Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/GZ0EEpGxO82GD63EQjCmWmWmU6E.roa
File: GZ0EEpGxO82GD63EQjCmWmWmU6E.roa (raw, json)
Hash identifier: M/ftciyglhoL6p8pPFfo55l77yA8G6RLylK8203eqjI=
Subject key identifier: 19:9D:04:12:91:B1:3B:CD:86:0F:AD:C4:42:30:A6:5A:65:A6:53:A1
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 018708CDA1B3CD45E2F1166B73A4C500E67C
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/GZ0EEpGxO82GD63EQjCmWmWmU6E.roa
Signing time: Wed 22 Mar 2023 10:11:46 +0000
ROA not before: Wed 22 Mar 2023 10:11:46 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:08:cd:a1:b3:cd:45:e2:f1:16:6b:73:a4:c5:00:e6:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Mar 22 10:11:46 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=199d041291b13bcd860fadc44230a65a65a653a1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:de:3e:49:b4:18:a5:c2:99:59:78:c9:4f:ad:
46:6e:53:10:44:8e:3b:da:be:e0:82:f7:6f:b0:eb:
d6:d3:0b:48:72:21:4f:18:65:31:cb:c9:df:26:99:
92:f8:d0:04:bb:c3:1c:bf:4b:c5:f3:ef:78:63:d1:
6a:16:67:70:c1:83:55:bd:e0:aa:35:8a:c6:74:f0:
ef:4e:1e:fb:9b:c9:4e:2c:35:fd:c3:35:54:57:68:
74:ba:f3:36:ff:5e:4e:06:ba:d5:22:6e:fe:42:ac:
ac:2f:7b:31:66:44:0e:49:2c:11:ca:eb:dc:2c:ec:
48:2c:b3:ba:45:ae:c2:eb:fc:a8:5e:a7:41:36:28:
71:3e:8b:0b:0b:bd:16:1c:53:6b:f2:fe:56:af:18:
11:4c:27:03:d3:ed:60:04:7a:30:9e:30:ea:b8:a4:
50:02:76:c2:2b:d8:10:ab:c3:d9:57:bc:99:89:04:
33:68:67:92:cd:d0:9d:af:f0:bb:3c:7b:57:70:b2:
37:b5:3b:f3:74:c6:90:6d:7f:4c:04:e2:b0:24:de:
48:08:63:b7:34:b5:c8:3a:ea:59:ea:af:b6:24:60:
56:55:43:eb:77:46:92:36:ca:8f:95:c2:2e:d8:33:
87:73:5f:52:b5:71:74:b3:56:6b:b3:8b:cc:94:6c:
bd:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:9D:04:12:91:B1:3B:CD:86:0F:AD:C4:42:30:A6:5A:65:A6:53:A1
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/GZ0EEpGxO82GD63EQjCmWmWmU6E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
9b:b1:1c:f1:7f:dc:b4:ae:d5:cb:5b:cf:3e:9a:97:93:d2:77:
bc:a4:bc:7e:78:df:a9:a9:be:ef:fd:64:10:d9:6e:dc:b4:1c:
34:94:9d:d3:dd:34:54:a4:97:6a:fe:4a:ec:d7:3e:49:f1:74:
72:e3:4f:cd:96:91:9e:77:0c:e2:80:1d:ec:07:60:b8:63:93:
93:23:ec:5f:bc:88:c2:62:ca:68:7e:a8:eb:b8:74:74:c0:8c:
86:28:73:b5:9a:0e:4d:e3:26:39:27:51:b7:2c:5c:5b:a8:80:
a2:7c:8c:13:39:da:ef:b1:7c:fe:5c:8b:47:06:45:40:78:59:
83:35:5e:c5:cb:18:57:86:54:c8:dd:36:c4:e5:94:c1:35:01:
91:aa:9b:6e:40:3d:e7:8f:32:26:e6:1d:60:8e:ac:1c:79:29:
51:41:10:5d:3d:a2:2f:4b:59:84:16:30:ab:c8:11:2e:04:36:
b5:d4:c9:50:be:60:19:13:bb:cb:a4:fb:9f:b3:e2:fa:89:7e:
35:36:45:ad:41:64:ff:45:4b:cb:85:ee:c4:65:ce:10:90:ef:
5c:76:39:9a:75:7c:57:22:b4:b2:85:1a:00:e3:9d:32:9b:1d:
2c:3f:71:51:19:dc:72:b9:8b:fb:31:fc:91:cf:fd:cc:da:e5:
58:06:6b:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 11:13:35 2025 by rpki-client