Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/3-gkU5OC_hNnTmjE0wyvLOGUl50.roa
File: 3-gkU5OC_hNnTmjE0wyvLOGUl50.roa (raw, json)
Hash identifier: 7J/sHU5dYQnfa6b9t/3RS5ZflBp2LKlFSx3GdorH6Wc=
Subject key identifier: DF:E8:24:53:93:82:FE:13:67:4E:68:C4:D3:0C:AF:2C:E1:94:97:9D
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 018732E0EE98D443957BDA3EF9C775E274AB
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/3-gkU5OC_hNnTmjE0wyvLOGUl50.roa
Signing time: Thu 30 Mar 2023 14:16:54 +0000
ROA not before: Thu 30 Mar 2023 14:16:54 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:32:e0:ee:98:d4:43:95:7b:da:3e:f9:c7:75:e2:74:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Mar 30 14:16:54 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=dfe824539382fe13674e68c4d30caf2ce194979d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:c7:c2:cf:b8:e6:c6:57:83:94:9e:1f:68:ef:
81:be:8e:74:7d:85:38:11:5d:7a:1f:21:f1:7f:7a:
86:93:77:da:b1:d8:57:d2:7b:1d:a6:9d:3d:61:80:
96:0b:72:63:00:78:c3:24:26:a3:7e:15:b6:80:7e:
3e:c1:e6:05:84:92:05:9f:3c:3e:37:e3:35:27:a9:
07:c8:c7:53:f5:f6:71:76:e7:d7:db:26:6e:d0:80:
60:86:58:eb:a2:02:96:db:9c:95:a8:0b:56:a6:65:
a3:7d:85:d2:32:16:39:56:5a:10:64:d9:18:dc:ef:
37:fe:90:86:b1:f4:10:03:3d:f9:94:9b:b2:42:bf:
c9:fb:f0:ab:4a:35:4b:9e:47:b6:01:85:8e:89:a0:
66:32:42:0b:1b:e8:a1:87:4a:b6:87:bf:cd:8c:c4:
32:e2:eb:0d:2d:ec:3b:68:f8:ad:10:29:67:d8:79:
07:d1:c0:67:34:f2:6b:be:16:b7:f2:ae:8c:6c:e9:
64:e5:65:fb:bd:89:8c:a2:69:a2:a2:56:31:d0:ee:
93:fd:a8:d2:49:15:9f:e0:43:1c:c9:13:7a:4f:cd:
08:33:78:5a:08:97:55:6e:61:1e:c5:ab:23:a2:ee:
53:52:84:ef:e0:4a:56:0b:e8:c7:5c:2f:af:7d:ea:
42:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:E8:24:53:93:82:FE:13:67:4E:68:C4:D3:0C:AF:2C:E1:94:97:9D
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/3-gkU5OC_hNnTmjE0wyvLOGUl50.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
2a:c4:5c:fc:b5:b8:8c:a0:e2:15:b3:4e:65:65:08:c2:a5:5e:
1e:f5:da:fe:36:54:ab:b8:8e:01:ef:02:d5:5f:43:df:b2:37:
de:8f:1d:be:e0:63:81:59:6c:f3:36:3c:f1:95:26:4d:13:4e:
4f:6e:8c:c9:f2:2d:49:f9:4d:22:4f:87:f4:79:e4:5e:04:00:
bd:f7:4a:20:f4:20:16:28:c6:d1:71:af:89:09:1e:29:f8:29:
1c:ff:c1:3a:71:e3:2f:0e:e0:e9:2c:63:e2:91:da:0a:25:6b:
54:8d:27:e6:0f:34:bf:bb:16:32:d1:cc:06:68:50:61:9d:fe:
bf:c8:02:fa:a2:0d:0d:81:2d:d0:52:bd:ce:70:66:50:51:39:
e6:54:03:d4:4e:48:c8:3e:5c:5d:fa:3b:94:c5:24:2b:d1:12:
b5:31:7f:fd:2b:49:1e:dc:92:9b:0b:75:05:54:21:8d:e1:50:
26:d1:fc:36:99:96:55:8b:cf:4d:7f:99:12:b8:a8:54:7b:f3:
97:f1:32:2e:db:83:d6:c1:eb:8f:fb:e2:20:c1:ba:a8:83:b2:
26:fd:ec:67:a2:e6:2c:1d:52:32:0a:d3:49:b0:9a:c7:f4:75:
85:bf:4e:8c:79:3e:a1:13:b8:9f:94:4b:82:26:12:52:67:4f:
7d:61:a4:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 16:21:08 2025 by rpki-client