Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/gs6lqVPsU-EjYXmiwIuxWcpA3bY.roa
File: gs6lqVPsU-EjYXmiwIuxWcpA3bY.roa (raw, json)
Hash identifier: 9LGuFrUicBhXPsfU02jTEo8M7ZAI3ezijF3Ih1qnq00=
Subject key identifier: 82:CE:A5:A9:53:EC:53:E1:23:61:79:A2:C0:8B:B1:59:CA:40:DD:B6
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 01874D0BD93FDB2280B69940A14BBEA8AF1C
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/gs6lqVPsU-EjYXmiwIuxWcpA3bY.roa
Signing time: Tue 04 Apr 2023 16:13:54 +0000
ROA not before: Tue 04 Apr 2023 16:13:54 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:187:4695:a68a/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:4d:0b:d9:3f:db:22:80:b6:99:40:a1:4b:be:a8:af:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Apr 4 16:13:54 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=82cea5a953ec53e1236179a2c08bb159ca40ddb6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:9d:78:89:f1:8e:16:8c:82:9c:20:a6:b7:7c:
6c:03:9b:df:7b:70:70:31:74:ec:19:9c:04:68:ee:
ce:28:2e:0b:58:43:3f:5d:3c:9c:81:0f:62:b3:9b:
93:64:dd:f4:4c:d7:a9:3c:2b:b5:ae:d2:38:d5:1e:
53:51:66:87:da:0c:2f:c3:cc:57:4e:4a:4b:7b:f1:
b2:13:57:f4:5e:55:7e:90:d5:fd:eb:5e:f2:fa:89:
80:30:97:98:78:37:7c:d3:66:83:f2:3c:fd:ef:fc:
63:e7:53:c5:c5:21:5a:ea:4d:9c:74:17:17:bd:3c:
3b:73:7b:85:ca:4e:42:70:06:d0:aa:89:08:73:3f:
15:9d:cf:56:cf:b0:4c:e4:02:77:c2:dc:25:99:7e:
9f:d0:f4:ce:8b:9b:f4:b5:2e:a7:e9:16:aa:16:2b:
de:4b:56:f5:36:dd:84:02:4a:27:91:3f:6b:00:ac:
84:9a:4f:90:86:a0:7f:24:fd:6f:2d:4a:01:89:00:
3f:3f:f1:d4:c8:34:1e:6d:e9:1c:99:4a:54:97:e3:
d5:da:0e:d3:d9:2c:f6:ae:6f:de:30:db:99:01:10:
f3:cf:25:c6:ae:6a:85:5e:46:4e:25:a5:a4:f0:70:
cd:27:bc:c2:2c:e3:4a:b7:3f:e7:c5:40:41:51:62:
70:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:CE:A5:A9:53:EC:53:E1:23:61:79:A2:C0:8B:B1:59:CA:40:DD:B6
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/gs6lqVPsU-EjYXmiwIuxWcpA3bY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
60:ae:e5:f7:3f:c7:37:0e:4b:5a:64:52:e4:8b:08:1e:88:57:
01:21:74:dc:a5:c6:80:cf:62:5b:b8:1e:23:70:a5:46:f9:eb:
2e:20:0e:e9:e7:21:ca:93:52:1a:43:27:9e:45:9d:ec:25:36:
35:fd:83:66:d2:18:4e:ba:8c:29:1b:b8:a6:97:02:00:46:29:
ac:3d:4f:c5:89:9a:31:ec:cd:90:8d:be:d0:d9:98:ea:1d:88:
23:5a:2a:c4:83:09:c7:90:df:01:d5:d7:bc:2a:ee:22:59:95:
37:eb:0b:11:c2:4d:d8:71:ac:c1:a4:24:f9:48:cb:31:f1:9d:
4b:75:98:e1:2a:a3:70:20:06:39:e4:31:8a:a5:80:6c:07:77:
9b:9f:42:8e:92:7f:f1:a6:d7:6d:9f:19:e5:3c:16:71:43:09:
d3:a8:ee:ea:f3:d6:59:94:36:36:cd:de:20:28:39:66:91:f5:
37:11:d9:89:fc:73:19:e9:9d:5b:df:86:a7:f5:55:8e:5b:8b:
62:03:57:81:b0:b0:20:c7:8d:77:2e:37:d9:41:00:53:69:9a:
e0:2b:41:f5:b6:25:90:ee:38:bd:20:ee:c3:98:32:74:69:d7:
77:a1:7b:79:02:df:d4:a0:3a:7a:f0:e0:da:25:1e:15:7f:a4:
b0:d7:2a:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 4 06:50:33 2025 by rpki-client