Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/gjptBkQYhC_l6cIvgaDQjx_b5fs.roa
File: gjptBkQYhC_l6cIvgaDQjx_b5fs.roa (raw, json)
Hash identifier: lOqzyj3gWE+cZqQiPV1Urvju3yuTYEGfWwD2Lci8eMc=
Subject key identifier: 82:3A:6D:06:44:18:84:2F:E5:E9:C2:2F:81:A0:D0:8F:1F:DB:E5:FB
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0189CC0615DE05F0B6B2400A7EDB213D72F7
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/gjptBkQYhC_l6cIvgaDQjx_b5fs.roa
Signing time: Sun 06 Aug 2023 18:04:58 +0000
ROA not before: Sun 06 Aug 2023 18:04:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:188:7858:a003/128 maxlen: 128
2001:67c:64:ffff:0:189:cc05:5ca3/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:189:a0e4:5c7d/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:cc:06:15:de:05:f0:b6:b2:40:0a:7e:db:21:3d:72:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Aug 6 18:04:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=823a6d064418842fe5e9c22f81a0d08f1fdbe5fb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:52:64:78:bb:ee:ec:e1:d3:12:de:7f:7a:9c:
46:1b:57:f5:6a:c0:8c:23:b1:22:ce:c3:69:e0:25:
1c:0b:44:30:bc:ff:4c:08:da:23:82:a9:88:a4:6f:
6a:90:05:28:f6:e4:75:d0:ab:0c:c5:f1:62:3e:86:
db:cc:bd:ec:27:2a:1a:d8:e6:3e:46:b0:1a:31:25:
0b:84:e4:30:42:14:4c:39:8e:92:21:35:39:9e:d6:
e1:76:36:63:94:6d:11:0e:ae:14:5d:81:d1:47:e7:
99:34:19:78:93:e6:43:68:db:7f:d0:36:9a:3d:79:
95:18:ae:5d:02:d4:db:61:ec:3e:53:ab:4f:d6:4e:
af:14:c6:6d:ac:78:ea:e4:3c:f5:87:67:7d:9d:1b:
f2:ca:84:eb:df:95:01:34:03:46:07:a4:78:1e:a5:
98:cd:86:cb:4c:46:b5:46:aa:3e:d7:f8:d2:d5:5f:
36:14:c1:a5:8b:15:88:7a:46:e8:56:63:51:ef:be:
e3:9b:8c:5d:03:4f:23:8a:2e:8a:fc:24:3b:8c:19:
6f:4b:e0:af:cb:e8:6b:21:ea:ff:7f:dc:12:c3:ba:
ea:6a:f6:65:6d:7c:0d:f5:24:65:cd:f1:2f:97:70:
92:36:d0:33:4f:0f:92:ef:91:c3:7c:fe:18:a7:68:
e3:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:3A:6D:06:44:18:84:2F:E5:E9:C2:2F:81:A0:D0:8F:1F:DB:E5:FB
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/gjptBkQYhC_l6cIvgaDQjx_b5fs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
77:1f:ef:32:9c:25:49:ed:e8:d4:99:22:da:d5:21:4a:57:33:
14:dd:95:0e:3e:54:c7:60:6d:95:66:9f:80:1f:4e:85:70:a5:
b7:df:3f:50:86:48:4f:ca:46:d8:ee:5a:0a:4c:6f:c3:3d:83:
26:29:9b:38:23:f8:b6:23:e7:d1:db:86:3e:58:05:64:7a:a6:
44:77:dc:0f:8c:08:b2:34:a9:0f:13:eb:3e:d1:94:d5:29:4e:
87:07:f1:a8:63:e9:24:85:6d:22:d5:a6:15:73:5b:c6:40:78:
d0:4c:7d:0a:f6:e5:25:af:79:09:1a:26:b7:c1:c3:3a:2e:38:
4a:1d:10:9a:a2:70:7c:4b:f6:51:32:e7:90:a5:03:f8:d3:47:
8e:04:5d:2e:c7:2f:14:fc:f3:1a:57:d7:7d:7b:51:4b:81:61:
69:23:bd:73:16:b3:20:95:ee:f5:30:ba:ae:dc:91:68:3c:dc:
10:6f:59:30:b6:44:fa:8e:34:cc:24:e6:d3:40:f5:2a:de:c3:
b1:54:87:b0:50:86:ff:4c:76:42:cd:40:c9:a2:7c:09:43:94:
17:4a:f6:95:c8:b3:07:30:75:0a:46:92:de:e6:de:9d:75:50:
91:fc:92:0d:7a:55:66:78:a5:0c:64:08:f0:df:7c:28:91:d0:
93:e0:2c:e2
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYnMBhXeBfC2skAKftshPXL3MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcyMDQ3YmUxNWIyNzU5MDJkY2Y2MTdkYzNkMGUxNmRjMWYz
MDgwMjIwHhcNMjMwODA2MTgwNDU4WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4MjNhNmQwNjQ0MTg4NDJmZTVlOWMyMmY4MWEwZDA4ZjFmZGJlNWZiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiVJkeLvu7OHTEt5/epxGG1f1asCM
I7EizsNp4CUcC0QwvP9MCNojgqmIpG9qkAUo9uR10KsMxfFiPobbzL3sJyoa2OY+
RrAaMSULhOQwQhRMOY6SITU5ntbhdjZjlG0RDq4UXYHRR+eZNBl4k+ZDaNt/0Daa
PXmVGK5dAtTbYew+U6tP1k6vFMZtrHjq5Dz1h2d9nRvyyoTr35UBNANGB6R4HqWY
zYbLTEa1Rqo+1/jS1V82FMGlixWIekboVmNR777jm4xdA08jii6K/CQ7jBlvS+Cv
y+hrIer/f9wSw7rqavZlbXwN9SRlzfEvl3CSNtAzTw+S75HDfP4Yp2jj5wIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFII6bQZEGIQv5enCL4Gg0I8f2+X7MB8GA1UdIwQY
MBaAFHIEe+FbJ1kC3PYX3D0OFtwfMIAiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMt
MWFiZTNhYzEwYWE2LzEvZ2pwdEJrUVloQ19sNmNJdmdhRFFqeF9iNWZzLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMtMWFiZTNhYzEwYWE2
LzEvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBAHcf7zKcJUnt6NSZItrV
IUpXMxTdlQ4+VMdgbZVmn4AfToVwpbffP1CGSE/KRtjuWgpMb8M9gyYpmzgj+LYj
59Hbhj5YBWR6pkR33A+MCLI0qQ8T6z7RlNUpTocH8ahj6SSFbSLVphVzW8ZAeNBM
fQr25SWveQkaJrfBwzouOEodEJqicHxL9lEy55ClA/jTR44EXS7HLxT88xpX1317
UUuBYWkjvXMWsyCV7vUwuq7ckWg83BBvWTC2RPqONMwk5tNA9Srew7FUh7BQhv9M
dkLNQMmifAlDlBdK9pXIswcwdQpGkt7m3p11UJH8kg16VWZ4pQxkCPDffCiR0JPg
LOI=
-----END CERTIFICATE-----
Generated at Fri May 2 09:37:09 2025 by rpki-client