Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/GAg9NKraiIb_VsGbSLRlUTXWLU0.roa
File: GAg9NKraiIb_VsGbSLRlUTXWLU0.roa (raw, json)
Hash identifier: /J2V0Rk4mV3bjPAtchybw2zL2wcLkQPtiagFHw1Wnvs=
Subject key identifier: 18:08:3D:34:AA:DA:88:86:FF:56:C1:9B:48:B4:65:51:35:D6:2D:4D
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 01884D08D79D7B13C8BD5AE65C97F9DAB825
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/GAg9NKraiIb_VsGbSLRlUTXWLU0.roa
Signing time: Wed 24 May 2023 09:13:25 +0000
ROA not before: Wed 24 May 2023 09:13:25 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:187:4695:a68a/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64:ffff:0:187:fa9a:b088/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:187:b2b8:a7dd/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:4d:08:d7:9d:7b:13:c8:bd:5a:e6:5c:97:f9:da:b8:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: May 24 09:13:25 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=18083d34aada8886ff56c19b48b4655135d62d4d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:9a:0f:a9:97:5f:71:2f:1d:a6:3f:7d:30:8e:
99:f0:ad:1c:d7:5f:70:2f:38:08:6f:e1:61:8e:8d:
2f:f9:3d:1b:a5:71:ab:51:37:13:38:56:51:6c:62:
df:a1:c4:7f:22:a6:3b:8e:1e:df:f5:57:b9:38:20:
34:0a:e0:a6:d5:98:a2:16:6d:f9:8b:b9:17:16:98:
2b:44:b7:78:d4:c2:fa:c1:4a:bf:84:e4:45:c1:20:
24:e9:95:8f:9d:55:ef:79:e2:ac:36:57:cd:c1:11:
35:db:3b:31:82:48:50:f2:df:6a:6e:44:72:bb:62:
fe:be:ec:47:9b:b7:68:ef:47:e5:9a:cb:94:fd:0b:
ac:cd:68:ae:b5:f7:e9:eb:98:1f:0e:80:20:02:63:
41:8d:7c:83:4a:ef:24:b0:ba:df:d3:04:77:6b:72:
eb:bd:28:c8:21:4b:a3:24:9b:3b:21:7f:ef:55:1a:
72:e3:97:db:d3:c0:c9:26:c9:3f:b3:09:1c:ea:d1:
f6:c7:57:80:60:58:c1:11:80:eb:cd:80:43:6b:9f:
ae:09:ef:df:c9:0d:ac:07:7e:29:a9:f4:7a:82:7c:
49:9b:4f:98:14:66:45:e4:d7:da:60:ad:24:ab:c3:
5c:a7:67:0e:db:eb:8b:1d:39:90:54:9d:2c:3d:fb:
a4:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:08:3D:34:AA:DA:88:86:FF:56:C1:9B:48:B4:65:51:35:D6:2D:4D
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/GAg9NKraiIb_VsGbSLRlUTXWLU0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
b3:7a:d4:f0:bf:da:78:ed:7f:f7:ab:85:ba:4b:eb:df:1f:7f:
33:07:d7:d9:e1:78:93:99:2f:a7:36:88:ee:5a:e2:e5:3e:31:
ce:ec:fa:fa:47:95:52:43:14:08:e9:78:05:41:25:69:94:8f:
e0:57:1c:09:d3:ba:59:6e:46:d8:ab:2d:de:78:83:76:5f:5e:
b0:56:0b:18:b6:21:76:13:26:54:11:75:42:0a:cc:c7:7b:14:
25:99:cc:ff:1b:8d:7d:b1:c1:a5:f7:61:4f:94:62:50:b6:f9:
e7:56:66:46:8a:35:99:15:6b:41:35:1d:cd:58:04:41:44:3d:
5f:6b:8c:17:ba:d6:ed:75:07:8a:dd:f6:b6:3e:50:8e:6d:20:
ce:32:6c:aa:24:e3:fc:b6:21:97:b8:07:d4:b1:18:fb:2d:0b:
d7:ed:97:a5:4d:68:d0:62:d2:b9:ad:f4:7d:84:10:23:59:33:
b0:49:1e:2e:a3:bd:e0:1d:08:e0:3d:7d:91:94:e8:15:27:3d:
04:d5:6f:6f:3f:e4:eb:9d:9c:f5:e2:89:dd:a7:3c:37:ee:b6:
75:12:2e:dc:b9:cd:fb:69:8a:00:35:12:98:34:75:b2:22:41:
83:88:ed:25:04:11:60:57:b3:c8:c4:9e:1a:68:53:c5:69:21:
52:51:44:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 18:41:47 2025 by rpki-client