Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/gsGGaBO-71W2mofPdYs0tgJLI9U.roa
File: gsGGaBO-71W2mofPdYs0tgJLI9U.roa (raw, json)
Hash identifier: 3nen30cqQY+YnFt/bhmDg+bxK/Bcj9ql9aS0ZGjwZUU=
Subject key identifier: 82:C1:86:68:13:BE:EF:55:B6:9A:87:CF:75:8B:34:B6:02:4B:23:D5
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 01893F4B1252FA2D139B0FA56030E41E4163
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/gsGGaBO-71W2mofPdYs0tgJLI9U.roa
Signing time: Mon 10 Jul 2023 10:13:51 +0000
ROA not before: Mon 10 Jul 2023 10:13:51 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:188:5fe2:b396/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:187:4695:a68a/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:188:7858:a003/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64:ffff:0:187:fa9a:b088/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:187:b2b8:a7dd/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:3f:4b:12:52:fa:2d:13:9b:0f:a5:60:30:e4:1e:41:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Jul 10 10:13:51 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=82c1866813beef55b69a87cf758b34b6024b23d5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:23:e9:c1:5f:85:51:06:17:ac:0c:68:cb:ec:
08:30:af:2b:77:ca:db:1c:27:4d:6b:5c:79:61:c0:
22:3b:d5:28:44:67:97:06:2e:ff:8a:2a:02:ae:37:
dc:1f:53:53:18:4c:03:41:4c:88:c0:87:30:31:ae:
43:98:60:95:8c:fc:09:1d:ff:00:4f:6e:25:a5:a4:
d6:98:be:2c:aa:05:eb:55:cc:17:67:8f:78:cd:6c:
e2:9c:6e:10:1b:c6:31:af:5a:b1:12:34:68:1f:58:
ea:23:45:92:cb:05:a3:49:44:de:2b:5b:73:c8:6a:
6b:1b:f5:83:93:98:ef:3a:55:a2:0d:b3:c7:b8:e8:
1b:0f:43:cc:49:db:e5:5b:2a:a8:be:a1:ea:df:04:
13:7b:56:ec:d8:22:28:6f:71:b2:a6:bb:6a:cf:ad:
02:5e:aa:1e:85:36:75:63:66:80:f1:be:f9:89:0b:
28:5b:4f:ea:95:50:49:22:1b:e5:c4:d9:d8:5d:41:
13:65:0f:15:53:f3:49:0c:99:0b:72:90:de:38:10:
34:c5:36:26:2e:17:b7:d9:9d:fa:51:f9:20:fb:08:
74:9f:7d:a3:17:a5:fc:58:25:c7:85:d1:58:fe:58:
0a:35:55:d0:25:59:a3:a3:fb:32:01:10:4b:da:70:
5c:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:C1:86:68:13:BE:EF:55:B6:9A:87:CF:75:8B:34:B6:02:4B:23:D5
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/gsGGaBO-71W2mofPdYs0tgJLI9U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
91:0b:53:1f:94:da:5d:73:d6:c9:6c:0f:05:43:a3:1a:5f:d0:
d4:2d:28:db:34:d7:69:a7:72:a1:05:80:11:45:61:3d:c6:40:
f0:c7:19:e2:36:bd:df:f3:bd:85:ca:f5:c4:fb:d7:5a:99:ae:
cc:a1:e4:8b:28:ab:b4:99:16:30:9a:d6:c5:82:db:40:26:3a:
4d:1c:2d:3e:fd:ef:f3:c4:62:04:91:32:bc:5c:f2:cc:94:c8:
83:c8:bc:72:0b:f5:60:f3:cf:d2:a3:16:90:8a:27:7e:7f:dc:
d1:0b:04:22:d4:f6:9a:d6:ec:dd:26:e7:4f:52:56:ed:7e:15:
60:5a:5c:85:58:f2:48:96:eb:52:0e:45:0c:72:30:22:24:11:
d5:91:34:84:c6:4e:99:e7:32:d7:84:78:ec:49:59:b8:88:cb:
e1:6e:35:e7:2a:de:db:54:bc:6f:9d:28:99:85:26:a9:4f:84:
e6:b6:3a:2e:7b:7b:6a:28:1c:21:5f:c9:64:cb:11:dc:83:bc:
45:7d:44:c5:80:bb:2d:fd:5a:96:e1:86:65:27:2d:11:44:b9:
97:24:f0:e1:3f:ff:de:6b:26:dd:82:95:a1:26:33:c6:0b:53:
df:d5:78:08:95:a8:83:27:ef:c6:73:0e:22:67:9c:f1:21:05:
d5:8e:81:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 20:20:12 2025 by rpki-client