Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/gc4qiifCgfczf1ebswsWs00p-Ew.roa
File: gc4qiifCgfczf1ebswsWs00p-Ew.roa (raw, json)
Hash identifier: DhBkwh7skNpMxkUAKCpwZiENHnjChDJcLJWe1oUX5vc=
Subject key identifier: 81:CE:2A:8A:27:C2:81:F7:33:7F:57:9B:B3:0B:16:B3:4D:29:F8:4C
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 018656B2073DE61A5826414C223C9ED93F34
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/gc4qiifCgfczf1ebswsWs00p-Ew.roa
Signing time: Wed 15 Feb 2023 20:09:13 +0000
ROA not before: Wed 15 Feb 2023 20:09:13 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:56:b2:07:3d:e6:1a:58:26:41:4c:22:3c:9e:d9:3f:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Feb 15 20:09:13 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=81ce2a8a27c281f7337f579bb30b16b34d29f84c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:90:59:49:d4:83:86:37:fc:e6:5d:26:80:fa:
68:22:f2:c2:92:cd:e1:f7:6a:10:85:96:e8:d2:c5:
d4:21:3a:95:c5:fe:02:59:1a:14:5b:bd:71:c2:12:
81:d0:c3:23:ee:be:e7:6e:e3:2c:1e:b4:d4:63:85:
60:fb:65:36:46:9e:4c:05:a7:66:f2:7b:f1:f9:de:
20:21:26:ba:8a:e9:7e:4f:6a:18:44:1c:0f:a0:53:
c1:bf:10:35:3c:5f:9d:ca:25:c8:fa:28:0a:7a:f0:
ed:72:08:a0:4c:a1:9a:b5:78:41:a1:60:f7:c6:9d:
dc:81:65:51:69:34:bd:25:1f:c2:bd:b4:3e:65:71:
13:d4:41:41:c5:b2:e3:73:56:63:a5:5a:1d:b4:95:
ad:5b:26:30:9f:cd:55:b8:0b:d5:1a:30:e1:7d:60:
15:97:58:42:cf:c4:d6:02:c1:2a:6f:c3:bb:b7:d1:
d1:2e:ee:a3:93:17:f1:5f:1d:ba:60:31:c9:55:29:
a0:b5:1a:52:6a:b9:b4:71:0d:05:27:03:3e:90:36:
ca:64:52:7c:cf:c5:c3:cc:3b:ad:2c:0a:86:d7:17:
56:36:23:49:da:2b:50:a9:46:5a:9f:f9:4d:0a:ed:
73:39:b2:f4:22:94:bf:1c:ca:71:75:40:ce:ee:42:
09:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:CE:2A:8A:27:C2:81:F7:33:7F:57:9B:B3:0B:16:B3:4D:29:F8:4C
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/gc4qiifCgfczf1ebswsWs00p-Ew.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
7f:60:f1:4a:d7:83:b4:96:16:8b:a1:db:45:5d:62:b8:32:f1:
d7:f7:bb:39:81:fc:cb:83:1c:7a:d0:f1:4f:7a:8b:f1:41:c6:
93:a3:7e:05:68:42:e5:39:2e:95:b7:16:ab:35:80:75:f3:81:
60:73:f3:f1:9b:91:3e:3b:63:16:fe:d6:41:e2:51:ed:4e:04:
07:23:33:a1:47:ec:e7:81:de:a0:cf:f7:58:d2:15:47:0b:63:
8d:2e:09:5e:f1:90:ec:1a:bf:3e:43:47:25:8a:59:26:ea:39:
bd:45:ed:0e:4a:75:97:3a:df:fe:a1:7b:57:d8:ce:83:01:bf:
7e:47:cb:ec:b7:01:1f:c0:86:8d:ef:9c:18:6a:2f:23:2e:1f:
47:39:75:05:de:cf:c7:ca:86:64:44:11:5c:44:79:cd:c6:8d:
17:ae:86:44:6c:48:0a:7f:f3:75:89:5d:2b:56:94:45:75:aa:
a8:12:d3:f6:9f:0e:7a:6e:51:5b:f5:b2:a9:2a:6b:f0:4d:f9:
82:88:ec:07:6a:f9:04:78:24:39:57:d8:88:1f:70:fc:67:6e:
03:e9:d0:ca:bd:1e:d5:77:dc:4c:37:56:73:b5:02:b9:6d:0b:
7f:af:c8:87:cc:fe:37:53:3e:57:40:bb:23:64:31:34:32:5d:
a3:fc:42:ef
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYZWsgc95hpYJkFMIjye2T80MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcyMDQ3YmUxNWIyNzU5MDJkY2Y2MTdkYzNkMGUxNmRjMWYz
MDgwMjIwHhcNMjMwMjE1MjAwOTEzWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4MWNlMmE4YTI3YzI4MWY3MzM3ZjU3OWJiMzBiMTZiMzRkMjlmODRjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgJBZSdSDhjf85l0mgPpoIvLCks3h
92oQhZbo0sXUITqVxf4CWRoUW71xwhKB0MMj7r7nbuMsHrTUY4Vg+2U2Rp5MBadm
8nvx+d4gISa6iul+T2oYRBwPoFPBvxA1PF+dyiXI+igKevDtcgigTKGatXhBoWD3
xp3cgWVRaTS9JR/CvbQ+ZXET1EFBxbLjc1ZjpVodtJWtWyYwn81VuAvVGjDhfWAV
l1hCz8TWAsEqb8O7t9HRLu6jkxfxXx26YDHJVSmgtRpSarm0cQ0FJwM+kDbKZFJ8
z8XDzDutLAqG1xdWNiNJ2itQqUZan/lNCu1zObL0IpS/HMpxdUDO7kIJ2QIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFIHOKoonwoH3M39Xm7MLFrNNKfhMMB8GA1UdIwQY
MBaAFHIEe+FbJ1kC3PYX3D0OFtwfMIAiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMt
MWFiZTNhYzEwYWE2LzEvZ2M0cWlpZkNnZmN6ZjFlYnN3c1dzMDBwLUV3LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMtMWFiZTNhYzEwYWE2
LzEvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBAH9g8UrXg7SWFouh20Vd
Yrgy8df3uzmB/MuDHHrQ8U96i/FBxpOjfgVoQuU5LpW3Fqs1gHXzgWBz8/GbkT47
Yxb+1kHiUe1OBAcjM6FH7OeB3qDP91jSFUcLY40uCV7xkOwavz5DRyWKWSbqOb1F
7Q5KdZc63/6he1fYzoMBv35Hy+y3AR/Aho3vnBhqLyMuH0c5dQXez8fKhmREEVxE
ec3GjReuhkRsSAp/83WJXStWlEV1qqgS0/afDnpuUVv1sqkqa/BN+YKI7Adq+QR4
JDlX2IgfcPxnbgPp0Mq9HtV33Ew3VnO1ArltC3+vyIfM/jdTPldAuyNkMTQyXaP8
Qu8=
-----END CERTIFICATE-----
Generated at Wed Apr 30 17:35:58 2025 by rpki-client