Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/GWCob_M5TGC_bhxTEQ1OWYPORv0.roa
File: GWCob_M5TGC_bhxTEQ1OWYPORv0.roa (raw, json)
Hash identifier: j3E+isYrLSywlOeharhZoz/bDoGgn2Aeo3b0aFVfH6s=
Subject key identifier: 19:60:A8:6F:F3:39:4C:60:BF:6E:1C:53:11:0D:4E:59:83:CE:46:FD
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018C860AD635A41072950FA43C9408E14FCC
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/GWCob_M5TGC_bhxTEQ1OWYPORv0.roa
Signing time: Wed 20 Dec 2023 07:05:06 +0000
ROA not before: Wed 20 Dec 2023 07:05:06 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/96 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18c:8609:f071/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:86:0a:d6:35:a4:10:72:95:0f:a4:3c:94:08:e1:4f:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Dec 20 07:05:06 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=1960a86ff3394c60bf6e1c53110d4e5983ce46fd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:15:66:6c:43:0c:11:e5:3e:0d:98:c8:ae:a3:
87:d3:6a:42:a6:e1:af:89:3d:85:e3:73:e8:bf:3e:
09:49:61:f5:17:48:ef:47:a9:06:83:e7:ff:d6:a6:
35:21:fb:be:3e:1b:af:76:4c:5d:ba:3d:d4:ab:0f:
bd:09:a0:8f:75:d4:ab:a4:10:42:8e:cf:c9:12:e1:
32:b8:78:e3:62:4a:21:04:ea:16:91:6a:e9:43:eb:
75:60:d7:b9:bc:06:f4:a7:df:6e:68:98:07:4c:e5:
e0:5a:13:66:cf:b0:09:a6:83:c9:d5:fd:17:13:a7:
b7:fa:c7:01:00:c3:c5:ea:3f:17:42:f5:8d:d1:30:
db:ce:1d:82:3e:77:d9:ed:7b:05:34:56:58:ab:25:
c1:8d:bb:08:0e:c4:21:92:06:35:5f:ad:f7:96:63:
6d:59:dd:5b:21:1d:bc:f6:f2:a4:28:3d:dd:97:1f:
bf:1c:b9:16:2f:ed:17:c2:57:e9:cf:cf:75:5a:02:
21:4e:15:50:5d:ad:44:b1:df:b1:8d:d9:03:d8:dd:
01:45:4d:67:38:24:4d:1f:19:51:c6:c2:2a:49:38:
c3:51:61:f4:e9:3c:88:b7:27:21:ed:e9:b5:b3:07:
7e:72:37:42:95:f7:a7:2f:6b:33:92:f0:85:0c:47:
3f:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:60:A8:6F:F3:39:4C:60:BF:6E:1C:53:11:0D:4E:59:83:CE:46:FD
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/GWCob_M5TGC_bhxTEQ1OWYPORv0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
cf:49:67:d8:ed:95:96:b7:b9:8f:c9:f4:a4:3e:65:ed:01:bf:
10:bf:6e:95:3d:53:fd:9e:70:8b:a2:3a:9b:89:c7:ec:54:c6:
bc:3a:09:f2:64:2d:e7:cf:0d:1e:33:5e:bc:c3:44:7d:f8:58:
a8:d3:21:88:0c:58:af:7b:28:1c:04:c7:f1:17:2a:f5:3d:36:
4d:66:4d:c4:a4:40:7e:4f:0b:2e:96:cc:09:c7:85:be:3b:84:
5e:15:01:5f:1d:f9:fd:ae:39:19:b5:78:8b:0e:76:a6:93:5f:
d1:45:91:dd:85:f7:31:7b:92:e3:b5:21:2e:18:a9:38:da:b5:
db:c5:88:00:c7:c7:77:88:28:55:c4:6b:b1:11:c8:38:5b:b4:
1c:3d:03:97:13:12:7d:19:44:02:1c:43:9b:04:79:b9:3c:51:
fe:96:ef:04:f3:ed:4a:2a:fd:bf:42:4d:d5:f8:f5:4f:66:56:
f7:03:d7:83:4e:25:4d:0b:51:90:b0:79:8f:c2:e6:21:6a:ba:
86:b5:dc:78:64:ef:02:e1:f2:dc:35:77:93:aa:56:1a:c5:f3:
d1:c5:73:ff:7f:50:bd:61:90:fa:0a:1f:93:03:ee:54:0e:d1:
ba:af:f5:bb:97:58:f3:8b:32:58:50:61:56:94:3b:d3:2b:2c:
b3:da:e9:85
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYyGCtY1pBBylQ+kPJQI4U/MMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQzMDM5YTY4MTMwZjE5NjMxZTE1Mjc5NDZlMWUxMjdkYjFl
OGY5ZDkwHhcNMjMxMjIwMDcwNTA2WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxOTYwYTg2ZmYzMzk0YzYwYmY2ZTFjNTMxMTBkNGU1OTgzY2U0NmZkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0hVmbEMMEeU+DZjIrqOH02pCpuGv
iT2F43Povz4JSWH1F0jvR6kGg+f/1qY1Ifu+Phuvdkxduj3Uqw+9CaCPddSrpBBC
js/JEuEyuHjjYkohBOoWkWrpQ+t1YNe5vAb0p99uaJgHTOXgWhNmz7AJpoPJ1f0X
E6e3+scBAMPF6j8XQvWN0TDbzh2CPnfZ7XsFNFZYqyXBjbsIDsQhkgY1X633lmNt
Wd1bIR289vKkKD3dlx+/HLkWL+0Xwlfpz891WgIhThVQXa1Esd+xjdkD2N0BRU1n
OCRNHxlRxsIqSTjDUWH06TyItych7em1swd+cjdClfenL2szkvCFDEc/KwIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFBlgqG/zOUxgv24cUxENTlmDzkb9MB8GA1UdIwQY
MBaAFEMDmmgTDxljHhUnlG4eEn2x6PnZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUXdPYWFCTVBHV01lRlNlVWJoNFNmYkhvLWRrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOC9mNjAxNzgtOTkxYS00MjYxLTk2YTAt
ZGQ1YzMwMGJlNTRlLzEvR1dDb2JfTTVUR0NfYmh4VEVRMU9XWVBPUnYwLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jOC9mNjAxNzgtOTkxYS00MjYxLTk2YTAtZGQ1YzMwMGJlNTRl
LzEvUXdPYWFCTVBHV01lRlNlVWJoNFNmYkhvLWRrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBAM9JZ9jtlZa3uY/J9KQ+
Ze0BvxC/bpU9U/2ecIuiOpuJx+xUxrw6CfJkLefPDR4zXrzDRH34WKjTIYgMWK97
KBwEx/EXKvU9Nk1mTcSkQH5PCy6WzAnHhb47hF4VAV8d+f2uORm1eIsOdqaTX9FF
kd2F9zF7kuO1IS4YqTjatdvFiADHx3eIKFXEa7ERyDhbtBw9A5cTEn0ZRAIcQ5sE
ebk8Uf6W7wTz7Uoq/b9CTdX49U9mVvcD14NOJU0LUZCweY/C5iFquoa13Hhk7wLh
8tw1d5OqVhrF89HFc/9/UL1hkPoKH5MD7lQO0bqv9buXWPOLMlhQYVaUO9MrLLPa
6YU=
-----END CERTIFICATE-----
Generated at Mon Jun 16 19:25:08 2025 by rpki-client