Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/g-aAxtUouKSQLw20vS-kFV5dUsw.roa
File: g-aAxtUouKSQLw20vS-kFV5dUsw.roa (raw, json)
Hash identifier: A0NM3JNk7Wi81GgDz24w7fpIaBde4TZzH4Balu2qaGI=
Subject key identifier: 83:E6:80:C6:D5:28:B8:A4:90:2F:0D:B4:BD:2F:A4:15:5E:5D:52:CC
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0187D1DC7FA0A142B1FD178A9961DBE78D33
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/g-aAxtUouKSQLw20vS-kFV5dUsw.roa
Signing time: Sun 30 Apr 2023 11:11:41 +0000
ROA not before: Sun 30 Apr 2023 11:11:41 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:187:4695:a68a/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:187:b2b8:a7dd/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:d1:dc:7f:a0:a1:42:b1:fd:17:8a:99:61:db:e7:8d:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Apr 30 11:11:41 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=83e680c6d528b8a4902f0db4bd2fa4155e5d52cc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:bb:d1:54:be:06:6c:9a:43:f3:bc:d3:b7:65:
23:06:46:43:e2:71:4b:a0:a7:0d:60:32:fd:19:ce:
8c:cd:b6:56:fc:ce:c5:f7:23:b3:f8:ac:31:64:32:
84:c0:01:26:17:5a:ed:c7:bd:94:66:fa:6e:98:87:
47:3d:27:67:86:b0:22:44:96:52:7e:28:b6:e7:7d:
2a:d1:8f:6c:78:c0:6e:8a:00:2d:96:24:c9:4b:02:
c5:43:8d:48:53:84:76:28:90:d6:f3:2a:30:08:33:
ae:3d:21:f0:c3:06:e9:1c:b8:1a:6f:39:a3:90:eb:
00:b8:48:2e:f0:90:72:59:53:90:7e:c3:9a:e9:20:
ca:16:25:62:1e:f7:f9:19:1f:32:8b:34:8b:b0:12:
fd:8f:6a:b6:13:c9:10:26:72:a5:ae:82:8b:1c:7c:
7f:c6:5f:5f:8c:12:83:2d:17:7b:83:1d:41:6e:a2:
48:5d:f0:46:8e:03:c7:8e:b2:89:a3:d5:24:5e:64:
80:c9:3b:ee:67:14:31:86:4c:fb:bf:42:a5:e9:32:
92:b3:93:eb:c7:35:e7:7d:d8:ac:f2:81:fc:d2:de:
93:c8:21:f4:75:a9:ae:df:b6:c3:50:91:05:ad:49:
bc:5f:9d:26:89:dc:00:e9:82:72:27:18:01:33:b1:
b2:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:E6:80:C6:D5:28:B8:A4:90:2F:0D:B4:BD:2F:A4:15:5E:5D:52:CC
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/g-aAxtUouKSQLw20vS-kFV5dUsw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
95:c0:73:37:29:bf:3e:bc:d8:59:b0:08:53:e7:71:de:b1:78:
f5:ad:e7:0c:f0:b7:da:cd:e2:4a:ed:4c:6f:99:64:20:ff:78:
27:10:ff:f0:ec:65:c2:90:aa:ea:29:1e:c4:62:ae:e2:7f:eb:
ac:c1:e3:19:f1:9f:dc:06:86:7f:46:1b:2c:2a:85:ff:44:7c:
52:c0:f9:d3:9f:a3:57:3d:93:79:9c:3b:9b:d7:17:44:55:0d:
35:b7:0b:4c:7d:6d:2e:38:45:a0:21:56:af:c9:61:e0:02:46:
25:ff:50:4d:08:ab:2f:04:40:73:5e:89:33:4e:9c:9a:ce:f0:
d3:0e:0e:22:85:42:c4:20:47:81:18:84:2f:39:ab:53:7c:ad:
80:3b:c8:b0:32:ca:d9:93:7b:54:4b:82:8f:93:bc:76:1b:d4:
b4:56:d3:96:f6:2c:a7:56:90:66:bd:3d:53:1d:c6:30:49:97:
37:9f:bf:d0:83:67:a5:a5:ac:e2:8c:4c:a9:11:cd:ab:8f:8b:
de:2b:b3:91:3a:03:32:7b:2c:e9:95:89:dc:bf:2a:ce:9a:57:
f0:d9:f2:57:ce:ff:a0:95:ea:7e:38:d7:e4:b4:88:0d:0e:a3:
5f:b1:e9:c9:bd:d7:30:90:14:55:c4:d9:63:c2:1b:77:0c:74:
5f:ac:ef:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 00:09:09 2025 by rpki-client