Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/gEPIaAIl0Hj_GIHx4odC04tnpzY.roa
File: gEPIaAIl0Hj_GIHx4odC04tnpzY.roa (raw, json)
Hash identifier: /onMhVA+CZcxFtPZzV7Us6Be/iHUVVHzaiPHKrlNptk=
Subject key identifier: 80:43:C8:68:02:25:D0:78:FF:18:81:F1:E2:87:42:D3:8B:67:A7:36
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 01882C32002A77D8F80105CA381F0BDF6409
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/gEPIaAIl0Hj_GIHx4odC04tnpzY.roa
Signing time: Thu 18 May 2023 00:10:54 +0000
ROA not before: Thu 18 May 2023 00:10:54 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:187:4695:a68a/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64:ffff:0:187:fa9a:b088/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:187:b2b8:a7dd/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:2c:32:00:2a:77:d8:f8:01:05:ca:38:1f:0b:df:64:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: May 18 00:10:54 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=8043c8680225d078ff1881f1e28742d38b67a736
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:fb:01:35:68:ee:7e:14:98:45:ec:1b:7a:82:
96:32:b3:68:bc:6c:fb:ba:5a:80:a9:06:60:59:8f:
12:a6:d8:3a:59:19:16:a5:a2:0f:ee:d3:63:ce:a6:
bc:ac:d6:75:ca:78:36:c6:28:29:a5:23:06:db:de:
d3:2e:01:80:13:f3:65:0f:60:a6:0c:81:2f:30:39:
67:59:55:95:42:ac:90:66:3c:2c:ef:b6:e0:d2:e5:
47:15:a2:5e:01:1c:56:21:a0:8e:29:fc:52:59:f6:
7a:e7:37:0b:ec:4a:48:53:2c:a8:01:c7:21:f6:f5:
0d:65:02:32:22:83:c2:b0:6b:a3:f5:dd:0c:ac:b1:
34:fd:10:4f:76:c9:27:f9:5d:e1:f6:64:2c:79:4e:
17:55:49:c9:80:78:cb:0c:47:55:60:a5:3d:18:c0:
6a:db:bc:a9:a4:2d:4a:1c:f1:ab:54:f7:27:8a:6d:
e2:84:4a:ce:14:65:73:02:e6:f8:28:d5:92:5d:9a:
5d:94:2d:34:2e:80:84:72:3f:3a:40:92:ab:d2:16:
be:91:4d:22:62:72:75:00:bd:e0:53:01:9c:41:da:
56:05:eb:4c:d0:30:a7:28:25:90:28:78:38:d0:4f:
13:e2:97:ec:5c:a6:93:9e:4b:ef:00:03:59:f5:41:
85:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:43:C8:68:02:25:D0:78:FF:18:81:F1:E2:87:42:D3:8B:67:A7:36
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/gEPIaAIl0Hj_GIHx4odC04tnpzY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
9a:25:98:ef:0c:bd:a0:6a:74:8c:a3:b5:b0:d6:b1:ec:3f:78:
ec:29:5f:d8:00:3b:dc:d7:e6:a5:4c:6c:1c:bb:2a:83:96:04:
f0:08:33:38:bc:84:37:41:39:d7:3e:f0:54:41:f4:f9:32:ed:
7e:60:cf:73:82:af:26:e6:f7:1a:be:cf:ce:34:c4:7a:57:e1:
c6:0e:05:c2:e6:dd:86:84:2c:ee:7a:0c:15:bf:f8:17:b3:68:
a6:4d:1d:b5:43:4a:22:34:3a:c4:e7:5b:6c:83:b2:b9:2f:18:
7e:35:ae:b6:d2:b2:7a:b5:c7:a5:51:b6:03:31:b3:31:69:db:
15:eb:d7:69:7a:41:5c:6f:a6:aa:d9:ee:dc:c6:33:3c:68:65:
7c:61:a1:19:15:17:79:6d:d6:3c:23:fc:7d:0a:c0:b3:74:d6:
59:6a:8b:08:4a:38:44:e0:10:34:d8:d0:08:66:12:6c:ab:1d:
c9:d7:93:cf:44:df:3d:01:41:12:42:ec:22:2e:2f:90:30:44:
fb:21:de:6f:7a:dc:d0:4d:fd:6f:5d:5d:43:24:41:ca:28:44:
fc:26:b1:58:b6:d9:5d:ad:97:aa:3e:07:1f:bf:c6:d8:ed:2b:
35:65:b6:40:8a:83:5c:c2:0f:ce:4e:51:d0:83:05:fd:7b:ec:
d6:c5:7b:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 2 17:38:40 2025 by rpki-client