Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/gLP4kvkj_DQAsoU480OqZPrNHbI.roa
File: gLP4kvkj_DQAsoU480OqZPrNHbI.roa (raw, json)
Hash identifier: diSPV4q3JgKeq2Y2UOVYIiCOhfNRY5IFWrBOddtbqk0=
Subject key identifier: 80:B3:F8:92:F9:23:FC:34:00:B2:85:38:F3:43:AA:64:FA:CD:1D:B2
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 01888686E2828314039F45468D0D4C540774
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/gLP4kvkj_DQAsoU480OqZPrNHbI.roa
Signing time: Sun 04 Jun 2023 13:09:26 +0000
ROA not before: Sun 04 Jun 2023 13:09:26 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:188:5fe2:b396/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:187:4695:a68a/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:188:7858:a003/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64:ffff:0:187:fa9a:b088/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:187:b2b8:a7dd/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:86:86:e2:82:83:14:03:9f:45:46:8d:0d:4c:54:07:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Jun 4 13:09:26 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=80b3f892f923fc3400b28538f343aa64facd1db2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:c7:12:30:69:4f:05:6d:4a:7f:71:50:b3:0e:
73:06:e5:12:c9:2e:84:50:aa:7b:0f:7d:17:0d:c3:
e5:70:f9:cc:22:3b:ca:1f:14:82:f2:7d:f9:2d:99:
5e:62:11:e1:d2:99:b5:03:13:94:b2:38:c3:ef:ea:
8f:45:f9:3d:8c:dd:69:31:f5:f2:46:2e:9f:47:cd:
c2:1d:8b:eb:59:af:6e:16:0a:1b:4a:25:f5:01:79:
fa:59:b6:e3:99:ad:d1:3b:c0:6d:0a:ee:7f:c4:f1:
58:f4:06:93:88:94:9e:87:7f:f2:0b:58:0b:7f:dd:
00:e9:b1:98:87:8c:ef:2d:49:a4:64:7f:49:98:b7:
c3:43:31:d3:51:3a:b5:0a:19:01:13:9c:f1:57:87:
ce:29:00:ae:42:88:82:26:f2:4f:19:01:0d:74:e8:
c4:c9:b4:72:11:47:18:9c:8b:a8:e1:b3:13:41:16:
b4:80:2b:9b:1d:8e:b0:bc:e0:27:57:f5:46:6b:61:
8d:7b:77:3c:69:dc:85:0a:43:6f:9e:a6:f2:8b:ab:
7b:4e:8a:f1:f9:e1:c3:33:94:a2:76:36:fc:09:93:
25:68:11:3b:66:51:40:38:bc:60:b0:f6:03:8d:33:
18:28:08:bb:7f:26:9a:d7:44:ca:0e:c3:78:17:70:
2d:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:B3:F8:92:F9:23:FC:34:00:B2:85:38:F3:43:AA:64:FA:CD:1D:B2
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/gLP4kvkj_DQAsoU480OqZPrNHbI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
72:8f:9d:3b:bd:76:bc:c9:c6:51:dd:ba:f1:a8:87:d7:35:23:
36:f2:0c:63:ba:a6:92:b4:c5:f6:3c:22:c5:5b:8f:c2:86:6d:
74:7e:d8:8d:46:cc:5a:30:21:ea:de:b3:ed:ac:97:7e:e9:2f:
32:8c:58:6f:f8:34:69:c3:a0:65:22:04:60:98:64:34:1e:45:
39:f5:8a:5f:9b:45:03:24:00:3a:50:02:7b:ed:e6:f8:6b:d4:
9e:7f:d1:1f:46:03:2b:a5:7d:3c:9c:1a:30:58:1b:2b:41:d2:
e6:d6:97:28:81:0e:aa:a0:64:52:40:10:35:b0:0e:b4:90:64:
e7:93:43:28:db:7d:43:8f:d4:a4:77:58:07:92:2b:ca:85:67:
74:fa:2d:02:b7:4c:f1:f0:e2:40:f9:ab:d4:63:3c:7d:e1:7a:
40:a7:73:e3:18:ad:73:1d:85:db:9c:62:dc:53:dc:af:a8:e8:
1c:da:98:2c:06:38:82:9a:a3:54:c0:e8:7e:68:7b:a8:2e:9d:
8b:dc:de:0b:c5:16:a7:7c:bb:49:1e:f6:df:44:fa:ac:e3:4c:
28:f4:ae:8f:1f:6c:a2:e1:49:da:1d:fa:d0:65:8e:7e:55:a1:
71:7c:00:48:e4:14:7d:12:14:3a:15:c7:26:76:d3:2f:95:65:
c6:0b:e3:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 14:02:14 2025 by rpki-client