Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/gRKM8Yf60SXtIMrUuDkRYNkJtOM.roa
File: gRKM8Yf60SXtIMrUuDkRYNkJtOM.roa (raw, json)
Hash identifier: 7uiS82uW/tvgu3K2toFr7gzZaxXj7OPMyyGfouRApmE=
Subject key identifier: 81:12:8C:F1:87:FA:D1:25:ED:20:CA:D4:B8:39:11:60:D9:09:B4:E3
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0189E3A8CFF5455862E96DEE018B79C64D42
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/gRKM8Yf60SXtIMrUuDkRYNkJtOM.roa
Signing time: Fri 11 Aug 2023 08:13:58 +0000
ROA not before: Fri 11 Aug 2023 08:13:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:188:7858:a003/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:189:a0e4:5c7d/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:e3:a8:cf:f5:45:58:62:e9:6d:ee:01:8b:79:c6:4d:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Aug 11 08:13:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=81128cf187fad125ed20cad4b8391160d909b4e3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:c4:ef:9f:39:b7:b1:83:9d:e7:ef:bd:13:10:
4f:5b:99:a2:a3:87:d4:91:38:6f:4e:3b:ab:00:8c:
d7:a4:ad:57:ec:6e:50:80:30:dc:47:d6:39:ab:50:
40:5b:9c:47:cc:b9:82:f1:3f:d7:c3:96:05:2c:7d:
31:76:2f:14:e3:3a:bf:7b:32:e2:89:6a:d7:c1:c6:
45:36:e7:9a:6f:a5:cb:9c:ec:5e:0c:74:19:50:74:
a6:2c:a4:c8:44:66:fe:72:57:02:be:4c:7d:0f:19:
ba:42:7a:3a:b6:cd:ee:f9:f5:73:d2:b5:be:70:d1:
0c:4d:19:78:ee:91:54:8a:d7:c9:04:88:2e:ef:78:
e7:5e:cb:d0:4c:ab:a9:02:cf:04:98:9f:2f:74:df:
dd:64:c3:87:f5:6d:94:2e:77:a3:87:6f:35:86:92:
71:7f:86:75:08:0b:c8:7d:11:28:63:aa:c5:da:ff:
3a:63:8f:53:50:c0:5d:f9:8e:89:f3:00:dd:11:8f:
c2:80:01:70:b7:64:52:36:20:ed:0f:6b:a5:13:a6:
15:41:d6:5a:93:7f:3d:83:5d:9b:03:56:8a:14:6b:
42:fd:4f:72:ba:ce:70:4f:2e:51:e4:d4:31:12:61:
f1:f5:5e:87:a5:b3:31:0d:c5:cf:d9:b7:ee:68:c7:
86:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:12:8C:F1:87:FA:D1:25:ED:20:CA:D4:B8:39:11:60:D9:09:B4:E3
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/gRKM8Yf60SXtIMrUuDkRYNkJtOM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
2d:7b:f8:ab:57:dc:45:13:4c:2f:d3:5f:33:09:f0:4c:b7:bc:
32:f4:9f:7b:8d:93:4d:73:e7:18:ef:e3:3e:8a:fa:26:38:09:
4d:52:43:d3:f3:95:30:de:4a:61:b3:78:f2:b3:70:ac:e4:ae:
d0:7b:86:b4:75:d0:d7:e6:26:ad:46:55:b9:3c:7d:a8:38:5b:
88:4e:f4:f1:93:f9:84:88:43:6b:c5:0a:4e:0d:1d:e8:f1:d8:
38:0e:c7:85:8b:9c:39:5b:14:17:c6:27:b8:f2:12:48:3e:2c:
94:0a:57:bb:42:9c:89:d6:07:a9:93:e7:cf:69:69:3f:be:cb:
84:12:48:f9:10:9a:98:6e:b1:d2:a6:22:7b:8b:df:c2:03:31:
57:2e:c5:cc:11:72:63:6b:c8:a3:21:d4:90:c3:a7:5b:53:61:
22:a9:64:d5:b2:8c:63:86:d9:19:66:e3:b5:e9:3a:e3:2e:49:
57:13:fa:6a:f0:8c:ab:a6:4d:70:5c:7b:c8:3c:8a:ca:9e:03:
b8:67:49:d8:56:35:63:84:17:84:74:bc:c5:9a:95:79:8c:85:
aa:c2:eb:40:31:8d:40:51:fb:58:0f:44:3b:cc:96:86:66:bd:
fe:08:07:43:60:85:ed:cf:36:d3:e2:a8:c9:77:44:7e:97:8c:
20:fd:3f:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 2 04:30:25 2025 by rpki-client