Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/G1t_ZJI82yJnH3xhM0TKrLvtvzE.roa
File: G1t_ZJI82yJnH3xhM0TKrLvtvzE.roa (raw, json)
Hash identifier: ZXRWfTUDDNLam1dfgg5rTr7LXZoIZblalf9sGzRbLgI=
Subject key identifier: 1B:5B:7F:64:92:3C:DB:22:67:1F:7C:61:33:44:CA:AC:BB:ED:BF:31
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0186989E74E7C6FB405A45D767595C2CCA7B
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/G1t_ZJI82yJnH3xhM0TKrLvtvzE.roa
Signing time: Tue 28 Feb 2023 15:22:46 +0000
ROA not before: Tue 28 Feb 2023 15:22:46 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:98:9e:74:e7:c6:fb:40:5a:45:d7:67:59:5c:2c:ca:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Feb 28 15:22:46 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=1b5b7f64923cdb22671f7c613344caacbbedbf31
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:23:72:4a:24:e2:ef:52:e5:e0:d9:f0:d8:57:
9b:33:ee:0f:7d:05:1c:e5:a2:b2:6f:76:dc:e2:e9:
6e:eb:7f:e3:72:17:6a:de:1f:1a:4d:85:4d:91:ad:
84:54:53:4a:09:68:5c:09:19:b0:2f:fc:0f:28:a2:
ad:be:15:39:94:dc:5e:2c:19:85:ac:5e:9f:d4:b4:
2c:ec:4a:6b:c5:cb:fc:87:7e:92:2e:70:fa:b9:e6:
30:93:09:7c:61:66:7e:21:1d:69:3a:ae:a8:7d:40:
1e:91:e6:55:1a:1d:0f:57:15:de:e9:aa:bf:b8:6b:
3b:c6:ca:59:18:20:a2:1b:ec:84:54:50:6b:aa:72:
75:3a:ee:3f:e0:d9:7e:31:af:90:1c:f9:2d:a3:e7:
5e:d8:f0:e8:69:8c:3c:d2:43:c1:96:12:21:c3:fe:
5f:66:c9:36:4f:78:c4:2e:27:25:2d:3e:9b:12:a2:
41:3c:d1:fb:62:00:64:95:96:91:a7:30:50:26:aa:
12:80:6f:b4:90:db:37:7d:5a:e9:70:e8:9e:5e:92:
7a:90:c3:6d:89:4d:49:cc:79:31:ac:64:03:d7:5c:
60:4b:ee:fc:61:47:73:5c:cb:f2:29:a1:a3:7f:e5:
f0:68:d9:fa:95:8e:43:2a:ac:86:dc:1a:1d:60:77:
fc:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:5B:7F:64:92:3C:DB:22:67:1F:7C:61:33:44:CA:AC:BB:ED:BF:31
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/G1t_ZJI82yJnH3xhM0TKrLvtvzE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
69:6e:32:73:33:b8:2a:45:ff:16:d7:fd:f6:8f:06:96:b8:cc:
7b:2b:b8:c4:52:e6:12:d7:d2:7a:22:37:1b:fe:a3:34:6d:67:
d1:61:ef:2e:16:b9:78:af:df:34:24:95:78:cc:42:db:44:14:
9e:d7:b7:0d:fb:60:d3:06:70:94:a2:77:63:6c:38:32:77:bc:
65:c1:01:2e:a0:aa:5b:68:6b:47:6e:55:2f:b4:6f:de:8d:d0:
ed:9d:42:dc:1a:6b:8b:3b:fe:6f:49:45:f2:dc:58:23:b1:c3:
14:35:0d:38:7f:dc:1b:d2:bc:d2:fa:68:ff:a3:0b:d2:ff:13:
ab:39:d9:36:19:3d:96:58:ea:c6:e1:ae:b7:b6:1e:dd:2d:6d:
1d:7f:25:f9:39:57:6d:13:c2:fb:83:18:4a:58:d5:cc:03:1b:
9d:d1:82:da:47:6b:9a:fd:a0:87:1a:0c:55:0f:02:90:5e:44:
20:c3:17:4e:39:e3:6d:74:09:ed:5d:4f:cb:31:9c:37:91:c7:
2e:bd:6b:13:39:7e:ac:b1:f6:b4:24:43:05:b0:6f:67:51:32:
ac:9c:c8:be:f7:78:86:87:18:6e:13:ca:a1:47:bd:98:fd:4c:
50:3d:3d:ce:92:de:ca:c6:2f:4a:9a:7e:44:c6:dd:2d:78:42:
b6:67:5e:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 10 02:24:28 2025 by rpki-client