Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/GSo6oVIfOTaKp96lD2-c8FvN_Gk.roa
File: GSo6oVIfOTaKp96lD2-c8FvN_Gk.roa (raw, json)
Hash identifier: lIvT7gpzwpQ2oGkHKhUG/TCSKGzarQkhA33EX0/Cz+w=
Subject key identifier: 19:2A:3A:A1:52:1F:39:36:8A:A7:DE:A5:0F:6F:9C:F0:5B:CD:FC:69
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 01883A90251968B79491A570C40A3F65272B
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/GSo6oVIfOTaKp96lD2-c8FvN_Gk.roa
Signing time: Sat 20 May 2023 19:08:25 +0000
ROA not before: Sat 20 May 2023 19:08:25 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:187:4695:a68a/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64:ffff:0:187:fa9a:b088/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:187:b2b8:a7dd/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:3a:90:25:19:68:b7:94:91:a5:70:c4:0a:3f:65:27:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: May 20 19:08:25 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=192a3aa1521f39368aa7dea50f6f9cf05bcdfc69
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:e9:0a:74:70:48:8c:09:07:b7:96:bf:37:ed:
9f:f4:71:b4:d6:56:4c:83:18:23:fd:b6:57:2a:f6:
14:99:59:a8:8f:a8:0c:47:71:e1:06:8d:c4:d3:3b:
92:51:3d:95:14:69:a6:31:05:1c:64:8c:52:8f:dc:
9e:e1:4a:53:b2:43:0c:e0:64:1e:6a:19:25:ca:17:
ff:7a:f9:fc:b4:d7:4c:19:a3:8e:c4:70:67:83:71:
e7:bb:cd:c4:62:d5:6e:6e:42:9e:95:5b:20:5b:69:
93:f9:dc:8c:c4:06:7d:3e:e8:17:5f:64:c5:07:6a:
6b:6d:a7:e8:d5:3f:da:54:05:ae:11:66:57:10:b0:
eb:4a:ff:2f:e8:de:b8:11:62:dc:5e:e3:e6:4d:c4:
58:83:28:bd:d3:f0:62:66:40:32:41:85:49:95:4a:
94:a7:0f:1a:c4:d9:d9:5d:28:62:de:20:47:c1:1a:
11:1d:ef:d6:ab:e8:da:b7:55:c2:48:2f:be:bd:60:
bf:5f:40:b8:19:af:0f:70:1b:a5:dc:76:c5:9e:dc:
2b:5b:e3:a7:b4:b6:cd:91:50:20:6e:34:0e:a8:aa:
b6:86:9b:2b:8a:fb:ef:7a:b6:f8:dc:59:dc:be:16:
08:99:04:1a:94:de:86:9f:cb:e9:6b:92:64:be:7a:
65:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:2A:3A:A1:52:1F:39:36:8A:A7:DE:A5:0F:6F:9C:F0:5B:CD:FC:69
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/GSo6oVIfOTaKp96lD2-c8FvN_Gk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
59:7e:11:da:7f:bf:71:ae:9d:4e:5e:c6:b3:48:06:da:ac:e6:
3c:6e:6c:57:66:aa:0e:2b:2e:64:ca:14:79:e8:65:ce:10:57:
87:7d:a5:b9:f4:ae:14:6e:fb:ad:40:20:56:e8:b0:c7:82:a8:
fb:8a:bf:24:d2:f0:ac:49:01:e0:e8:f3:df:3c:46:28:ba:ec:
a4:eb:b2:58:5b:36:2b:5a:4b:31:6d:07:18:93:21:59:43:de:
6b:3c:a9:e7:b7:eb:0c:39:a4:b3:d1:cf:c1:7a:bf:4f:bd:9b:
89:8b:4f:9e:b0:23:18:ea:07:c7:93:fc:8c:18:a9:07:c6:0a:
df:65:ae:1c:d5:42:8d:c8:79:56:0e:4b:99:1c:12:58:03:9b:
4c:d5:74:9a:34:fd:88:f5:c3:62:9f:87:04:6e:5c:17:c2:94:
f9:26:61:c2:4f:af:64:c8:b3:e4:2d:38:00:06:30:2d:29:e0:
1e:93:ac:2b:b8:c8:e6:89:9c:ba:66:e1:6f:5b:39:3b:08:fa:
74:51:c4:47:65:cb:bf:40:89:67:f8:a4:cc:4b:eb:eb:01:f7:
4e:3f:0f:a4:f7:a3:8d:4d:49:84:60:37:7e:5c:dc:48:10:27:
86:88:9a:77:7d:23:42:e1:3b:e5:48:90:5f:9f:42:6a:e9:e3:
ca:d1:b8:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 17:36:02 2025 by rpki-client