Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/GL2xYYMGl6dtTW90aXaJ2gCnjGI.roa
File: GL2xYYMGl6dtTW90aXaJ2gCnjGI.roa (raw, json)
Hash identifier: Z5pe8deuUf/5VnKBvtrI/BQcj4w1WzY1opuFo0yg4VU=
Subject key identifier: 18:BD:B1:61:83:06:97:A7:6D:4D:6F:74:69:76:89:DA:00:A7:8C:62
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018AC713C8ECF38CD2396298105EFF28549B
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/GL2xYYMGl6dtTW90aXaJ2gCnjGI.roa
Signing time: Sun 24 Sep 2023 12:04:37 +0000
ROA not before: Sun 24 Sep 2023 12:04:37 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:18a:c713:70b0/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:c7:13:c8:ec:f3:8c:d2:39:62:98:10:5e:ff:28:54:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Sep 24 12:04:37 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=18bdb161830697a76d4d6f74697689da00a78c62
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:50:9b:b4:42:10:f9:bf:ee:d2:12:71:11:cf:
35:98:a2:5b:ea:41:99:b9:c1:f0:53:e8:3e:bd:f5:
b0:07:22:36:fd:eb:2d:62:01:db:66:34:0b:ae:a1:
fb:97:2e:69:91:c2:b2:d4:a4:26:c7:fc:a5:c0:b3:
81:26:c0:71:5d:e6:09:14:81:a7:42:4a:aa:a2:e1:
30:81:3e:b9:9d:75:cb:37:56:0d:9c:e2:1d:35:43:
2f:d5:53:db:08:ad:e0:d7:5e:c8:57:36:10:ad:50:
73:be:e5:23:a6:62:6e:2e:81:79:e7:64:73:18:78:
2c:1e:5a:4f:67:27:e2:6d:a3:af:e3:44:e3:2c:cc:
4e:77:11:66:40:aa:fe:fb:1e:dd:71:4d:35:82:de:
f5:21:7a:14:cf:19:09:28:b8:02:b2:87:50:4f:c7:
16:08:37:06:cc:c5:76:69:3a:bc:11:15:15:a1:bb:
c6:43:f9:b4:7b:25:0a:d6:2e:80:6a:4d:fc:9a:5c:
16:60:a4:09:57:ba:41:38:06:c9:8d:fd:42:97:ef:
89:e7:2c:cc:31:14:a7:b2:31:8f:9e:cc:ea:e5:f6:
41:4d:24:70:54:90:59:ee:1e:e1:18:98:20:80:71:
19:f2:ff:4a:19:62:27:42:6d:0e:eb:88:38:6e:80:
64:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:BD:B1:61:83:06:97:A7:6D:4D:6F:74:69:76:89:DA:00:A7:8C:62
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/GL2xYYMGl6dtTW90aXaJ2gCnjGI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
87:3b:1a:da:72:30:fa:ef:f4:0d:35:e0:db:a6:ad:f1:ba:8e:
90:cc:d3:d4:db:0a:cd:ef:17:84:87:7a:c5:e8:a6:d5:8c:36:
6a:24:3c:45:70:fe:eb:05:46:f0:46:a0:7e:46:06:83:a7:b3:
69:3a:9a:08:2d:ac:f7:c8:d6:42:46:63:4a:76:da:68:38:04:
cb:f4:7b:41:e7:6d:b0:65:45:7c:60:de:f2:04:0c:4d:0f:c1:
36:aa:af:9c:04:fe:2e:14:1e:37:d9:d9:0a:28:5c:a2:72:53:
c5:48:27:82:89:bf:1e:fd:34:54:b5:41:3e:33:2a:42:11:fb:
2f:9f:11:17:8c:97:e6:72:f4:13:d7:68:49:f0:15:0a:cf:97:
97:4c:7a:65:6b:d6:0e:6c:cc:ab:a1:53:48:22:ee:e9:e9:94:
9b:b8:43:1c:96:99:dc:59:8c:4d:f1:9f:c4:be:b6:01:a0:cd:
36:6d:7f:17:5a:c4:43:c0:5b:cd:bc:5c:ae:bd:6f:26:56:55:
0d:c7:79:23:a2:50:aa:97:5d:5e:ef:38:65:bc:3d:2c:17:77:
ce:9f:36:8e:e7:b3:38:ca:68:d3:87:e5:26:b3:43:25:30:13:
8f:2b:d1:62:25:35:88:ea:91:25:15:a4:86:75:98:b5:b0:3a:
3b:15:3b:0f
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYrHE8js84zSOWKYEF7/KFSbMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQzMDM5YTY4MTMwZjE5NjMxZTE1Mjc5NDZlMWUxMjdkYjFl
OGY5ZDkwHhcNMjMwOTI0MTIwNDM3WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxOGJkYjE2MTgzMDY5N2E3NmQ0ZDZmNzQ2OTc2ODlkYTAwYTc4YzYyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAilCbtEIQ+b/u0hJxEc81mKJb6kGZ
ucHwU+g+vfWwByI2/estYgHbZjQLrqH7ly5pkcKy1KQmx/ylwLOBJsBxXeYJFIGn
QkqqouEwgT65nXXLN1YNnOIdNUMv1VPbCK3g117IVzYQrVBzvuUjpmJuLoF552Rz
GHgsHlpPZyfibaOv40TjLMxOdxFmQKr++x7dcU01gt71IXoUzxkJKLgCsodQT8cW
CDcGzMV2aTq8ERUVobvGQ/m0eyUK1i6Aak38mlwWYKQJV7pBOAbJjf1Cl++J5yzM
MRSnsjGPnszq5fZBTSRwVJBZ7h7hGJgggHEZ8v9KGWInQm0O64g4boBk5QIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFBi9sWGDBpenbU1vdGl2idoAp4xiMB8GA1UdIwQY
MBaAFEMDmmgTDxljHhUnlG4eEn2x6PnZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUXdPYWFCTVBHV01lRlNlVWJoNFNmYkhvLWRrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOC9mNjAxNzgtOTkxYS00MjYxLTk2YTAt
ZGQ1YzMwMGJlNTRlLzEvR0wyeFlZTUdsNmR0VFc5MGFYYUoyZ0NuakdJLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jOC9mNjAxNzgtOTkxYS00MjYxLTk2YTAtZGQ1YzMwMGJlNTRl
LzEvUXdPYWFCTVBHV01lRlNlVWJoNFNmYkhvLWRrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBAIc7GtpyMPrv9A014Num
rfG6jpDM09TbCs3vF4SHesXoptWMNmokPEVw/usFRvBGoH5GBoOns2k6mggtrPfI
1kJGY0p22mg4BMv0e0HnbbBlRXxg3vIEDE0PwTaqr5wE/i4UHjfZ2QooXKJyU8VI
J4KJvx79NFS1QT4zKkIR+y+fEReMl+Zy9BPXaEnwFQrPl5dMemVr1g5szKuhU0gi
7unplJu4QxyWmdxZjE3xn8S+tgGgzTZtfxdaxEPAW828XK69byZWVQ3HeSOiUKqX
XV7vOGW8PSwXd86fNo7nszjKaNOH5SazQyUwE48r0WIlNYjqkSUVpIZ1mLWwOjsV
Ow8=
-----END CERTIFICATE-----
Generated at Wed Jun 18 20:37:59 2025 by rpki-client