Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/gPguqaLEFMdCbpCjQDLoRoHhf4c.roa
File: gPguqaLEFMdCbpCjQDLoRoHhf4c.roa (raw, json)
Hash identifier: B8pi0nrsGHkYvlKLsLZG6m2iliLx9AiLWV5oeoCuCko=
Subject key identifier: 80:F8:2E:A9:A2:C4:14:C7:42:6E:90:A3:40:32:E8:46:81:E1:7F:87
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0187B366F56D92D2C3140A588BA9EDEEEF8E
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/gPguqaLEFMdCbpCjQDLoRoHhf4c.roa
Signing time: Mon 24 Apr 2023 13:14:41 +0000
ROA not before: Mon 24 Apr 2023 13:14:41 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:187:4695:a68a/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:187:b2b8:a7dd/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:b3:66:f5:6d:92:d2:c3:14:0a:58:8b:a9:ed:ee:ef:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Apr 24 13:14:41 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=80f82ea9a2c414c7426e90a34032e84681e17f87
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:5f:3e:76:bf:ef:98:bf:a8:a4:e2:64:ca:74:
fa:40:90:10:4e:b6:5a:a6:77:43:2f:e9:89:6e:86:
59:f1:0a:6d:02:b1:da:89:88:7d:00:6e:2d:68:cb:
f1:5c:1a:73:d7:7b:21:47:08:b0:ec:5d:c6:29:26:
b3:f6:53:30:3e:30:a9:af:97:bd:17:2e:e0:44:71:
4b:ef:f6:24:b0:10:33:97:bd:74:3c:d1:fd:eb:04:
10:e6:4c:71:6a:b3:3f:e7:78:49:b0:83:a2:86:cd:
9c:03:da:8c:1b:60:8f:60:07:c6:05:98:81:71:95:
86:74:c8:33:35:e7:1e:e1:68:ca:b0:21:72:3f:a0:
1c:d4:4b:5a:0b:71:c9:1d:3e:68:a2:7a:b5:1a:20:
89:51:74:db:e4:ae:47:85:08:e2:f1:b5:88:ac:14:
c6:38:8d:9c:9e:02:5d:ce:3b:5b:05:1f:ae:11:a3:
e2:89:ee:87:0b:2c:52:ef:82:84:b6:fe:53:2a:ea:
36:35:40:36:ad:f6:73:94:04:1b:a9:b4:e3:b2:50:
ba:3a:90:98:3b:ca:8f:71:a2:6f:b1:da:5b:65:9c:
ba:6e:d6:01:0b:2f:49:48:26:1e:b8:20:02:4b:57:
be:44:d1:5d:60:ba:42:47:1e:d3:10:10:f0:d4:17:
9a:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:F8:2E:A9:A2:C4:14:C7:42:6E:90:A3:40:32:E8:46:81:E1:7F:87
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/gPguqaLEFMdCbpCjQDLoRoHhf4c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
0a:46:39:60:86:f1:6a:5f:32:58:5e:de:00:97:50:13:b9:c9:
dc:18:db:24:eb:08:16:42:87:1e:6b:4e:df:dd:4a:e9:5f:65:
cf:da:30:82:8c:86:b3:7f:02:f9:75:60:fa:00:8f:da:91:43:
ad:83:88:8a:06:4c:e7:ec:44:ea:b1:6a:e9:ec:37:37:5c:23:
71:80:25:1e:9c:aa:30:aa:c3:7e:78:5a:f6:87:fb:b3:0c:a4:
9d:c5:fc:38:7b:46:1f:3e:38:22:dc:38:26:87:de:07:72:8c:
ed:af:88:40:ed:bb:02:c0:88:a7:b1:c7:e7:c3:da:6d:45:1e:
22:e7:e8:b7:72:bf:f6:f4:cf:da:c9:33:1d:7c:f0:64:93:66:
c6:2c:dc:70:6e:29:8a:e7:a3:bc:4f:48:a4:1d:38:b6:26:7b:
89:87:4f:79:43:a8:be:b5:66:d5:c4:66:00:1e:97:7f:0c:53:
e3:fe:e9:b1:0d:58:50:95:24:30:d2:a6:e8:47:57:52:57:f7:
17:d9:b0:31:02:65:3d:91:f6:c1:9f:3c:ae:29:33:2d:07:5f:
ed:60:6f:35:a9:f2:0a:14:d3:0a:52:90:01:00:25:dc:fe:76:
00:c1:d3:ed:df:a5:28:15:ec:0a:d4:3a:bd:5e:5e:82:34:7d:
de:bc:9d:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 21:26:43 2025 by rpki-client