD+iipAncMeht2sbq7okyYr2qWjSrf9ildM8ZSfvSYlcQK2gjdKYm7t4x
BOZDpJ4kSqvwWS8nVWVQcZSRzw7ytxschdlAhI5qx4aZRJtnVUolBOdMJDL6SpEu
5H2k9vlLQTMom6l8jmEpCHAGJcnrKUoe9hT8sYGRAgMBAAGjggIaMIICFjAdBgNV
HQ4EFgQUgXuWRyR93eJ2I9tx5vXOStF8e/4wHwYDVR0jBBgwFoAUcgR74VsnWQLc
9hfcPQ4W3B8wgCIwDgYDVR0PAQH/BAQDAgeAMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvREVGQVVM
VC9jZ1I3NFZzbldRTGM5aGZjUFE0VzNCOHdnQ0kuY2VyMIGNBggrBgEFBQcBCwSB
gDB+MHwGCCsGAQUFBzALhnByc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9y
eS9ERUZBVUxULzVlLzc5ODQ0Ny0yMWY0LTQ1YWItOTlkYy0xYWJlM2FjMTBhYTYv
MS9nWHVXUnlSOTNlSjJJOXR4NXZYT1N0RjhlXzQucm9hMIGBBgNVHR8EejB4MHag
dKByhnByc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzVl
Lzc5ODQ0Ny0yMWY0LTQ1YWItOTlkYy0xYWJlM2FjMTBhYTYvMS9jZ1I3NFZzbldR
TGM5aGZjUFE0VzNCOHdnQ0kuY3JsMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw
MAYIKwYBBQUHAQcBAf8EITAfMAwEAgABMAYDBAPBABgwDwQCAAIwCQMHACABBnwA
ZDANBgkqhkiG9w0BAQsFAAOCAQEAlmj0k4dUTa6jBuAjeV3zTv3BI7snBOzGK/xA
p1frU9uSuy5vyAlcDq6vtVqo/DJXNPD3saTwi8KI26tysixdZ4mxnIyx7mPiZ0+R
K+ffDbhypbXRYKaspxxY+wGCmeE8ZuUUSkrrQuwQIOUQz49g3YVzZCVoPL8bA7Im
EmCne2N5xX5gbtKvZuvK6RUbjPGXJnTupxAMKshpkxdV6iUjx6JnBdNred/OrPaJ
FYwEXskEla6CggT3p1UBQCMr4At2AApwDyO2FQEHUpOFbdKm7mr4hwdgUc0KEb3q
nkE9el3sdLPxIee5KLKLy4A8xWWY9JBEppjjGcpCSKNEgUTd6Q==
-----END CERTIFICATE-----
Generated at Fri May 2 19:45:48 2025 by rpki-client