Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/gjodEdqKgasJ35_VaGA3MT8iyOE.roa
File: gjodEdqKgasJ35_VaGA3MT8iyOE.roa (raw, json)
Hash identifier: 4zLvFGu9rDHB0Lrv0zUP4W8qXatQ5n7vS7iavvghWQI=
Subject key identifier: 82:3A:1D:11:DA:8A:81:AB:09:DF:9F:D5:68:60:37:31:3F:22:C8:E1
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0186692720F4AABC29E742EE3DE5D1E5F2FA
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/gjodEdqKgasJ35_VaGA3MT8iyOE.roa
Signing time: Sun 19 Feb 2023 10:10:17 +0000
ROA not before: Sun 19 Feb 2023 10:10:17 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:69:27:20:f4:aa:bc:29:e7:42:ee:3d:e5:d1:e5:f2:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Feb 19 10:10:17 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=823a1d11da8a81ab09df9fd5686037313f22c8e1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:d4:1d:72:18:da:ee:00:3d:46:43:8b:ca:63:
99:bf:c7:83:26:15:ee:bf:82:58:aa:f4:b4:f9:ea:
81:7c:32:50:76:fb:c1:1c:a7:2b:5b:6d:00:f3:ce:
29:dc:b8:bd:e3:f3:10:9f:2e:83:da:74:ee:0f:50:
db:cf:96:d8:09:2c:3e:a1:4f:89:5f:71:ac:e0:5b:
7f:37:87:2e:f9:a8:85:13:93:44:37:4f:db:66:b9:
b8:f1:ab:08:00:a5:48:14:5f:8e:24:06:5b:c4:a7:
46:75:4d:40:dd:80:9b:64:aa:d8:9f:ee:72:53:dc:
2a:af:22:b1:d2:de:b7:33:dd:a7:32:cf:eb:0b:ca:
a4:cc:63:d9:bd:46:e3:8b:e4:48:31:e2:4c:ed:f4:
17:83:05:cb:ae:ee:c0:d4:25:56:bf:d6:e9:90:bb:
9e:8b:48:f9:5a:76:06:78:a4:9e:3f:34:c4:4f:02:
5e:54:d9:59:11:f2:b4:e6:1c:0f:a3:1f:09:df:df:
1d:95:48:b6:a1:2d:d8:e6:b3:04:1c:9c:ae:e0:3c:
0f:e2:8b:6f:af:04:04:28:90:bb:58:ff:ef:0f:d2:
ed:b0:f1:44:22:33:fe:be:98:69:77:a1:22:3e:26:
e2:57:ae:b9:09:6e:b8:8a:9a:0b:aa:ad:d9:08:04:
85:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:3A:1D:11:DA:8A:81:AB:09:DF:9F:D5:68:60:37:31:3F:22:C8:E1
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/gjodEdqKgasJ35_VaGA3MT8iyOE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
02:9c:ef:b9:89:1b:19:8d:e8:da:f9:3c:71:70:c7:45:88:72:
d0:96:1b:69:ce:16:4f:88:0a:41:5f:89:d4:5f:4f:3b:3a:11:
50:72:01:96:d4:51:85:18:f2:48:88:9a:f9:4f:60:e9:d3:3d:
10:af:69:8e:9f:2b:3c:a7:9d:34:73:fb:a4:7d:e6:69:32:4b:
bb:7d:d5:90:44:ea:97:7f:0f:fe:93:c6:e1:ed:d8:22:9c:b9:
7f:c5:f3:7a:5b:e0:32:eb:f3:7c:a9:cb:1f:4b:e0:c4:d8:7b:
b6:52:12:9e:ce:2a:9c:7a:45:69:de:5a:33:43:50:d2:2d:ae:
2e:0b:47:50:2c:75:f2:30:4f:9d:e0:27:31:e6:31:00:5d:df:
d0:a3:18:f7:f6:8a:01:12:9b:5b:ec:e9:09:0d:95:9f:82:f0:
3d:89:d6:cc:c7:69:16:78:da:00:fa:06:9d:e6:15:3b:45:7a:
ec:bb:12:db:88:7d:08:13:b5:f4:9b:1e:59:27:36:bd:b8:7c:
d1:20:d5:0e:10:b6:ec:50:77:fe:01:9d:08:91:10:8d:69:98:
cc:38:f7:58:1c:e2:1a:7f:1e:fb:a0:b0:00:14:11:d5:3b:92:
05:a4:be:c1:cc:33:42:f1:2a:9e:0f:48:82:62:34:e6:4b:fc:
0c:b4:6d:96
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYZpJyD0qrwp50LuPeXR5fL6MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcyMDQ3YmUxNWIyNzU5MDJkY2Y2MTdkYzNkMGUxNmRjMWYz
MDgwMjIwHhcNMjMwMjE5MTAxMDE3WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4MjNhMWQxMWRhOGE4MWFiMDlkZjlmZDU2ODYwMzczMTNmMjJjOGUxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm9Qdchja7gA9RkOLymOZv8eDJhXu
v4JYqvS0+eqBfDJQdvvBHKcrW20A884p3Li94/MQny6D2nTuD1Dbz5bYCSw+oU+J
X3Gs4Ft/N4cu+aiFE5NEN0/bZrm48asIAKVIFF+OJAZbxKdGdU1A3YCbZKrYn+5y
U9wqryKx0t63M92nMs/rC8qkzGPZvUbji+RIMeJM7fQXgwXLru7A1CVWv9bpkLue
i0j5WnYGeKSePzTETwJeVNlZEfK05hwPox8J398dlUi2oS3Y5rMEHJyu4DwP4otv
rwQEKJC7WP/vD9LtsPFEIjP+vphpd6EiPibiV665CW64ipoLqq3ZCASFnwIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFII6HRHaioGrCd+f1WhgNzE/IsjhMB8GA1UdIwQY
MBaAFHIEe+FbJ1kC3PYX3D0OFtwfMIAiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMt
MWFiZTNhYzEwYWE2LzEvZ2pvZEVkcUtnYXNKMzVfVmFHQTNNVDhpeU9FLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMtMWFiZTNhYzEwYWE2
LzEvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBAAKc77mJGxmN6Nr5PHFw
x0WIctCWG2nOFk+ICkFfidRfTzs6EVByAZbUUYUY8kiImvlPYOnTPRCvaY6fKzyn
nTRz+6R95mkyS7t91ZBE6pd/D/6TxuHt2CKcuX/F83pb4DLr83ypyx9L4MTYe7ZS
Ep7OKpx6RWneWjNDUNItri4LR1AsdfIwT53gJzHmMQBd39CjGPf2igESm1vs6QkN
lZ+C8D2J1szHaRZ42gD6Bp3mFTtFeuy7EtuIfQgTtfSbHlknNr24fNEg1Q4QtuxQ
d/4BnQiREI1pmMw491gc4hp/HvugsAAUEdU7kgWkvsHMM0LxKp4PSIJiNOZL/Ay0
bZY=
-----END CERTIFICATE-----
Generated at Fri May 2 05:27:56 2025 by rpki-client