Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/gRG6H6EpbOm1BV-w_9lLGFAEDjM.roa
File: gRG6H6EpbOm1BV-w_9lLGFAEDjM.roa (raw, json)
Hash identifier: ZkMrsfpqFdXT9dt/pL5GgrVy3oQUOt+t1d/jwbOqrRU=
Subject key identifier: 81:11:BA:1F:A1:29:6C:E9:B5:05:5F:B0:FF:D9:4B:18:50:04:0E:33
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 018722C7DE474CF05B0DDA1643FE1566DD68
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/gRG6H6EpbOm1BV-w_9lLGFAEDjM.roa
Signing time: Mon 27 Mar 2023 11:15:36 +0000
ROA not before: Mon 27 Mar 2023 11:15:36 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:22:c7:de:47:4c:f0:5b:0d:da:16:43:fe:15:66:dd:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Mar 27 11:15:36 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=8111ba1fa1296ce9b5055fb0ffd94b1850040e33
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:7a:e5:12:a7:07:bf:10:e5:e5:fd:6c:e7:60:
f1:6f:ab:b8:a2:51:3c:9b:4b:a7:77:ac:d7:b3:f3:
b8:34:8f:19:d9:ea:83:79:73:6f:62:b0:57:71:f3:
c6:af:a2:c0:74:67:96:b9:f4:88:a5:2d:86:ed:e2:
8e:87:53:9b:30:63:b1:41:49:4e:bd:f2:aa:53:6c:
51:8d:c6:b9:e1:f0:1b:c6:8d:2d:ed:9c:e6:d0:6d:
6f:9d:1c:ae:8f:c5:7b:f6:5d:e1:d0:8f:3c:12:0d:
af:47:5d:e4:7b:66:e1:67:de:87:16:d3:c9:fd:68:
74:41:41:55:42:68:c5:4b:45:3f:ee:2a:ef:52:7a:
61:e6:86:69:8a:cd:bc:8e:a3:65:86:84:4d:d9:b5:
e2:1a:d5:0b:75:a7:25:3f:da:e1:0d:33:b6:ea:5f:
a3:d1:3c:4a:a2:63:f2:f3:b3:c5:48:62:20:59:f5:
6c:93:5b:c8:2b:12:0a:a8:cf:9f:c1:29:b8:be:77:
3c:78:45:94:85:68:25:5a:56:92:aa:1b:d9:da:65:
ad:f4:c7:5a:24:c8:a4:46:f3:25:3b:51:f6:15:3f:
c2:f4:c2:05:f7:6b:27:09:26:29:4e:46:16:f0:cd:
e1:6e:d4:c0:4c:c2:e6:87:6c:50:55:65:3e:8a:2a:
2e:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:11:BA:1F:A1:29:6C:E9:B5:05:5F:B0:FF:D9:4B:18:50:04:0E:33
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/gRG6H6EpbOm1BV-w_9lLGFAEDjM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
3b:e7:c5:65:48:dc:49:43:9d:ea:65:66:c8:e3:df:7f:9d:4b:
7a:4d:f4:f9:25:da:7c:31:e6:81:5a:b7:ec:bb:f1:cc:f8:ee:
9c:65:dd:cd:9e:b6:5e:55:46:eb:e0:67:71:d5:2e:6c:07:e3:
40:62:dd:25:56:8f:fd:98:d6:11:71:ab:ca:17:53:be:b2:74:
ea:a1:ef:da:eb:60:95:ad:e8:a3:89:14:3d:40:4e:f0:7a:98:
db:c1:3d:15:3a:21:f1:d1:98:1e:76:06:80:1c:08:d4:4f:22:
6d:da:04:15:21:96:9f:a8:6f:47:31:6d:ce:40:f2:01:c5:3f:
37:db:6e:6c:96:02:95:50:74:64:35:3b:f0:78:b0:4c:5a:c5:
12:78:bc:91:2a:57:cd:95:d3:05:09:ba:4f:e5:78:16:8e:ef:
a8:3c:fe:7f:a3:dc:2d:b6:53:24:99:21:9b:6f:f4:d1:07:7d:
b4:e1:7e:28:cc:ac:70:0c:02:8b:52:e9:1c:6c:e0:79:bf:cb:
94:91:ba:4c:42:e3:2a:15:05:95:dc:ed:d3:f8:08:34:bd:1a:
4b:5c:8b:c0:f7:62:bd:bf:e3:d3:d3:c7:08:84:d2:84:48:93:
46:bb:ef:a5:d3:85:1e:77:92:4a:9f:99:f2:d1:d7:a5:7c:f7:
45:2f:ab:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 00:42:01 2025 by rpki-client