Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/GFoR7kAXh11wT1-_ffhnD5otHNk.roa
File: GFoR7kAXh11wT1-_ffhnD5otHNk.roa (raw, json)
Hash identifier: FVNMF/2jLMgFixfAD3KsLW5Wkyng3K/4yugknCJZFNw=
Subject key identifier: 18:5A:11:EE:40:17:87:5D:70:4F:5F:BF:7D:F8:67:0F:9A:2D:1C:D9
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 018A0EFF92574BB171090C48F40DAFAFB98E
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/GFoR7kAXh11wT1-_ffhnD5otHNk.roa
Signing time: Sat 19 Aug 2023 18:12:24 +0000
ROA not before: Sat 19 Aug 2023 18:12:24 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:188:7858:a003/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:189:a0e4:5c7d/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:0e:ff:92:57:4b:b1:71:09:0c:48:f4:0d:af:af:b9:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Aug 19 18:12:24 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=185a11ee4017875d704f5fbf7df8670f9a2d1cd9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:29:9d:91:52:23:b7:6e:11:53:23:1d:57:a6:
2e:1d:dc:5e:7c:5b:2f:3f:30:c1:9a:50:ff:44:a7:
d2:67:03:c3:c9:19:7e:be:94:c8:8f:67:40:c6:21:
bd:92:5b:53:3a:aa:4f:70:16:c4:e4:f6:1f:7b:e0:
35:92:93:0e:63:66:95:d5:67:8c:3f:b3:7a:b9:c2:
19:7f:03:59:53:cf:33:32:6b:30:a4:82:65:df:df:
a3:b3:4b:b5:b4:aa:3a:bb:0b:91:65:55:60:50:2c:
c6:69:7d:c1:91:73:bb:ca:a7:52:4d:22:f9:18:97:
9e:62:f0:be:52:f0:2e:7d:f2:46:38:70:07:db:66:
51:64:0e:e4:c6:bd:17:a8:ad:0d:42:fe:ee:de:2a:
08:22:8a:89:c6:e3:b1:5b:e7:68:48:90:97:a2:40:
bb:c5:aa:22:c5:03:bd:00:c4:59:52:8d:f6:26:5b:
0e:db:34:b6:ef:e7:44:08:aa:42:6e:d1:1e:d2:e8:
49:00:e0:d7:11:45:c8:98:ce:9b:c3:52:2c:ef:6d:
97:1c:ef:66:2e:12:e9:c8:ba:58:aa:94:0c:9f:17:
a1:bc:c1:28:b7:65:fd:84:98:40:b7:58:cc:6b:41:
ca:1a:3c:fd:99:63:62:87:6f:0a:1c:1a:28:9b:37:
cd:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:5A:11:EE:40:17:87:5D:70:4F:5F:BF:7D:F8:67:0F:9A:2D:1C:D9
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/GFoR7kAXh11wT1-_ffhnD5otHNk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
32:db:d1:7a:bb:c1:8d:36:c3:b8:87:65:35:b5:c0:ce:5b:f4:
1d:a3:b1:83:84:b7:60:54:13:42:ae:37:1b:1b:d4:02:e0:78:
2c:63:58:d2:1b:e0:fa:d6:40:75:6a:42:61:c9:bf:24:59:d7:
6d:72:80:54:5f:0d:07:6f:c0:80:9e:ae:1d:82:ac:7e:3c:87:
1f:47:3b:ea:5d:3d:8b:4c:1e:68:c7:96:72:7c:6d:74:6e:48:
0d:e3:42:aa:88:19:fc:02:02:43:57:79:16:5a:73:95:5a:b4:
c0:33:a3:36:19:59:89:5b:6e:44:c6:b5:ff:2f:ea:ac:3e:a6:
8a:69:1e:c7:33:ac:45:98:42:8f:30:dd:9e:d9:bc:16:f3:95:
10:8d:ad:b0:be:d7:22:17:67:65:b8:38:58:44:de:14:1c:0d:
91:38:3e:62:6a:e1:bd:0f:98:b6:f8:df:be:c4:61:38:bb:23:
f3:b7:80:56:c1:6f:40:6c:1c:a3:14:89:73:65:80:d4:8c:f6:
0b:25:df:74:62:41:01:5f:c2:e5:f5:b2:92:b1:90:67:a6:0c:
31:bf:14:55:a6:f8:df:be:2a:a4:56:4d:8b:29:13:74:27:5e:
7d:a6:5e:cc:da:44:0f:b9:4f:e9:0c:c0:0d:f2:fa:d2:47:2d:
15:69:6b:d3
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYoO/5JXS7FxCQxI9A2vr7mOMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcyMDQ3YmUxNWIyNzU5MDJkY2Y2MTdkYzNkMGUxNmRjMWYz
MDgwMjIwHhcNMjMwODE5MTgxMjI0WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxODVhMTFlZTQwMTc4NzVkNzA0ZjVmYmY3ZGY4NjcwZjlhMmQxY2Q5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlSmdkVIjt24RUyMdV6YuHdxefFsv
PzDBmlD/RKfSZwPDyRl+vpTIj2dAxiG9kltTOqpPcBbE5PYfe+A1kpMOY2aV1WeM
P7N6ucIZfwNZU88zMmswpIJl39+js0u1tKo6uwuRZVVgUCzGaX3BkXO7yqdSTSL5
GJeeYvC+UvAuffJGOHAH22ZRZA7kxr0XqK0NQv7u3ioIIoqJxuOxW+doSJCXokC7
xaoixQO9AMRZUo32JlsO2zS27+dECKpCbtEe0uhJAODXEUXImM6bw1Is722XHO9m
LhLpyLpYqpQMnxehvMEot2X9hJhAt1jMa0HKGjz9mWNih28KHBoomzfNqQIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFBhaEe5AF4ddcE9fv334Zw+aLRzZMB8GA1UdIwQY
MBaAFHIEe+FbJ1kC3PYX3D0OFtwfMIAiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMt
MWFiZTNhYzEwYWE2LzEvR0ZvUjdrQVhoMTF3VDEtX2ZmaG5ENW90SE5rLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMtMWFiZTNhYzEwYWE2
LzEvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBADLb0Xq7wY02w7iHZTW1
wM5b9B2jsYOEt2BUE0KuNxsb1ALgeCxjWNIb4PrWQHVqQmHJvyRZ121ygFRfDQdv
wICerh2CrH48hx9HO+pdPYtMHmjHlnJ8bXRuSA3jQqqIGfwCAkNXeRZac5VatMAz
ozYZWYlbbkTGtf8v6qw+poppHsczrEWYQo8w3Z7ZvBbzlRCNrbC+1yIXZ2W4OFhE
3hQcDZE4PmJq4b0PmLb4377EYTi7I/O3gFbBb0BsHKMUiXNlgNSM9gsl33RiQQFf
wuX1spKxkGemDDG/FFWm+N++KqRWTYspE3QnXn2mXszaRA+5T+kMwA3y+tJHLRVp
a9M=
-----END CERTIFICATE-----
Generated at Sun Jun 8 23:13:42 2025 by rpki-client