Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/gdZQ8PWvbd3vxjhtee5CEJOxAX8.roa
File: gdZQ8PWvbd3vxjhtee5CEJOxAX8.roa (raw, json)
Hash identifier: qwwbYCN/nCNisx2W42gIPWtuHi61SEozBR5wBxpXKMI=
Subject key identifier: 81:D6:50:F0:F5:AF:6D:DD:EF:C6:38:6D:79:EE:42:10:93:B1:01:7F
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0182B6E23A98B5791AF71909F5A35082234D
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/gdZQ8PWvbd3vxjhtee5CEJOxAX8.roa
Signing time: Fri 19 Aug 2022 16:14:15 +0000
ROA not before: Fri 19 Aug 2022 16:14:15 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:182:3f1d:a803/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:182:7cb2:99d4/128 maxlen: 128
2001:67c:64:ffff:0:182:383f:6b78/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:b6:e2:3a:98:b5:79:1a:f7:19:09:f5:a3:50:82:23:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Aug 19 16:14:15 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=81d650f0f5af6dddefc6386d79ee421093b1017f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:07:e1:5e:65:35:1c:c1:12:74:f7:89:4e:b7:
92:62:5e:c4:b8:f4:99:7c:5f:58:e4:bc:47:7c:67:
a2:47:ef:d7:d7:e2:a6:5a:52:01:f9:0a:88:5f:7d:
11:24:cb:b9:1c:03:79:ec:be:5b:2e:f9:dd:79:a4:
a1:0b:28:ca:60:9c:8a:7a:78:5c:3a:01:ae:0c:b5:
d0:d5:d3:dd:09:57:20:f6:41:77:47:9e:fd:f8:49:
05:f5:e0:38:44:c5:5c:77:60:c2:60:bf:38:9e:55:
7c:1a:96:0f:8d:37:1b:d3:e8:95:97:d5:4f:54:07:
2b:ea:de:5e:76:32:31:b4:ea:f8:98:2d:e3:67:69:
b3:7d:37:32:3f:a9:e2:da:1a:18:54:f4:3e:19:6f:
ef:48:7b:8a:ff:9b:ba:a4:32:7f:b9:4d:60:b8:13:
68:55:5a:d9:a9:ff:c4:35:91:be:c6:6d:bc:94:11:
a7:f9:94:1e:30:d8:4d:ab:e8:73:74:bb:35:52:f1:
ca:4d:1d:51:b9:97:5b:94:dd:f8:dc:71:98:22:80:
dd:39:87:3d:fb:85:4a:db:35:cb:3b:12:9a:fc:02:
e7:b3:7b:3e:70:17:87:8c:02:3c:ff:ed:0b:c9:9a:
f9:b3:1a:47:27:db:ca:25:02:a2:eb:49:81:ce:7e:
4f:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:D6:50:F0:F5:AF:6D:DD:EF:C6:38:6D:79:EE:42:10:93:B1:01:7F
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/gdZQ8PWvbd3vxjhtee5CEJOxAX8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
9c:05:7f:b9:aa:dc:00:4d:c0:30:32:58:fb:1c:1f:e4:9b:fa:
3d:7d:e1:2d:a7:e0:5a:a6:e6:86:da:ea:f8:be:d0:6a:96:a5:
b4:0b:4e:93:53:41:a9:14:bb:35:c1:77:61:52:86:fe:e3:35:
6f:a6:e0:b4:64:39:0e:b1:93:8e:2d:b3:32:54:ab:b2:b4:b5:
bd:3b:1e:76:f2:41:30:5a:ee:c6:6e:4b:3b:1b:55:9c:98:ac:
36:96:d0:4f:ef:d8:ce:0e:24:d8:76:8e:1c:9f:b5:cb:d2:12:
37:f1:bb:74:97:af:fe:44:fa:9f:e5:73:07:d4:3a:b8:1b:10:
be:05:23:b1:72:2f:4c:13:24:e5:89:35:ca:94:6a:b1:08:89:
a7:ed:e1:42:2c:3d:eb:aa:78:f6:ca:ab:df:af:d7:94:97:16:
34:0b:2d:0b:86:ee:7a:3d:99:51:a2:d5:c9:e2:95:16:77:15:
a1:ea:22:0b:8c:33:a0:67:43:f6:5c:89:25:64:88:0d:07:7d:
f0:c7:94:99:bc:3d:c6:19:05:95:0f:12:24:8f:e4:92:55:71:
36:6f:7a:cc:01:09:94:52:40:32:3c:fe:e9:b8:2a:81:6b:2e:
b6:ce:57:95:fd:e5:f1:61:22:27:81:2a:08:f4:4a:b6:00:f5:
de:ee:b9:24
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYK24jqYtXka9xkJ9aNQgiNNMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcyMDQ3YmUxNWIyNzU5MDJkY2Y2MTdkYzNkMGUxNmRjMWYz
MDgwMjIwHhcNMjIwODE5MTYxNDE1WhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4MWQ2NTBmMGY1YWY2ZGRkZWZjNjM4NmQ3OWVlNDIxMDkzYjEwMTdmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgQfhXmU1HMESdPeJTreSYl7EuPSZ
fF9Y5LxHfGeiR+/X1+KmWlIB+QqIX30RJMu5HAN57L5bLvndeaShCyjKYJyKenhc
OgGuDLXQ1dPdCVcg9kF3R579+EkF9eA4RMVcd2DCYL84nlV8GpYPjTcb0+iVl9VP
VAcr6t5edjIxtOr4mC3jZ2mzfTcyP6ni2hoYVPQ+GW/vSHuK/5u6pDJ/uU1guBNo
VVrZqf/ENZG+xm28lBGn+ZQeMNhNq+hzdLs1UvHKTR1RuZdblN343HGYIoDdOYc9
+4VK2zXLOxKa/ALns3s+cBeHjAI8/+0LyZr5sxpHJ9vKJQKi60mBzn5PrwIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFIHWUPD1r23d78Y4bXnuQhCTsQF/MB8GA1UdIwQY
MBaAFHIEe+FbJ1kC3PYX3D0OFtwfMIAiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMt
MWFiZTNhYzEwYWE2LzEvZ2RaUThQV3ZiZDN2eGpodGVlNUNFSk94QVg4LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMtMWFiZTNhYzEwYWE2
LzEvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBAJwFf7mq3ABNwDAyWPsc
H+Sb+j194S2n4Fqm5oba6vi+0GqWpbQLTpNTQakUuzXBd2FShv7jNW+m4LRkOQ6x
k44tszJUq7K0tb07HnbyQTBa7sZuSzsbVZyYrDaW0E/v2M4OJNh2jhyftcvSEjfx
u3SXr/5E+p/lcwfUOrgbEL4FI7FyL0wTJOWJNcqUarEIiaft4UIsPeuqePbKq9+v
15SXFjQLLQuG7no9mVGi1cnilRZ3FaHqIguMM6BnQ/ZciSVkiA0HffDHlJm8PcYZ
BZUPEiSP5JJVcTZveswBCZRSQDI8/um4KoFrLrbOV5X95fFhIieBKgj0SrYA9d7u
uSQ=
-----END CERTIFICATE-----
Generated at Thu May 1 03:02:33 2025 by rpki-client