Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/d89025-d6f3-4891-9d86-d12f039db2c9/1/GpRFxN39KlRc4zqEdoQK0qXut8o.roa
File: GpRFxN39KlRc4zqEdoQK0qXut8o.roa (raw, json)
Hash identifier: EEuaIum26XjFrTub8grORq1MMKgiyXb5dh3W4i0VouE=
Subject key identifier: 1A:94:45:C4:DD:FD:2A:54:5C:E3:3A:84:76:84:0A:D2:A5:EE:B7:CA
Certificate issuer: /CN=b2bec41bd2f3b179de09514306530bd3fbac707b
Certificate serial: 018F942C43F6DBA484FA2C4C2B40249837BA
Authority key identifier: B2:BE:C4:1B:D2:F3:B1:79:DE:09:51:43:06:53:0B:D3:FB:AC:70:7B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sr7EG9LzsXneCVFDBlML0_uscHs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/d89025-d6f3-4891-9d86-d12f039db2c9/1/GpRFxN39KlRc4zqEdoQK0qXut8o.roa
Signing time: Mon 20 May 2024 04:04:39 +0000
ROA not before: Mon 20 May 2024 04:04:39 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18f:942c:c1b/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:94:2c:43:f6:db:a4:84:fa:2c:4c:2b:40:24:98:37:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b2bec41bd2f3b179de09514306530bd3fbac707b
Validity
Not Before: May 20 04:04:39 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=1a9445c4ddfd2a545ce33a8476840ad2a5eeb7ca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:b8:0c:00:b4:cd:71:78:59:78:4c:08:e5:2d:
f4:c4:0a:fe:ea:30:27:b6:13:e3:85:0c:07:0c:ed:
6b:4a:69:bd:97:1b:09:dd:9c:18:fc:e5:0f:6c:aa:
2d:27:b5:48:ac:47:aa:a6:c3:14:4d:6e:43:91:77:
39:25:9f:05:d9:4c:8d:10:29:eb:56:df:f1:40:e9:
4c:8c:b6:71:6f:df:c8:30:1a:ca:3c:ba:77:50:4c:
72:d1:b4:dc:7d:3e:0b:68:10:92:28:98:a5:6f:2a:
7f:9f:9f:35:3e:c7:38:26:1e:59:dc:08:cb:f6:60:
50:bf:77:68:07:fb:82:ed:28:ef:d6:51:80:d1:ac:
f7:ec:b0:35:1d:49:e4:08:e5:d7:77:e3:97:03:7a:
36:5f:b5:6a:e5:b9:1c:4f:38:32:2a:e6:0c:8c:d3:
ae:93:43:5c:b2:1e:52:74:c0:99:2c:c8:9d:0b:f4:
49:01:48:cd:f7:cf:8e:6c:24:55:a4:00:97:64:c0:
db:89:10:dd:5e:d8:7b:bb:98:c2:22:a4:6d:fd:4b:
66:3c:63:06:c7:bd:70:82:b7:97:ec:43:28:44:ec:
14:7a:e6:8d:c4:cb:6f:49:35:a2:87:31:cb:76:a2:
b2:c2:de:7c:ae:a1:22:91:42:f1:d3:90:11:39:b1:
0e:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:94:45:C4:DD:FD:2A:54:5C:E3:3A:84:76:84:0A:D2:A5:EE:B7:CA
X509v3 Authority Key Identifier:
keyid:B2:BE:C4:1B:D2:F3:B1:79:DE:09:51:43:06:53:0B:D3:FB:AC:70:7B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sr7EG9LzsXneCVFDBlML0_uscHs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/d89025-d6f3-4891-9d86-d12f039db2c9/1/GpRFxN39KlRc4zqEdoQK0qXut8o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/d89025-d6f3-4891-9d86-d12f039db2c9/1/sr7EG9LzsXneCVFDBlML0_uscHs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
a6:24:57:01:ed:dc:45:dc:53:1c:fd:22:59:e4:ef:d6:70:4f:
e0:a3:1b:6b:17:f2:7f:e0:13:27:f0:94:ab:39:2a:33:1f:9a:
0a:d6:2e:62:f2:09:a4:21:08:73:a9:c2:84:4e:f1:b8:f9:0b:
80:48:60:55:24:8f:22:7c:aa:a0:0f:66:23:e8:63:8c:1d:a9:
74:15:01:29:82:3f:d6:28:ea:e9:a2:39:e7:c0:fb:49:8e:bd:
c1:06:74:62:41:cc:96:7e:5d:c7:6d:72:7e:1c:bb:70:d3:be:
15:45:55:82:b7:7f:a3:cd:ff:ae:f0:64:d3:8a:86:27:95:74:
4f:70:42:df:d2:b9:29:ad:01:8f:5f:89:7d:fa:13:1e:4a:0e:
c5:db:5d:d6:d3:c2:cb:72:ae:56:31:7d:f9:78:7a:b0:34:8e:
81:ca:2d:06:80:98:3c:50:12:c2:b7:b0:d4:41:6e:3d:d4:a1:
e0:c4:cd:f8:cc:c3:a9:13:ed:59:37:5b:2b:a1:0c:f8:32:ec:
80:7d:6c:ee:c1:7c:d5:4a:b9:0e:ad:84:75:27:fc:11:4e:14:
09:7a:18:bc:77:e6:95:04:35:91:9a:e2:35:50:ba:70:be:29:
e2:88:9c:91:8f:2f:69:32:15:69:a7:4b:bb:9c:48:f9:2c:eb:
67:6d:38:b1
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAY+ULEP226SE+ixMK0AkmDe6MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGIyYmVjNDFiZDJmM2IxNzlkZTA5NTE0MzA2NTMwYmQzZmJh
YzcwN2IwHhcNMjQwNTIwMDQwNDM5WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxYTk0NDVjNGRkZmQyYTU0NWNlMzNhODQ3Njg0MGFkMmE1ZWViN2NhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnbgMALTNcXhZeEwI5S30xAr+6jAn
thPjhQwHDO1rSmm9lxsJ3ZwY/OUPbKotJ7VIrEeqpsMUTW5DkXc5JZ8F2UyNECnr
Vt/xQOlMjLZxb9/IMBrKPLp3UExy0bTcfT4LaBCSKJilbyp/n581Psc4Jh5Z3AjL
9mBQv3doB/uC7Sjv1lGA0az37LA1HUnkCOXXd+OXA3o2X7Vq5bkcTzgyKuYMjNOu
k0Ncsh5SdMCZLMidC/RJAUjN98+ObCRVpACXZMDbiRDdXth7u5jCIqRt/UtmPGMG
x71wgreX7EMoROwUeuaNxMtvSTWihzHLdqKywt58rqEikULx05ARObEOUQIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFBqURcTd/SpUXOM6hHaECtKl7rfKMB8GA1UdIwQY
MBaAFLK+xBvS87F53glRQwZTC9P7rHB7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvc3I3RUc5THpzWG5lQ1ZGREJsTUwwX3VzY0hzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZS9kODkwMjUtZDZmMy00ODkxLTlkODYt
ZDEyZjAzOWRiMmM5LzEvR3BSRnhOMzlLbFJjNHpxRWRvUUswcVh1dDhvLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yZS9kODkwMjUtZDZmMy00ODkxLTlkODYtZDEyZjAzOWRiMmM5
LzEvc3I3RUc5THpzWG5lQ1ZGREJsTUwwX3VzY0hzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBAKYkVwHt3EXcUxz9Ilnk
79ZwT+CjG2sX8n/gEyfwlKs5KjMfmgrWLmLyCaQhCHOpwoRO8bj5C4BIYFUkjyJ8
qqAPZiPoY4wdqXQVASmCP9Yo6umiOefA+0mOvcEGdGJBzJZ+Xcdtcn4cu3DTvhVF
VYK3f6PN/67wZNOKhieVdE9wQt/SuSmtAY9fiX36Ex5KDsXbXdbTwstyrlYxffl4
erA0joHKLQaAmDxQEsK3sNRBbj3UoeDEzfjMw6kT7Vk3WyuhDPgy7IB9bO7BfNVK
uQ6thHUn/BFOFAl6GLx35pUENZGa4jVQunC+KeKInJGPL2kyFWmnS7ucSPks62dt
OLE=
-----END CERTIFICATE-----
Generated at Sun Jul 27 14:42:26 2025 by rpki-client