Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/giBcYn9GWgFupK1cZ7BymCMNL5U.roa
File: giBcYn9GWgFupK1cZ7BymCMNL5U.roa (raw, json)
Hash identifier: Yu15JpLxQxY7RTSPSLT95RqEmc/T7oMtqYZ7zp2Jjzw=
Subject key identifier: 82:20:5C:62:7F:46:5A:01:6E:A4:AD:5C:67:B0:72:98:23:0D:2F:95
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0185E6E9B16EA13A01A788DE3ABBCA3740D0
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/giBcYn9GWgFupK1cZ7BymCMNL5U.roa
Signing time: Wed 25 Jan 2023 03:12:33 +0000
ROA not before: Wed 25 Jan 2023 03:12:33 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:e6:e9:b1:6e:a1:3a:01:a7:88:de:3a:bb:ca:37:40:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Jan 25 03:12:33 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=82205c627f465a016ea4ad5c67b07298230d2f95
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:7b:d3:b5:0a:a6:34:52:5d:a9:93:30:90:8b:
7b:7c:e0:aa:b7:cc:41:ef:fd:68:00:45:2a:6a:f3:
f8:98:70:2e:35:2c:0b:2d:2d:01:5b:fa:ab:7e:57:
20:45:a5:6f:42:10:14:38:43:1a:13:1c:08:a2:66:
08:48:2b:cc:76:3f:9c:be:b2:4e:7f:b7:1b:bf:1b:
eb:09:23:c1:0d:ab:77:32:71:f9:59:5e:17:d5:de:
cb:8a:03:a2:02:17:6f:f0:3e:51:73:9d:a7:fc:7f:
7f:5a:1b:c2:41:b3:c1:e8:4f:2b:8e:89:ba:87:34:
8f:96:e5:7b:8c:d9:9a:0b:71:97:f6:97:43:c3:e1:
d0:8a:f2:53:e2:b2:1f:3a:a7:55:bb:ce:18:51:d5:
9b:4e:30:35:5f:76:10:97:65:03:14:a4:df:50:a1:
74:1b:ea:c8:37:20:ab:33:0b:b0:f1:eb:24:5b:0c:
fe:2e:9a:bc:bc:b9:80:45:6e:c6:c2:4b:8c:d3:f3:
db:8d:aa:38:73:b5:4e:e1:e1:52:ce:93:7a:f1:28:
83:59:6a:f8:6c:7d:e8:78:0e:6e:de:e4:3a:5c:4f:
bf:1f:e8:38:4d:17:55:80:a5:2e:2f:7a:a5:21:40:
ba:35:b5:9f:08:95:5e:a3:32:01:30:bf:1e:bc:83:
95:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:20:5C:62:7F:46:5A:01:6E:A4:AD:5C:67:B0:72:98:23:0D:2F:95
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/giBcYn9GWgFupK1cZ7BymCMNL5U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
3b:27:a7:b0:3c:87:e9:45:db:15:a9:d8:ec:8c:b9:4f:9a:17:
bc:63:f3:ce:97:1c:f4:2b:7e:a5:9a:86:10:98:7d:e5:92:4e:
af:d4:fa:99:11:94:e4:ca:96:85:9d:39:95:fa:ed:c9:50:c8:
77:65:7f:4a:2b:81:ab:5f:41:d2:97:63:23:c3:6b:86:54:0d:
e5:8e:67:92:d8:77:5e:02:0b:f3:f1:fc:8e:58:68:37:f3:33:
03:7e:a9:a2:18:65:79:51:a6:75:aa:19:90:6f:7b:64:07:c9:
78:8d:49:a6:7d:fa:b1:64:e0:62:08:1b:ef:f5:7e:14:9b:c4:
c3:e5:e9:50:9d:ed:97:15:42:9d:fc:ef:9e:4e:4b:2a:c5:e7:
46:86:6a:5c:c4:bd:02:4b:81:e9:1c:5a:40:f9:a8:1a:5c:81:
14:60:9f:a0:5f:56:a6:e4:52:4a:56:5f:6b:8c:4c:23:5e:3a:
35:cb:0e:3e:2a:18:e7:98:59:45:80:ca:31:51:ae:c4:78:4d:
43:e4:1c:ba:c2:23:9e:ab:0d:ca:f6:f7:39:67:fd:21:06:ec:
31:09:29:7b:40:34:78:4a:cd:6b:30:7d:44:ee:23:5e:c5:7b:
09:83:ba:55:e9:2c:ac:41:d5:28:ee:4c:52:d0:15:67:61:4d:
9c:df:71:19
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYXm6bFuoToBp4jeOrvKN0DQMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcyMDQ3YmUxNWIyNzU5MDJkY2Y2MTdkYzNkMGUxNmRjMWYz
MDgwMjIwHhcNMjMwMTI1MDMxMjMzWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4MjIwNWM2MjdmNDY1YTAxNmVhNGFkNWM2N2IwNzI5ODIzMGQyZjk1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAznvTtQqmNFJdqZMwkIt7fOCqt8xB
7/1oAEUqavP4mHAuNSwLLS0BW/qrflcgRaVvQhAUOEMaExwIomYISCvMdj+cvrJO
f7cbvxvrCSPBDat3MnH5WV4X1d7LigOiAhdv8D5Rc52n/H9/WhvCQbPB6E8rjom6
hzSPluV7jNmaC3GX9pdDw+HQivJT4rIfOqdVu84YUdWbTjA1X3YQl2UDFKTfUKF0
G+rINyCrMwuw8eskWwz+Lpq8vLmARW7GwkuM0/Pbjao4c7VO4eFSzpN68SiDWWr4
bH3oeA5u3uQ6XE+/H+g4TRdVgKUuL3qlIUC6NbWfCJVeozIBML8evIOVUQIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFIIgXGJ/RloBbqStXGewcpgjDS+VMB8GA1UdIwQY
MBaAFHIEe+FbJ1kC3PYX3D0OFtwfMIAiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMt
MWFiZTNhYzEwYWE2LzEvZ2lCY1luOUdXZ0Z1cEsxY1o3QnltQ01OTDVVLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMtMWFiZTNhYzEwYWE2
LzEvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBADsnp7A8h+lF2xWp2OyM
uU+aF7xj886XHPQrfqWahhCYfeWSTq/U+pkRlOTKloWdOZX67clQyHdlf0orgatf
QdKXYyPDa4ZUDeWOZ5LYd14CC/Px/I5YaDfzMwN+qaIYZXlRpnWqGZBve2QHyXiN
SaZ9+rFk4GIIG+/1fhSbxMPl6VCd7ZcVQp38755OSyrF50aGalzEvQJLgekcWkD5
qBpcgRRgn6BfVqbkUkpWX2uMTCNeOjXLDj4qGOeYWUWAyjFRrsR4TUPkHLrCI56r
Dcr29zln/SEG7DEJKXtANHhKzWswfUTuI17FewmDulXpLKxB1SjuTFLQFWdhTZzf
cRk=
-----END CERTIFICATE-----
Generated at Fri May 2 15:56:04 2025 by rpki-client