Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/G3nHcO9OFRspcZiB5Sq1BwlhOzU.roa
File: G3nHcO9OFRspcZiB5Sq1BwlhOzU.roa (raw, json)
Hash identifier: cg98Na4WXDHHvyuFyZOSaGs00YQX/BHNHPixvHBpRF4=
Subject key identifier: 1B:79:C7:70:EF:4E:15:1B:29:71:98:81:E5:2A:B5:07:09:61:3B:35
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0188C03F26D119B6F7A8726EE9557C9EE8F6
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/G3nHcO9OFRspcZiB5Sq1BwlhOzU.roa
Signing time: Thu 15 Jun 2023 18:09:04 +0000
ROA not before: Thu 15 Jun 2023 18:09:04 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:188:5fe2:b396/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:187:4695:a68a/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:188:7858:a003/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64:ffff:0:187:fa9a:b088/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:187:b2b8:a7dd/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:c0:3f:26:d1:19:b6:f7:a8:72:6e:e9:55:7c:9e:e8:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Jun 15 18:09:04 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=1b79c770ef4e151b29719881e52ab50709613b35
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:52:82:1c:5e:29:9a:3e:de:6d:f4:49:12:51:
06:c9:1d:6b:e6:08:0c:5b:c9:4a:3a:19:c4:fc:b9:
54:c1:43:ab:8b:16:dc:97:f5:a1:26:c1:74:0b:02:
6c:8d:62:e1:16:84:fa:12:a5:ae:6e:90:c4:eb:76:
ed:f2:35:45:be:b2:b8:13:f7:32:d1:c3:cb:15:c9:
69:11:16:bb:23:db:4f:e1:da:74:1c:53:6a:08:f8:
45:43:a2:99:ea:54:35:a1:de:4a:bf:76:7d:ef:2f:
29:e0:09:88:13:d8:fa:e4:00:2c:fb:3a:80:f4:02:
8d:80:98:9b:6b:56:b7:4a:e7:56:fd:47:db:01:04:
01:0f:1f:10:6f:70:b9:4f:2b:76:73:b9:90:ac:4c:
ab:0c:8e:e1:b2:27:a9:49:58:04:e3:f9:fe:93:0b:
08:9c:10:fa:5a:7a:fc:ad:0a:0c:c6:e9:f1:db:90:
09:23:34:9e:91:0a:77:b0:32:b9:cd:c9:ab:97:b1:
45:f0:b3:53:94:3e:5a:4f:23:b2:01:f3:fd:f5:71:
20:95:94:f1:0a:ac:d7:ad:43:4b:21:ae:57:8d:d6:
56:24:be:3a:87:36:7f:fb:2d:66:99:5d:b9:27:cc:
82:9a:28:66:9f:60:25:f4:7b:b0:52:04:ff:81:d1:
ac:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:79:C7:70:EF:4E:15:1B:29:71:98:81:E5:2A:B5:07:09:61:3B:35
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/G3nHcO9OFRspcZiB5Sq1BwlhOzU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
14:3b:94:dc:af:73:05:77:b2:0d:4f:83:bc:c1:41:e0:e0:11:
d9:74:2e:33:df:b7:c5:fe:16:e0:5a:42:b1:27:80:32:95:53:
75:f1:99:cd:67:0f:e2:fb:01:36:d0:fe:ca:38:db:4d:95:e6:
09:51:df:96:b6:25:b1:56:e0:4b:93:d9:0a:cb:3e:a1:5b:43:
25:9c:86:dd:ae:1b:c8:96:34:e3:d9:5c:b9:6d:b2:c6:47:e8:
49:e7:96:61:cb:28:a2:f7:94:ce:b0:40:25:ef:62:c8:79:ea:
f4:bc:84:76:61:24:6b:2d:22:03:6d:69:35:a5:e3:96:b6:eb:
d2:e8:b3:46:45:bb:5c:09:48:d1:ce:a8:22:b4:79:9f:25:5e:
2b:ec:ac:10:9e:88:1e:a1:5b:db:00:8a:56:36:a3:24:95:cc:
ed:d7:49:ad:55:00:cd:01:a8:71:07:9d:d9:bc:05:fc:c2:9a:
5b:05:6e:47:2c:80:67:48:1c:85:ae:70:a6:7e:b1:b3:51:61:
5a:96:b9:23:b3:3a:93:56:7e:75:3e:75:f9:97:78:91:46:44:
6d:20:c6:a2:7c:cf:fe:4c:aa:de:95:48:63:00:00:9f:dc:c2:
dd:d0:f0:51:9b:0c:c9:73:c5:a4:2a:9a:da:2e:bd:fc:e8:b1:
dc:fe:90:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 00:41:14 2025 by rpki-client