Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/gcJaM7XEqJ_7ccKDtJYAPrB5dbs.roa
File: gcJaM7XEqJ_7ccKDtJYAPrB5dbs.roa (raw, json)
Hash identifier: PenMT3GXg8/ufPhwM7CFvL7YLpmtFkXco6tstqJIZZo=
Subject key identifier: 81:C2:5A:33:B5:C4:A8:9F:FB:71:C2:83:B4:96:00:3E:B0:79:75:BB
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0186993B9BA286403B913E3B783170B8B05A
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/gcJaM7XEqJ_7ccKDtJYAPrB5dbs.roa
Signing time: Tue 28 Feb 2023 18:14:25 +0000
ROA not before: Tue 28 Feb 2023 18:14:25 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:99:3b:9b:a2:86:40:3b:91:3e:3b:78:31:70:b8:b0:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Feb 28 18:14:25 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=81c25a33b5c4a89ffb71c283b496003eb07975bb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:1f:7f:32:23:53:8c:52:0e:67:ab:a5:ec:0d:
65:9e:d6:57:f5:40:d4:84:5e:2f:4c:9c:6c:ff:5a:
83:a7:ec:2f:e0:1d:2e:6d:26:37:6e:ab:fc:27:c7:
4d:bb:eb:f6:60:c7:ed:c6:7e:03:5a:18:e7:99:45:
85:d7:f4:c4:1c:b6:48:2c:9c:1f:ff:5b:f3:6f:34:
b9:06:44:53:5f:d4:4a:36:99:5d:3a:00:04:14:18:
6a:a4:a7:f5:74:46:ad:1f:f1:d4:68:18:4c:4e:5a:
e8:a6:29:de:b2:e3:13:56:55:10:8f:df:d4:f5:53:
6a:b9:3c:82:c6:2a:b3:ad:9d:45:4d:51:dc:60:79:
d7:d1:7b:7f:4b:bf:d3:d9:88:a6:ed:6e:de:ec:1a:
86:eb:c8:22:d3:65:37:58:a1:11:88:50:60:f3:56:
4b:f3:82:78:29:43:dd:2e:46:ab:df:f0:df:38:f6:
96:9a:82:fc:e2:07:f5:6d:19:de:c3:eb:f0:d7:3a:
04:b6:b6:a2:ef:a0:e5:e2:b9:9e:fd:c0:ca:5a:93:
2a:1e:00:81:9b:62:9f:f5:16:e8:06:45:6d:0d:47:
5d:9a:7e:26:14:31:b0:1d:93:08:47:05:4b:9a:ea:
9c:39:7e:10:34:23:d5:fe:9b:5e:09:8f:08:f7:45:
3c:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:C2:5A:33:B5:C4:A8:9F:FB:71:C2:83:B4:96:00:3E:B0:79:75:BB
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/gcJaM7XEqJ_7ccKDtJYAPrB5dbs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
9f:04:b5:75:3e:2b:46:40:4c:7c:51:34:5f:7a:1c:08:dc:5c:
13:dc:06:6f:64:bb:0c:e1:40:9c:f8:27:02:36:0a:92:13:0c:
2e:95:f9:89:e0:99:61:18:e3:4a:50:6a:bb:69:cd:41:35:88:
89:b1:1c:2c:9f:b0:de:bc:f7:07:13:c4:17:49:c0:89:a8:07:
b6:e2:3e:ac:20:6c:75:88:3b:d6:da:25:f4:dc:34:a8:c2:55:
49:c6:ab:04:35:b6:e3:1b:87:78:76:90:fe:a8:a9:86:9a:19:
4b:01:e1:ee:50:52:72:9c:f1:bc:38:a2:fe:75:e6:51:5b:35:
70:6f:d4:26:2e:9e:b0:d0:fc:d3:f2:57:9f:1e:c5:2b:f3:53:
80:8e:ab:98:cd:e7:39:51:21:60:ba:e1:13:50:30:83:dd:46:
5c:e7:f8:d4:cc:2f:c9:7f:ef:87:b3:71:c2:b8:c0:83:09:56:
2e:ab:3d:65:65:ca:51:4b:41:0e:e5:ac:86:77:38:4f:fd:15:
a6:aa:6c:78:1e:c1:51:49:17:d9:3c:23:cf:2c:ae:96:a2:24:
dc:b1:2a:a2:cf:b3:80:86:17:cd:62:d6:53:ad:3a:4e:39:14:
2c:a2:04:d4:a2:fe:e1:01:e6:26:10:30:cc:3b:d4:16:04:33:
d2:d7:6e:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 09:31:15 2025 by rpki-client