Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/gjpkj_rhnvurdaT_nOyQqQzD5Kg.roa
File: gjpkj_rhnvurdaT_nOyQqQzD5Kg.roa (raw, json)
Hash identifier: yOnNHPSB0NljZDb3Rw7wRJ3ldiXY14clkHKQq4TQd4U=
Subject key identifier: 82:3A:64:8F:FA:E1:9E:FB:AB:75:A4:FF:9C:EC:90:A9:0C:C3:E4:A8
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0181EF88D1D80AAD21978F18DCC1DE93A387
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/gjpkj_rhnvurdaT_nOyQqQzD5Kg.roa
Signing time: Mon 11 Jul 2022 23:12:10 +0000
ROA not before: Mon 11 Jul 2022 23:12:10 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:81:ef:88:d1:d8:0a:ad:21:97:8f:18:dc:c1:de:93:a3:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Jul 11 23:12:10 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=823a648ffae19efbab75a4ff9cec90a90cc3e4a8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:ff:d4:3d:bb:b9:79:d4:ba:3f:a7:e5:08:f8:
03:51:81:99:ae:f2:19:19:61:39:35:cd:72:8a:f9:
fe:56:32:c4:85:c2:2f:d6:81:30:31:64:64:98:1f:
a1:99:3c:63:fc:3e:dd:4b:3a:7d:95:b0:92:b6:f2:
6f:05:bb:ff:f2:97:f7:54:f3:ef:3d:a2:0b:4a:5c:
d9:db:f2:7b:cc:c1:9b:f1:ca:b5:64:81:32:e3:91:
20:d1:7e:fe:ed:99:fd:d0:23:4c:91:a7:09:30:f3:
2e:04:92:cb:94:85:25:38:33:5b:9c:4f:8a:22:ba:
15:c0:83:cb:d6:ef:52:98:0f:56:90:2d:6a:dd:0f:
62:2d:11:eb:1a:93:dc:16:b3:5d:9b:26:7e:72:3b:
18:f7:27:e7:45:b7:27:6f:32:52:83:df:bb:0b:13:
ed:0f:25:0a:e1:06:14:75:ac:53:7a:2a:c2:2d:7e:
96:e6:19:b6:31:eb:ae:72:e0:9f:ac:6a:1c:9d:8c:
0a:98:a5:5e:2e:6c:c9:20:6d:7c:46:43:bf:ee:c3:
64:a4:e1:5f:e0:4b:6d:19:23:a1:aa:6e:38:1d:66:
27:90:46:52:c8:4c:81:73:17:eb:d7:aa:ce:6f:af:
45:d9:af:29:c9:43:f5:40:6d:15:f6:6c:cc:c1:14:
58:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:3A:64:8F:FA:E1:9E:FB:AB:75:A4:FF:9C:EC:90:A9:0C:C3:E4:A8
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/gjpkj_rhnvurdaT_nOyQqQzD5Kg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
49:e6:e5:eb:11:4c:1b:bf:0e:57:73:a4:f6:f9:d0:c7:e9:52:
34:44:79:0b:46:af:59:1f:f3:6d:c7:10:7a:5e:da:35:3d:0c:
42:14:ca:23:3c:0c:71:b9:cc:c0:8b:f8:47:3d:e4:60:f0:6e:
1d:1e:17:ed:16:b6:0d:e7:4e:10:f0:89:c0:3d:d4:68:b5:6b:
32:84:d3:90:a0:e1:59:62:ab:8a:2e:c8:02:68:46:44:bf:dd:
2e:75:c5:6f:ab:cd:c0:75:95:15:28:4c:35:1c:dd:7b:63:26:
10:e0:0c:5b:cb:b3:09:1e:97:f1:cf:c1:8c:5e:16:f3:c0:46:
d5:8f:2b:e2:10:53:2f:8d:e7:77:c5:7e:bd:6d:a2:fa:48:3f:
c9:38:4f:7e:95:4d:e7:c6:33:cc:b0:c0:4d:42:53:fb:21:24:
0d:0d:01:15:96:a3:48:3c:8a:92:f5:3b:09:4f:92:8a:e0:e1:
6a:cc:d6:82:a2:01:2b:ec:40:d9:9f:bd:86:33:36:d8:e1:3d:
0b:72:f2:78:ba:a4:71:75:14:46:69:b6:df:f3:c9:44:5b:b6:
44:4c:b9:7f:3c:6a:0c:f4:d1:c3:da:97:f5:be:32:10:a8:2d:
9c:41:d3:71:b2:4c:4e:a5:20:91:5e:bf:2b:01:c6:ef:f5:56:
07:41:51:93
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYHviNHYCq0hl48Y3MHek6OHMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcyMDQ3YmUxNWIyNzU5MDJkY2Y2MTdkYzNkMGUxNmRjMWYz
MDgwMjIwHhcNMjIwNzExMjMxMjEwWhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4MjNhNjQ4ZmZhZTE5ZWZiYWI3NWE0ZmY5Y2VjOTBhOTBjYzNlNGE4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn//UPbu5edS6P6flCPgDUYGZrvIZ
GWE5Nc1yivn+VjLEhcIv1oEwMWRkmB+hmTxj/D7dSzp9lbCStvJvBbv/8pf3VPPv
PaILSlzZ2/J7zMGb8cq1ZIEy45Eg0X7+7Zn90CNMkacJMPMuBJLLlIUlODNbnE+K
IroVwIPL1u9SmA9WkC1q3Q9iLRHrGpPcFrNdmyZ+cjsY9yfnRbcnbzJSg9+7CxPt
DyUK4QYUdaxTeirCLX6W5hm2MeuucuCfrGocnYwKmKVeLmzJIG18RkO/7sNkpOFf
4EttGSOhqm44HWYnkEZSyEyBcxfr16rOb69F2a8pyUP1QG0V9mzMwRRYJwIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFII6ZI/64Z77q3Wk/5zskKkMw+SoMB8GA1UdIwQY
MBaAFHIEe+FbJ1kC3PYX3D0OFtwfMIAiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMt
MWFiZTNhYzEwYWE2LzEvZ2pwa2pfcmhudnVyZGFUX25PeVFxUXpENUtnLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMtMWFiZTNhYzEwYWE2
LzEvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBAEnm5esRTBu/DldzpPb5
0MfpUjREeQtGr1kf823HEHpe2jU9DEIUyiM8DHG5zMCL+Ec95GDwbh0eF+0Wtg3n
ThDwicA91Gi1azKE05Cg4Vliq4ouyAJoRkS/3S51xW+rzcB1lRUoTDUc3XtjJhDg
DFvLswkel/HPwYxeFvPARtWPK+IQUy+N53fFfr1tovpIP8k4T36VTefGM8ywwE1C
U/shJA0NARWWo0g8ipL1OwlPkorg4WrM1oKiASvsQNmfvYYzNtjhPQty8ni6pHF1
FEZptt/zyURbtkRMuX88agz00cPal/W+MhCoLZxB03GyTE6lIJFevysBxu/1VgdB
UZM=
-----END CERTIFICATE-----
Generated at Fri May 2 04:13:32 2025 by rpki-client