Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/G3TyRVhWXXTAvaOPO3atYCv4xP4.roa
File: G3TyRVhWXXTAvaOPO3atYCv4xP4.roa (raw, json)
Hash identifier: z3S3YNaD8wMINX49ompLY/0/X8wWuNyr1O84nq2AKjc=
Subject key identifier: 1B:74:F2:45:58:56:5D:74:C0:BD:A3:8F:3B:76:AD:60:2B:F8:C4:FE
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0189AD5663242FF6BA26D9B1D7F8896DA35A
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/G3TyRVhWXXTAvaOPO3atYCv4xP4.roa
Signing time: Mon 31 Jul 2023 19:04:27 +0000
ROA not before: Mon 31 Jul 2023 19:04:27 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:188:7858:a003/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:189:ad56:38db/128 maxlen: 128
2001:67c:64:ffff:0:189:a0e4:5c7d/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:ad:56:63:24:2f:f6:ba:26:d9:b1:d7:f8:89:6d:a3:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Jul 31 19:04:27 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=1b74f24558565d74c0bda38f3b76ad602bf8c4fe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:e5:97:28:80:01:ea:10:32:b0:7f:de:14:07:
94:22:97:9a:44:85:e0:31:53:3d:3d:0f:9b:2e:f3:
ad:f4:f3:ca:4b:98:8c:c7:f6:26:44:57:8c:10:15:
1b:63:fc:d0:e7:37:0f:a9:a3:f6:81:63:68:6e:a9:
7d:72:8e:e7:b0:4f:f3:45:b3:11:54:63:a8:78:fd:
23:22:0e:96:c4:34:c9:b9:cc:77:45:45:f3:fc:1f:
b2:e9:35:b8:67:da:10:3e:cb:30:97:14:ec:5a:88:
21:97:01:c2:6b:e6:6b:13:d2:66:2d:95:92:c3:02:
53:4f:f4:8f:a6:47:7b:61:1b:fd:6b:09:44:a9:ef:
71:60:cf:45:29:47:71:d6:4e:86:ed:fd:64:ec:83:
4e:f9:1b:b5:8b:45:92:d1:bc:91:f3:02:71:c5:f3:
10:b4:8b:a6:b1:58:71:7e:4e:84:61:99:f0:7e:fc:
6b:6c:10:b6:53:e5:51:8b:ae:e0:24:dc:85:b9:b4:
f7:bd:dc:62:34:93:f6:63:a1:5b:5c:11:31:9a:3b:
5d:48:7a:7b:61:92:9b:b5:80:86:7d:db:b8:5d:dd:
4f:3d:39:db:c7:9d:3f:4f:37:04:48:89:1f:e7:a2:
78:58:d2:87:ce:76:ad:e1:15:78:58:9a:c3:24:6d:
b3:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:74:F2:45:58:56:5D:74:C0:BD:A3:8F:3B:76:AD:60:2B:F8:C4:FE
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/G3TyRVhWXXTAvaOPO3atYCv4xP4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
01:88:ec:51:aa:f5:0e:00:42:fd:64:3a:67:0a:bf:d2:7b:19:
b7:74:73:c0:c2:56:30:e7:7d:14:72:c2:15:d8:7b:53:73:8a:
fa:1e:33:36:f0:08:22:97:85:0b:ba:ac:0f:ff:be:90:be:eb:
00:96:9a:7a:cc:a1:bf:2b:22:a9:c5:c2:94:69:a6:4d:7f:a0:
dc:b3:c5:60:d5:ee:c0:89:d8:75:31:89:b5:e5:5a:ea:8b:b9:
14:10:ec:e4:81:80:e4:8f:09:33:df:ab:bb:ef:13:23:1d:b0:
9e:3d:bb:47:f4:3f:ec:7a:e5:74:1b:0e:34:3e:a9:a5:83:c6:
c0:de:ca:5a:d9:7b:91:48:96:50:fe:33:25:e0:0c:85:28:3a:
2a:dd:bb:ad:7d:3b:b7:5b:43:6e:26:65:0e:92:76:69:af:ec:
b4:4c:ee:e8:55:71:45:af:3e:5d:41:86:ad:21:40:52:08:35:
ab:41:73:28:e0:5c:97:21:19:9d:18:bc:8b:b2:b0:39:46:74:
ec:9a:a4:4e:89:74:89:29:af:10:81:af:c1:9f:a4:63:b2:51:
24:3f:e4:dc:65:b2:76:aa:27:91:63:d6:4d:18:df:05:3d:e3:
72:1f:9a:0f:65:5a:a5:3d:c0:f2:5f:c2:e1:49:52:23:d6:ad:
dc:e7:e0:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 17:39:11 2025 by rpki-client