Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/jGMMZTIRLiBzP08_HqZWXM2Ir1A.roa
File: jGMMZTIRLiBzP08_HqZWXM2Ir1A.roa (raw, json)
Hash identifier: 6Zcg1HdiC2rN92KZWjGRQZwtI1GHAvyBzC33JVBchh4=
Subject key identifier: 8C:63:0C:65:32:11:2E:20:73:3F:4F:3F:1E:A6:56:5C:CD:88:AF:50
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0186E371BD09AADFED51A2C5DA505C7E2DE9
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/jGMMZTIRLiBzP08_HqZWXM2Ir1A.roa
Signing time: Wed 15 Mar 2023 04:05:27 +0000
ROA not before: Wed 15 Mar 2023 04:05:27 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:e371:3f6b/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:e3:71:bd:09:aa:df:ed:51:a2:c5:da:50:5c:7e:2d:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Mar 15 04:05:27 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=8c630c6532112e20733f4f3f1ea6565ccd88af50
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:0f:e2:60:04:b4:56:d8:c5:03:b7:ff:2a:00:
82:6e:f6:c8:65:a5:9b:86:85:e9:73:22:40:99:5e:
fe:94:21:1e:7a:1f:a6:53:c6:90:fa:40:2f:54:52:
8c:10:60:f7:40:be:32:2f:a9:fb:23:1b:68:9c:18:
4d:62:2e:54:4d:35:e6:ad:84:c8:59:a9:50:9d:c8:
a7:a2:73:82:8f:51:eb:21:9e:c0:71:80:6f:c0:4c:
9e:5d:4c:80:93:a9:05:ae:c5:28:24:ca:ab:a3:e1:
c0:36:00:ef:9e:23:ec:70:f8:5d:78:44:53:67:c3:
22:d5:2b:49:01:99:f7:c3:c8:9c:b3:7e:b1:c3:a6:
b3:cc:e9:eb:1a:22:27:1e:62:6c:ac:a6:9e:01:06:
56:83:72:aa:82:81:51:50:f1:c0:b1:c2:4d:8e:5e:
ee:44:8f:20:62:72:b1:50:f4:91:81:0c:59:31:0d:
a4:b2:9e:ca:3f:31:05:4e:21:f3:af:bc:6e:96:5d:
6d:f1:c2:e4:22:de:c1:bf:ea:a4:70:b4:b2:13:22:
c3:41:d1:cf:09:91:61:8f:20:24:60:9e:0a:38:76:
99:d7:36:10:27:3e:cb:c3:8a:e6:8c:dc:05:db:e6:
fd:d2:db:e8:e6:f8:87:7e:ce:7d:a0:c3:bb:08:82:
ca:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:63:0C:65:32:11:2E:20:73:3F:4F:3F:1E:A6:56:5C:CD:88:AF:50
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/jGMMZTIRLiBzP08_HqZWXM2Ir1A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
73:31:ad:62:76:03:29:1d:90:3d:bb:b3:c9:fa:90:b5:f4:d1:
3b:1d:75:f5:ae:81:45:7e:c4:40:ad:a8:4d:b7:49:c4:e8:24:
92:1e:0c:96:53:57:62:b5:8f:60:17:b1:9a:b1:91:e5:df:54:
32:dc:69:b3:63:42:30:3c:df:8d:72:bc:13:ac:ae:c4:d8:a8:
42:c5:c1:d9:07:0c:cf:33:90:c0:70:f4:bb:59:b4:59:86:f7:
5a:8a:30:4a:f1:38:b6:dc:2a:90:43:62:21:5d:70:38:79:44:
e9:70:0e:9b:5a:c1:ab:01:85:8f:5f:a8:28:d5:18:4a:4f:1b:
b2:1d:74:90:db:1e:e6:01:e1:a4:96:83:19:3d:c6:34:e2:fe:
9f:33:e4:24:95:66:0d:f8:2a:50:a4:ab:2e:1a:ed:2c:06:48:
99:f7:a1:fc:11:41:e0:69:32:40:b8:98:97:cf:f9:48:1a:89:
3b:13:60:86:60:37:47:ef:46:1c:3a:57:f6:e4:60:60:1d:01:
c7:2d:2b:72:9e:0f:b2:02:3c:e6:c4:dd:af:78:2d:c0:19:40:
69:75:dd:46:4d:33:c2:b6:62:f1:da:f2:8d:79:04:b3:76:1c:
7d:47:3b:cb:a3:50:65:01:b3:2a:b5:89:73:97:43:36:cd:1e:
92:cd:58:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 18:43:46 2025 by rpki-client