Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/gLAZXbOxFYtvbO_Y2O03nSAMgcI.roa
File: gLAZXbOxFYtvbO_Y2O03nSAMgcI.roa (raw, json)
Hash identifier: PMZOtERHuvEj/cPuQxGaPzaLKMP6htAbHvaqQMkfqIU=
Subject key identifier: 80:B0:19:5D:B3:B1:15:8B:6F:6C:EF:D8:D8:ED:37:9D:20:0C:81:C2
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 018958300EC766345B5480F90F2497633291
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/gLAZXbOxFYtvbO_Y2O03nSAMgcI.roa
Signing time: Sat 15 Jul 2023 06:14:51 +0000
ROA not before: Sat 15 Jul 2023 06:14:51 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:188:5fe2:b396/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:187:4695:a68a/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:188:7858:a003/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64:ffff:0:187:fa9a:b088/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:187:b2b8:a7dd/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:58:30:0e:c7:66:34:5b:54:80:f9:0f:24:97:63:32:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Jul 15 06:14:51 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=80b0195db3b1158b6f6cefd8d8ed379d200c81c2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:a7:a1:2e:5b:1f:16:be:e0:48:51:91:3b:c8:
21:e4:f8:b1:be:f5:08:c2:1d:a1:aa:36:78:36:13:
93:1b:4e:25:05:40:c6:88:27:77:69:02:8d:06:80:
0a:4a:bd:fc:da:1c:ec:44:38:9b:67:a5:dd:05:fb:
ea:57:9d:be:a4:c3:50:7a:ba:4f:e8:b3:53:65:3c:
80:87:01:3c:54:1b:b7:6a:2c:09:8c:9d:68:e6:dd:
e6:a8:87:b7:60:ea:f5:b4:d9:ea:79:8a:a3:78:1c:
9b:a5:be:48:81:75:42:4e:8f:c9:91:c7:84:b3:66:
9b:5a:ad:e1:2b:d1:9e:77:dd:78:59:59:be:30:de:
e4:6a:09:17:6f:4d:cf:6e:18:dd:b8:7e:be:2b:44:
50:5a:94:99:7c:b7:d9:2e:ff:2b:12:fb:54:df:6d:
60:b3:23:a0:ba:63:a9:60:22:53:3a:4a:f5:3c:b8:
88:da:0a:e7:18:1b:a6:e3:32:57:6e:76:25:a4:f0:
b8:92:d4:6d:09:99:91:47:06:05:41:fd:34:21:54:
03:88:f0:ac:9d:64:7e:da:a2:ba:e3:17:42:68:ec:
d2:6c:4a:38:2b:71:31:e8:7f:5b:0d:77:09:b0:e2:
f1:ba:6e:78:c4:ab:f2:ba:8a:2d:f1:4f:75:f1:10:
bc:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:B0:19:5D:B3:B1:15:8B:6F:6C:EF:D8:D8:ED:37:9D:20:0C:81:C2
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/gLAZXbOxFYtvbO_Y2O03nSAMgcI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
37:08:0c:ec:bf:3c:98:eb:ee:2b:26:95:49:3e:ec:1e:95:ac:
ab:d3:23:56:57:29:8f:07:19:e5:3b:6f:a4:57:b0:d2:5a:42:
d8:cd:13:f1:0e:e6:06:27:05:8e:e5:c0:95:f3:ef:40:e3:c2:
a8:85:a4:a4:c7:7d:18:00:9f:03:3c:9d:36:e2:c0:60:8e:84:
a7:89:24:4d:27:0e:9a:55:fd:1b:1a:45:0c:80:34:37:8f:3d:
67:c2:dc:d8:a0:4d:5f:7e:5a:b0:ea:c4:92:ea:33:aa:e7:c9:
dc:6f:24:49:75:f1:2b:e7:f1:98:1e:35:b7:3c:99:4a:c0:df:
c0:99:b0:29:08:c2:5a:3c:7d:ee:df:5c:aa:6b:6c:f2:2d:00:
7b:5b:66:8f:f0:7d:85:ae:c5:a2:24:68:36:24:6f:8e:8e:88:
71:d7:5a:97:61:02:ff:89:62:ab:c4:64:fe:ce:4f:11:ca:dc:
d0:ec:9b:76:81:3d:61:d7:5f:69:61:40:ca:9c:64:65:e7:ed:
79:d6:95:6a:db:d1:c2:80:84:98:80:e2:40:9d:70:57:2f:60:
a8:73:41:01:3e:ef:45:e0:59:5e:5e:6a:78:65:f9:e1:31:97:
00:d1:dc:79:a3:db:7b:ab:ec:a2:7c:8a:8a:d8:84:88:c4:ba:
e8:44:1a:ef
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYlYMA7HZjRbVID5DySXYzKRMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcyMDQ3YmUxNWIyNzU5MDJkY2Y2MTdkYzNkMGUxNmRjMWYz
MDgwMjIwHhcNMjMwNzE1MDYxNDUxWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4MGIwMTk1ZGIzYjExNThiNmY2Y2VmZDhkOGVkMzc5ZDIwMGM4MWMyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAraehLlsfFr7gSFGRO8gh5PixvvUI
wh2hqjZ4NhOTG04lBUDGiCd3aQKNBoAKSr382hzsRDibZ6XdBfvqV52+pMNQerpP
6LNTZTyAhwE8VBu3aiwJjJ1o5t3mqIe3YOr1tNnqeYqjeBybpb5IgXVCTo/JkceE
s2abWq3hK9Ged914WVm+MN7kagkXb03PbhjduH6+K0RQWpSZfLfZLv8rEvtU321g
syOgumOpYCJTOkr1PLiI2grnGBum4zJXbnYlpPC4ktRtCZmRRwYFQf00IVQDiPCs
nWR+2qK64xdCaOzSbEo4K3Ex6H9bDXcJsOLxum54xKvyuoot8U918RC8awIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFICwGV2zsRWLb2zv2NjtN50gDIHCMB8GA1UdIwQY
MBaAFHIEe+FbJ1kC3PYX3D0OFtwfMIAiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMt
MWFiZTNhYzEwYWE2LzEvZ0xBWlhiT3hGWXR2Yk9fWTJPMDNuU0FNZ2NJLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMtMWFiZTNhYzEwYWE2
LzEvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBADcIDOy/PJjr7ismlUk+
7B6VrKvTI1ZXKY8HGeU7b6RXsNJaQtjNE/EO5gYnBY7lwJXz70DjwqiFpKTHfRgA
nwM8nTbiwGCOhKeJJE0nDppV/RsaRQyANDePPWfC3NigTV9+WrDqxJLqM6rnydxv
JEl18Svn8ZgeNbc8mUrA38CZsCkIwlo8fe7fXKprbPItAHtbZo/wfYWuxaIkaDYk
b46OiHHXWpdhAv+JYqvEZP7OTxHK3NDsm3aBPWHXX2lhQMqcZGXn7XnWlWrb0cKA
hJiA4kCdcFcvYKhzQQE+70XgWV5eanhl+eExlwDR3Hmj23ur7KJ8iorYhIjEuuhE
Gu8=
-----END CERTIFICATE-----
Generated at Sun Jun 8 23:34:05 2025 by rpki-client