Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/SGDJGrFS5GZ20uffrOWgH0rzZF8.roa
File: SGDJGrFS5GZ20uffrOWgH0rzZF8.roa (raw, json)
Hash identifier: DJ8XCHo6WyIjee6J7gfGB5TH12NxZcM9kVWGlFaVHrU=
Subject key identifier: 48:60:C9:1A:B1:52:E4:66:76:D2:E7:DF:AC:E5:A0:1F:4A:F3:64:5F
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 018877B8A2D022E6E4A2CDACFF5DE02DF0AB
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/SGDJGrFS5GZ20uffrOWgH0rzZF8.roa
Signing time: Thu 01 Jun 2023 16:09:28 +0000
ROA not before: Thu 01 Jun 2023 16:09:28 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:188:5fe2:b396/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:187:4695:a68a/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64:ffff:0:187:fa9a:b088/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:187:b2b8:a7dd/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:77:b8:a2:d0:22:e6:e4:a2:cd:ac:ff:5d:e0:2d:f0:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Jun 1 16:09:28 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=4860c91ab152e46676d2e7dface5a01f4af3645f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:f5:42:c2:37:d5:12:c9:2b:87:a0:eb:f7:c2:
c0:eb:07:16:24:46:93:54:4e:3c:ce:a3:07:39:c7:
c9:c1:58:e3:1e:f1:4b:55:ff:49:d5:a1:a3:d4:17:
54:3a:9c:fa:6c:a1:5d:07:64:60:54:8f:fe:ec:78:
46:89:b1:a0:bc:0e:f2:10:ba:d0:7f:67:03:29:4e:
45:e5:31:46:59:db:35:24:0a:63:87:3d:49:74:f6:
2e:4e:02:3f:8a:41:f7:f1:a2:60:d0:32:9f:85:15:
24:8f:9f:bf:dc:92:a8:cc:0a:7c:fd:81:f5:35:63:
c3:b0:5c:2e:4f:26:62:b7:6d:dc:73:d4:b8:45:c3:
0d:0c:0c:af:74:4f:fa:2b:7b:b4:6d:81:9b:51:53:
48:09:22:58:8c:d1:90:66:78:9c:9e:29:9a:7c:0d:
0d:98:cb:ee:a6:fd:8e:00:73:8b:94:c8:2b:3a:54:
4f:61:d1:94:23:c0:0f:32:79:2e:d5:eb:42:14:e2:
29:89:5f:a5:cd:eb:e6:73:e7:02:b4:a8:c5:a8:6e:
ca:d2:c9:0e:ea:3d:0d:a9:29:1f:5d:dd:dd:3d:28:
12:bb:4d:04:58:6a:65:b2:89:97:37:e7:01:4d:e7:
3e:88:fc:3a:fe:6f:85:28:aa:f2:6b:f3:b2:04:e2:
c3:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:60:C9:1A:B1:52:E4:66:76:D2:E7:DF:AC:E5:A0:1F:4A:F3:64:5F
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/SGDJGrFS5GZ20uffrOWgH0rzZF8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
7f:53:e9:9a:bf:e3:88:0f:ce:6b:f7:b7:cf:88:cd:41:db:74:
64:1c:f5:5d:4e:4a:b8:09:09:5d:c4:68:fb:2c:1e:51:ca:cc:
a0:95:15:b9:c2:7f:f1:76:1a:07:c4:25:7a:42:23:35:02:0d:
e1:8d:b4:fc:76:c1:53:9e:1e:41:7c:0f:8e:c9:2f:f3:8c:87:
a2:b8:47:e0:3e:ec:43:6a:ad:dc:21:ba:b9:a7:13:b2:a8:a1:
9c:83:bf:cb:06:c8:87:5f:7f:ec:61:67:9b:72:29:9b:2d:3a:
b0:97:c4:9b:94:5a:e1:00:b3:65:b4:82:12:42:ed:d7:d7:6c:
c1:86:7b:c3:26:66:15:fa:60:e2:18:89:3c:7a:6c:fd:3d:41:
73:0d:fb:08:74:7c:e2:f8:09:6b:27:3c:10:dc:38:75:61:41:
86:f7:7f:62:f9:6b:ac:9f:44:c0:52:c5:e6:5b:51:d0:61:9f:
d9:4e:9c:4a:59:c4:a5:99:0a:b0:e0:21:be:f5:e7:97:0d:a8:
04:ff:54:ac:28:84:df:9a:69:ca:03:c1:11:63:cc:84:e2:30:
2a:ee:9e:7f:1c:7f:bd:35:c9:be:a2:8c:2d:37:12:7a:4b:59:
db:3e:f9:a4:e2:f4:5d:af:10:5b:29:f3:eb:85:70:9d:d1:3e:
43:6b:8d:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 22:00:54 2025 by rpki-client