Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/gud0WyU0t1WRk0PTfFQzOPka2Vk.roa
File: gud0WyU0t1WRk0PTfFQzOPka2Vk.roa (raw, json)
Hash identifier: 2OLSpOu9Yx5Osn2s10YQbhvJYocHTjwmakkx6MspT9Q=
Subject key identifier: 82:E7:74:5B:25:34:B7:55:91:93:43:D3:7C:54:33:38:F9:1A:D9:59
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 01886B49495A75E4ED7514EAD59721EF0992
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/gud0WyU0t1WRk0PTfFQzOPka2Vk.roa
Signing time: Tue 30 May 2023 06:12:24 +0000
ROA not before: Tue 30 May 2023 06:12:24 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:188:5fe2:b396/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:187:4695:a68a/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64:ffff:0:187:fa9a:b088/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:187:b2b8:a7dd/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:6b:49:49:5a:75:e4:ed:75:14:ea:d5:97:21:ef:09:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: May 30 06:12:24 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=82e7745b2534b755919343d37c543338f91ad959
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:7b:56:d5:b8:ee:11:ac:dc:c5:8d:67:d6:72:
59:98:f5:15:75:96:f0:43:9c:49:10:c5:c7:40:2d:
13:32:ee:c4:67:c5:ff:cd:41:ac:25:90:09:5b:ab:
6c:4d:3b:cb:be:34:41:ad:78:dc:a9:d9:7e:e7:d2:
68:d0:99:17:0f:c3:d6:2e:28:7b:79:2f:7c:62:f2:
c8:e0:85:f0:0f:0d:fd:57:51:3d:55:26:05:be:0c:
8f:43:5c:25:76:d6:cf:44:2b:9a:7b:7b:54:6c:37:
e1:d4:de:30:f6:79:1b:ba:a4:93:5f:80:cc:6a:0e:
d7:1a:0d:2f:6e:53:83:89:9e:d4:4a:44:36:6c:b5:
4a:e7:41:0f:f1:3d:41:e7:6d:d7:00:ce:f9:41:a2:
45:70:b5:57:5a:32:44:d9:c8:44:98:02:d0:de:df:
00:20:52:f6:35:8c:0b:15:82:f2:f5:4d:5a:d1:d2:
cb:4c:5a:bb:aa:05:73:3d:97:cd:3c:36:c4:e3:14:
9d:aa:09:2a:e5:36:17:59:44:c5:2f:2e:00:d3:b6:
42:7d:a9:3a:cc:98:fa:2c:71:64:2b:26:41:4b:bc:
b3:e6:5a:fe:d8:16:35:d3:08:29:e6:0e:22:7b:ac:
ed:0c:17:7b:94:44:f2:3b:67:cf:23:1e:0d:4d:05:
2b:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:E7:74:5B:25:34:B7:55:91:93:43:D3:7C:54:33:38:F9:1A:D9:59
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/gud0WyU0t1WRk0PTfFQzOPka2Vk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
12:48:5b:0e:25:fc:68:9f:ee:ed:1c:a4:f8:ec:98:56:8d:70:
d3:85:a2:bc:de:4c:2a:7f:a0:5b:80:e3:7f:81:4a:98:a2:04:
ce:f8:18:be:fa:49:3d:e4:f2:f0:81:ab:83:91:50:96:bf:e1:
9f:42:c5:f5:3d:6d:7f:4c:e7:49:97:25:b8:7f:20:f6:c6:84:
f7:43:5c:d2:a9:f6:bd:61:ea:71:ab:17:fe:24:91:41:f7:1b:
c7:85:4e:12:5e:5e:d0:b0:81:0d:ee:a8:50:6b:70:3d:02:db:
1b:9c:23:10:2c:2d:63:4e:15:b4:19:57:1c:dd:af:56:b7:95:
a9:84:87:ff:aa:53:a9:19:1d:75:16:25:54:04:32:07:37:64:
76:29:bd:0b:a4:1a:8f:f3:ec:31:d4:2b:8e:c8:af:7b:f2:e7:
6b:ab:c3:79:57:09:2e:24:26:c2:35:d3:85:18:81:54:16:b3:
43:c9:6d:6d:91:33:9c:b5:cb:29:ed:48:8f:23:15:34:db:38:
f6:8c:1b:36:9f:d8:c3:e1:90:27:e0:a0:d7:21:02:68:95:e1:
87:68:71:a8:77:6b:eb:5d:6d:7a:ee:21:39:18:0b:80:39:10:
3b:4b:c1:04:b6:a1:10:64:b9:41:47:45:92:eb:d2:b1:93:56:
17:c7:b6:c5
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYhrSUladeTtdRTq1Zch7wmSMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcyMDQ3YmUxNWIyNzU5MDJkY2Y2MTdkYzNkMGUxNmRjMWYz
MDgwMjIwHhcNMjMwNTMwMDYxMjI0WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4MmU3NzQ1YjI1MzRiNzU1OTE5MzQzZDM3YzU0MzMzOGY5MWFkOTU5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnXtW1bjuEazcxY1n1nJZmPUVdZbw
Q5xJEMXHQC0TMu7EZ8X/zUGsJZAJW6tsTTvLvjRBrXjcqdl+59Jo0JkXD8PWLih7
eS98YvLI4IXwDw39V1E9VSYFvgyPQ1wldtbPRCuae3tUbDfh1N4w9nkbuqSTX4DM
ag7XGg0vblODiZ7USkQ2bLVK50EP8T1B523XAM75QaJFcLVXWjJE2chEmALQ3t8A
IFL2NYwLFYLy9U1a0dLLTFq7qgVzPZfNPDbE4xSdqgkq5TYXWUTFLy4A07ZCfak6
zJj6LHFkKyZBS7yz5lr+2BY10wgp5g4ie6ztDBd7lETyO2fPIx4NTQUrTQIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFILndFslNLdVkZND03xUMzj5GtlZMB8GA1UdIwQY
MBaAFHIEe+FbJ1kC3PYX3D0OFtwfMIAiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMt
MWFiZTNhYzEwYWE2LzEvZ3VkMFd5VTB0MVdSazBQVGZGUXpPUGthMlZrLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMtMWFiZTNhYzEwYWE2
LzEvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBABJIWw4l/Gif7u0cpPjs
mFaNcNOForzeTCp/oFuA43+BSpiiBM74GL76ST3k8vCBq4ORUJa/4Z9CxfU9bX9M
50mXJbh/IPbGhPdDXNKp9r1h6nGrF/4kkUH3G8eFThJeXtCwgQ3uqFBrcD0C2xuc
IxAsLWNOFbQZVxzdr1a3lamEh/+qU6kZHXUWJVQEMgc3ZHYpvQukGo/z7DHUK47I
r3vy52urw3lXCS4kJsI104UYgVQWs0PJbW2RM5y1yyntSI8jFTTbOPaMGzaf2MPh
kCfgoNchAmiV4Ydocah3a+tdbXruITkYC4A5EDtLwQS2oRBkuUFHRZLr0rGTVhfH
tsU=
-----END CERTIFICATE-----
Generated at Fri May 2 15:34:42 2025 by rpki-client