Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/GedKsiXdX586Z_jsW53L5x_-eGc.roa
File: GedKsiXdX586Z_jsW53L5x_-eGc.roa (raw, json)
Hash identifier: R1CgQoMbUBUFdpkdnlKN3wEA18n8kw1wanrrG2OjnlY=
Subject key identifier: 19:E7:4A:B2:25:DD:5F:9F:3A:67:F8:EC:5B:9D:CB:E7:1F:FE:78:67
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 01886BEB55A3CF331350AABBC26B845B2717
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/GedKsiXdX586Z_jsW53L5x_-eGc.roa
Signing time: Tue 30 May 2023 09:09:24 +0000
ROA not before: Tue 30 May 2023 09:09:24 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:188:5fe2:b396/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:187:4695:a68a/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64:ffff:0:187:fa9a:b088/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:187:b2b8:a7dd/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:6b:eb:55:a3:cf:33:13:50:aa:bb:c2:6b:84:5b:27:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: May 30 09:09:24 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=19e74ab225dd5f9f3a67f8ec5b9dcbe71ffe7867
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:99:eb:7d:af:90:3d:78:ce:22:0f:d9:15:70:
68:72:22:3a:44:49:48:92:09:34:6c:a1:ee:05:d0:
a4:0a:32:c9:f8:fd:4b:28:84:57:f0:a1:59:c8:4f:
56:67:ab:e7:13:b3:ce:b6:7f:1c:c6:dc:24:96:f3:
8d:e9:9a:98:71:39:98:0a:df:6e:7d:b5:87:7c:a4:
85:d0:71:ac:4d:94:7f:e9:71:4e:5a:ca:50:87:40:
a2:24:34:33:ca:9d:b1:92:ce:18:27:88:01:75:e7:
71:48:b5:a5:5c:40:ca:a3:d8:8b:95:ec:fa:52:e9:
58:8c:fc:8c:73:80:ff:e0:6c:29:42:66:84:cc:17:
d5:fb:0b:8c:57:2d:97:49:cc:bd:06:50:db:fd:8f:
67:bc:6f:05:2e:ec:17:b9:a5:dd:df:e5:42:2e:64:
87:e9:36:5c:ee:ba:18:35:71:fa:a9:9a:29:1d:ad:
93:7d:b7:f8:bb:8b:9c:bb:fc:13:47:c5:87:2c:86:
4a:bb:f0:45:1d:59:96:37:c3:0f:a7:50:10:ba:6d:
da:9f:80:e6:23:81:ee:d2:4d:aa:72:4d:c6:81:3a:
f5:5e:a4:76:6b:4c:2e:97:0b:88:2f:f8:ff:94:ea:
d2:f4:19:3b:2c:75:96:50:b7:3c:e5:56:a8:c2:63:
13:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:E7:4A:B2:25:DD:5F:9F:3A:67:F8:EC:5B:9D:CB:E7:1F:FE:78:67
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/GedKsiXdX586Z_jsW53L5x_-eGc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
85:88:88:24:ab:c1:99:00:cd:01:d2:21:e0:e8:0e:d7:6e:8c:
ad:75:5b:51:92:cd:c0:c7:38:ce:84:87:2d:4e:7b:d4:b8:03:
a5:43:06:f0:68:1d:0b:0e:75:37:15:e3:40:ac:c1:d6:bf:5c:
d1:1b:59:6f:be:a5:4f:44:7b:52:33:94:82:6d:88:8a:de:2d:
c7:40:85:6e:75:3e:1d:96:a9:a1:7b:1e:38:47:88:82:23:23:
ec:d9:08:aa:f3:9f:64:1a:e0:3b:ae:cb:5f:c5:44:b1:c8:ee:
25:b1:3c:59:6d:b6:b0:7e:74:52:38:57:57:09:87:d7:78:0c:
40:4a:92:35:d5:e2:d1:6c:e3:a8:42:7d:be:e8:a7:bf:cc:9a:
d6:07:7d:b9:cc:b9:89:f7:70:e8:92:36:30:b3:b2:78:e2:f8:
d5:41:be:75:a2:79:38:07:c3:cb:8a:f5:1d:ac:57:61:f4:10:
c6:1b:55:8f:b3:2a:a6:66:de:b5:b8:18:34:24:1e:71:8d:47:
0d:4c:5b:29:49:21:a9:cf:4c:16:f4:a8:c0:28:5c:41:5d:6c:
f2:59:00:1f:bf:f9:94:10:c7:0d:80:d3:5f:f2:d6:2d:1e:59:
7a:08:6b:02:36:aa:43:07:15:52:00:2a:3c:c1:52:4a:57:44:
4a:2f:7a:43
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYhr61WjzzMTUKq7wmuEWycXMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcyMDQ3YmUxNWIyNzU5MDJkY2Y2MTdkYzNkMGUxNmRjMWYz
MDgwMjIwHhcNMjMwNTMwMDkwOTI0WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxOWU3NGFiMjI1ZGQ1ZjlmM2E2N2Y4ZWM1YjlkY2JlNzFmZmU3ODY3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqJnrfa+QPXjOIg/ZFXBociI6RElI
kgk0bKHuBdCkCjLJ+P1LKIRX8KFZyE9WZ6vnE7POtn8cxtwklvON6ZqYcTmYCt9u
fbWHfKSF0HGsTZR/6XFOWspQh0CiJDQzyp2xks4YJ4gBdedxSLWlXEDKo9iLlez6
UulYjPyMc4D/4GwpQmaEzBfV+wuMVy2XScy9BlDb/Y9nvG8FLuwXuaXd3+VCLmSH
6TZc7roYNXH6qZopHa2Tfbf4u4ucu/wTR8WHLIZKu/BFHVmWN8MPp1AQum3an4Dm
I4Hu0k2qck3GgTr1XqR2a0wulwuIL/j/lOrS9Bk7LHWWULc85VaowmMTzQIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFBnnSrIl3V+fOmf47Fudy+cf/nhnMB8GA1UdIwQY
MBaAFHIEe+FbJ1kC3PYX3D0OFtwfMIAiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMt
MWFiZTNhYzEwYWE2LzEvR2VkS3NpWGRYNTg2Wl9qc1c1M0w1eF8tZUdjLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMtMWFiZTNhYzEwYWE2
LzEvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBAIWIiCSrwZkAzQHSIeDo
DtdujK11W1GSzcDHOM6Ehy1Oe9S4A6VDBvBoHQsOdTcV40Cswda/XNEbWW++pU9E
e1IzlIJtiIreLcdAhW51Ph2WqaF7HjhHiIIjI+zZCKrzn2Qa4Duuy1/FRLHI7iWx
PFlttrB+dFI4V1cJh9d4DEBKkjXV4tFs46hCfb7op7/MmtYHfbnMuYn3cOiSNjCz
snji+NVBvnWieTgHw8uK9R2sV2H0EMYbVY+zKqZm3rW4GDQkHnGNRw1MWylJIanP
TBb0qMAoXEFdbPJZAB+/+ZQQxw2A01/y1i0eWXoIawI2qkMHFVIAKjzBUkpXREov
ekM=
-----END CERTIFICATE-----
Generated at Mon Jun 9 05:27:33 2025 by rpki-client