Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/g5CCZYHZpMVxnuPVq_uuOlJGIbc.roa
File: g5CCZYHZpMVxnuPVq_uuOlJGIbc.roa (raw, json)
Hash identifier: BVs+WOANQzY8MqPh6V3Zm5ZG9lbN6n+OvBeNgJv60SI=
Subject key identifier: 83:90:82:65:81:D9:A4:C5:71:9E:E3:D5:AB:FB:AE:3A:52:46:21:B7
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0187CAC5ED15DB6500222BCF621505BC2BC6
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/g5CCZYHZpMVxnuPVq_uuOlJGIbc.roa
Signing time: Sat 29 Apr 2023 02:09:41 +0000
ROA not before: Sat 29 Apr 2023 02:09:41 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:187:4695:a68a/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:187:b2b8:a7dd/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:ca:c5:ed:15:db:65:00:22:2b:cf:62:15:05:bc:2b:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Apr 29 02:09:41 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=8390826581d9a4c5719ee3d5abfbae3a524621b7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:0b:93:99:e6:ad:5f:ba:5c:a7:7a:3e:32:bc:
06:21:aa:b3:f0:97:ea:9b:25:9d:fd:a6:fb:2e:73:
4a:fa:b4:a4:0f:04:8c:91:70:3f:45:42:a6:f5:c9:
82:7c:e8:7a:b6:b6:33:d3:4d:61:60:08:34:77:9f:
a1:11:e5:93:e2:1d:b1:a8:d5:9d:1b:28:46:24:77:
7b:1a:26:b1:44:0a:0b:49:cd:f5:be:90:e9:cf:64:
db:1d:b1:fd:8b:3b:10:11:89:0b:8a:4c:5c:f1:53:
2f:eb:ab:8d:99:3f:40:05:28:b9:b4:6c:a3:b1:49:
35:60:93:b8:47:7a:22:90:69:ea:84:59:83:41:3f:
83:67:23:37:00:6e:b2:69:39:00:73:e8:47:db:e7:
3d:1d:96:7f:30:d9:29:96:49:43:af:f3:a0:47:9a:
e0:52:b6:84:b4:7b:41:62:ef:de:dd:47:12:3b:c0:
fb:6c:a1:bb:9b:94:0f:f6:f0:d8:2b:3d:45:6f:8c:
88:ca:97:47:e2:31:8c:67:73:bb:ea:2a:af:95:43:
04:9f:af:63:d4:89:c4:ff:09:3d:64:fd:cb:08:f4:
0e:20:9b:fd:92:09:7c:fa:64:2f:b9:b3:39:80:3e:
6c:bc:72:fe:70:ac:2e:ac:7d:59:43:64:32:1e:ab:
f6:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:90:82:65:81:D9:A4:C5:71:9E:E3:D5:AB:FB:AE:3A:52:46:21:B7
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/g5CCZYHZpMVxnuPVq_uuOlJGIbc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
30:35:8e:3a:41:63:d8:39:1f:9e:0e:6f:e4:86:6b:76:ae:9a:
a7:47:76:c5:7a:64:94:22:a1:6d:8c:c4:18:24:93:8b:db:b7:
36:bf:31:c7:66:20:5c:76:fe:d1:af:09:05:98:60:ff:1d:dd:
62:a8:af:4f:6a:5d:28:dd:8f:d2:45:54:1c:96:ca:c2:33:70:
ce:16:8a:33:51:c4:17:13:48:3f:f4:4c:83:57:07:be:b1:14:
21:9c:46:aa:2f:01:ea:45:75:6d:dd:8f:e9:32:fa:9e:eb:d2:
f0:56:d4:7c:aa:cb:6b:5e:5f:fb:0d:bc:c3:2a:73:7b:dc:cc:
d9:bb:cd:c1:25:f1:3e:57:aa:09:77:b5:28:d3:b3:fa:bd:92:
7b:ed:52:0b:06:f4:05:bb:3d:f0:59:d2:57:bf:92:8d:2d:39:
fa:76:4b:45:99:ee:e5:df:03:d3:bb:09:c3:11:99:64:00:31:
19:0c:6a:08:ea:69:a2:73:af:3f:0f:69:e1:04:94:04:0c:14:
ce:3d:56:e4:79:f4:bd:82:a6:0b:4b:43:8d:81:6d:10:bf:36:
bb:a2:7b:fe:4f:0f:db:8a:19:67:28:bf:c2:6f:d4:37:dd:73:
fd:3a:a2:04:ad:10:59:d1:e8:02:be:ed:af:80:f5:a2:48:b2:
cd:32:c8:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 18:43:47 2025 by rpki-client