Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/gdbnzJ4388TzpDKivU_wCwRIfVw.roa
File: gdbnzJ4388TzpDKivU_wCwRIfVw.roa (raw, json)
Hash identifier: FyP4Lkoa4qJJYZWGyJRE42LD8DGlSFWHvhJGYO/WPqQ=
Subject key identifier: 81:D6:E7:CC:9E:37:F3:C4:F3:A4:32:A2:BD:4F:F0:0B:04:48:7D:5C
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0182357568E1C47E483A45916D06F7ECF7EF
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/gdbnzJ4388TzpDKivU_wCwRIfVw.roa
Signing time: Mon 25 Jul 2022 13:04:23 +0000
ROA not before: Mon 25 Jul 2022 13:04:23 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:182:3575:168a/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:35:75:68:e1:c4:7e:48:3a:45:91:6d:06:f7:ec:f7:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Jul 25 13:04:23 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=81d6e7cc9e37f3c4f3a432a2bd4ff00b04487d5c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:d1:50:dc:f9:c0:79:3d:39:62:63:13:71:bd:
92:12:0e:9a:26:d6:b5:3d:82:7e:99:71:88:01:25:
3b:64:e8:06:45:3c:d1:6f:2c:a2:cb:1b:eb:36:f5:
5b:e5:3f:00:3f:92:70:b7:2b:3a:d3:1e:7c:44:c1:
50:3c:5b:ef:6c:7c:5b:bd:2c:0d:a3:39:89:31:23:
20:de:06:77:38:bc:11:45:68:8a:32:98:0d:b7:7b:
64:45:a9:3c:a8:39:13:39:13:a9:0c:25:3c:11:72:
c9:10:e8:35:77:8f:8d:13:25:a4:3c:74:c8:c1:c0:
9c:6e:9a:ed:84:f3:88:ca:99:d2:f1:de:98:fc:a2:
7b:f3:06:db:d1:55:9e:cf:fe:4c:c8:b5:ce:86:dd:
74:84:3d:70:c8:0f:13:85:bb:a9:30:19:9a:d6:10:
29:c7:7f:ad:4c:9b:47:88:b0:59:0f:81:52:19:64:
88:83:27:cd:64:f4:8f:52:0a:92:04:91:9a:94:a1:
43:4c:b7:fd:9b:37:f1:5e:1f:fa:09:a5:e6:fd:fc:
59:5c:9a:6d:ba:a7:71:bc:d8:fd:eb:dc:fb:67:c8:
d2:77:b9:e5:e9:98:20:1d:79:ee:f2:7e:07:bc:8a:
41:ac:91:6a:06:9f:e1:0e:e7:38:42:4a:f0:cf:f2:
20:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:D6:E7:CC:9E:37:F3:C4:F3:A4:32:A2:BD:4F:F0:0B:04:48:7D:5C
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/gdbnzJ4388TzpDKivU_wCwRIfVw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
a2:11:af:14:7b:8e:59:5b:5a:d3:00:41:c5:d3:50:42:fd:c6:
c3:fa:4f:8b:bf:f8:e6:4a:3f:82:cc:29:e8:8c:4a:f0:78:cb:
1f:0b:04:45:32:1b:08:1a:45:62:56:64:01:02:3c:22:8d:4e:
5e:1d:40:11:51:91:53:de:69:e2:0b:07:f2:ac:1a:8b:34:f6:
16:62:b5:17:f8:43:b4:39:44:75:70:f9:68:94:98:ef:dd:58:
74:09:d5:a0:90:9f:a3:4f:29:ef:8a:bd:46:eb:f3:0e:93:46:
ff:7b:f6:76:fe:50:eb:80:0a:01:f2:11:6d:ff:ca:31:64:55:
ca:89:01:4c:69:c1:ee:44:83:33:23:f6:be:20:25:e1:8f:24:
21:2b:a9:a5:e5:5a:20:c9:1f:e4:b4:2d:6d:29:b4:65:94:2e:
78:d4:85:a8:d0:46:46:cd:96:de:fd:4a:f7:f9:f1:ce:78:e1:
f9:6b:32:dc:26:8b:a2:21:8f:b0:79:63:f7:e1:35:dd:8a:98:
07:89:3d:48:c4:ca:8b:b3:2d:56:08:f5:47:24:9f:37:e6:6e:
92:8a:bb:1a:45:71:41:9e:1a:33:4c:53:5d:0d:8e:c4:07:1f:
30:83:ec:b3:c5:4b:38:61:8c:d7:80:da:56:3f:76:32:d0:dd:
97:14:ef:f6
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYI1dWjhxH5IOkWRbQb37PfvMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcyMDQ3YmUxNWIyNzU5MDJkY2Y2MTdkYzNkMGUxNmRjMWYz
MDgwMjIwHhcNMjIwNzI1MTMwNDIzWhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4MWQ2ZTdjYzllMzdmM2M0ZjNhNDMyYTJiZDRmZjAwYjA0NDg3ZDVjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh9FQ3PnAeT05YmMTcb2SEg6aJta1
PYJ+mXGIASU7ZOgGRTzRbyyiyxvrNvVb5T8AP5Jwtys60x58RMFQPFvvbHxbvSwN
ozmJMSMg3gZ3OLwRRWiKMpgNt3tkRak8qDkTOROpDCU8EXLJEOg1d4+NEyWkPHTI
wcCcbprthPOIypnS8d6Y/KJ78wbb0VWez/5MyLXOht10hD1wyA8ThbupMBma1hAp
x3+tTJtHiLBZD4FSGWSIgyfNZPSPUgqSBJGalKFDTLf9mzfxXh/6CaXm/fxZXJpt
uqdxvNj969z7Z8jSd7nl6ZggHXnu8n4HvIpBrJFqBp/hDuc4Qkrwz/IgwQIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFIHW58yeN/PE86Qyor1P8AsESH1cMB8GA1UdIwQY
MBaAFHIEe+FbJ1kC3PYX3D0OFtwfMIAiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMt
MWFiZTNhYzEwYWE2LzEvZ2RibnpKNDM4OFR6cERLaXZVX3dDd1JJZlZ3LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMtMWFiZTNhYzEwYWE2
LzEvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBAKIRrxR7jllbWtMAQcXT
UEL9xsP6T4u/+OZKP4LMKeiMSvB4yx8LBEUyGwgaRWJWZAECPCKNTl4dQBFRkVPe
aeILB/KsGos09hZitRf4Q7Q5RHVw+WiUmO/dWHQJ1aCQn6NPKe+KvUbr8w6TRv97
9nb+UOuACgHyEW3/yjFkVcqJAUxpwe5EgzMj9r4gJeGPJCErqaXlWiDJH+S0LW0p
tGWULnjUhajQRkbNlt79Svf58c544flrMtwmi6Ihj7B5Y/fhNd2KmAeJPUjEyouz
LVYI9UcknzfmbpKKuxpFcUGeGjNMU10NjsQHHzCD7LPFSzhhjNeA2lY/djLQ3ZcU
7/Y=
-----END CERTIFICATE-----
Generated at Wed Apr 30 22:01:29 2025 by rpki-client