Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/G1zM81afeQnjMt_7Q-YZj1u6Bzw.roa
File: G1zM81afeQnjMt_7Q-YZj1u6Bzw.roa (raw, json)
Hash identifier: kohv3gO3+KM2+5DVGveZkSuPZF1qUcwBy4XIymDzyag=
Subject key identifier: 1B:5C:CC:F3:56:9F:79:09:E3:32:DF:FB:43:E6:19:8F:5B:BA:07:3C
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 01872CA5B1B94A0A7BB6ECEAC4E5C4422848
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/G1zM81afeQnjMt_7Q-YZj1u6Bzw.roa
Signing time: Wed 29 Mar 2023 09:14:29 +0000
ROA not before: Wed 29 Mar 2023 09:14:29 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:2c:a5:b1:b9:4a:0a:7b:b6:ec:ea:c4:e5:c4:42:28:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Mar 29 09:14:29 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=1b5cccf3569f7909e332dffb43e6198f5bba073c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:fb:22:d2:f3:3c:76:a6:b7:35:d8:ac:21:ae:
0c:ee:f4:7d:3c:f1:dd:e2:db:de:25:38:6c:af:af:
f3:5f:38:40:6c:b3:8a:30:ca:3a:ff:5d:db:3c:f8:
f8:c9:5c:e9:8f:bc:a0:ca:51:f2:27:58:dc:87:1b:
15:c6:08:a6:d8:96:30:c2:f2:b3:c3:72:f7:f5:73:
ec:ad:6c:e4:c1:45:e3:84:6b:35:6c:72:df:95:bd:
3a:73:e3:95:35:29:98:c6:f4:4e:da:15:7a:0b:05:
d4:7a:92:84:a7:14:75:79:51:20:0e:db:ff:4d:29:
dc:46:d5:28:5c:0c:38:c5:87:75:0b:b0:76:c5:79:
09:dd:ff:c5:00:5f:e9:ee:7e:6a:40:29:21:1b:4c:
b0:12:72:d4:8c:bf:c1:89:2e:39:ce:5b:9b:72:d8:
bb:88:b1:49:dc:01:42:0c:fc:55:a1:f3:bd:3e:73:
2a:5b:b7:df:75:74:24:11:07:3e:4a:e3:47:e2:9c:
18:6c:21:b5:49:0b:db:d4:5d:41:a1:e1:49:f7:d9:
67:80:79:6f:b7:96:e5:51:dc:33:69:f1:a6:45:b4:
1d:c8:5f:b3:c1:86:46:1c:5d:8c:80:85:e9:31:e4:
78:f5:17:11:b4:1f:43:ae:fe:eb:b6:42:3c:2e:fc:
41:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:5C:CC:F3:56:9F:79:09:E3:32:DF:FB:43:E6:19:8F:5B:BA:07:3C
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/G1zM81afeQnjMt_7Q-YZj1u6Bzw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
45:4f:f1:67:9c:ae:3f:12:f7:80:35:db:bd:65:cb:2c:4e:ab:
25:af:42:42:99:88:53:84:41:22:a1:38:df:21:0c:89:30:b9:
16:21:40:5a:a2:fe:d7:b8:b3:53:ae:35:65:47:32:e9:ac:56:
3e:85:b0:d8:d4:f3:1e:2e:a8:bc:f4:39:dc:30:b0:89:d1:c4:
2f:8e:a8:cd:df:b1:bf:22:cf:fe:bb:10:91:68:cd:cc:ee:a3:
f8:02:8f:3b:af:d4:df:37:b3:62:8e:ad:49:73:61:fa:06:d4:
79:cf:ed:24:10:fa:11:52:1a:87:3c:3c:42:66:4b:21:46:01:
5c:de:a9:d8:43:ae:42:9a:42:6e:1c:c7:cd:69:c6:1b:0e:51:
66:79:a2:78:8c:cc:62:c8:dd:96:a3:90:bc:32:94:86:61:09:
b8:80:b9:d4:cd:6e:b4:af:26:8a:89:6d:3e:0a:44:16:60:21:
f0:cb:8b:fd:f3:63:99:05:9d:59:1c:c7:b4:98:88:bf:8b:5f:
b1:a0:48:dd:e1:bc:75:5a:36:1e:71:01:3e:2c:cd:ff:0e:4c:
5d:7c:e2:0e:5c:35:35:f2:e2:b5:d1:1d:de:8e:c5:11:50:73:
85:35:13:a2:88:8e:50:a1:b6:fb:f8:48:49:62:de:b4:bb:90:
c2:64:52:75
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYcspbG5Sgp7tuzqxOXEQihIMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcyMDQ3YmUxNWIyNzU5MDJkY2Y2MTdkYzNkMGUxNmRjMWYz
MDgwMjIwHhcNMjMwMzI5MDkxNDI5WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxYjVjY2NmMzU2OWY3OTA5ZTMzMmRmZmI0M2U2MTk4ZjViYmEwNzNjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAovsi0vM8dqa3NdisIa4M7vR9PPHd
4tveJThsr6/zXzhAbLOKMMo6/13bPPj4yVzpj7ygylHyJ1jchxsVxgim2JYwwvKz
w3L39XPsrWzkwUXjhGs1bHLflb06c+OVNSmYxvRO2hV6CwXUepKEpxR1eVEgDtv/
TSncRtUoXAw4xYd1C7B2xXkJ3f/FAF/p7n5qQCkhG0ywEnLUjL/BiS45zlubcti7
iLFJ3AFCDPxVofO9PnMqW7ffdXQkEQc+SuNH4pwYbCG1SQvb1F1BoeFJ99lngHlv
t5blUdwzafGmRbQdyF+zwYZGHF2MgIXpMeR49RcRtB9Drv7rtkI8LvxB7wIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFBtczPNWn3kJ4zLf+0PmGY9bugc8MB8GA1UdIwQY
MBaAFHIEe+FbJ1kC3PYX3D0OFtwfMIAiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMt
MWFiZTNhYzEwYWE2LzEvRzF6TTgxYWZlUW5qTXRfN1EtWVpqMXU2Qnp3LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMtMWFiZTNhYzEwYWE2
LzEvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBAEVP8Wecrj8S94A1271l
yyxOqyWvQkKZiFOEQSKhON8hDIkwuRYhQFqi/te4s1OuNWVHMumsVj6FsNjU8x4u
qLz0OdwwsInRxC+OqM3fsb8iz/67EJFozczuo/gCjzuv1N83s2KOrUlzYfoG1HnP
7SQQ+hFSGoc8PEJmSyFGAVzeqdhDrkKaQm4cx81pxhsOUWZ5oniMzGLI3ZajkLwy
lIZhCbiAudTNbrSvJoqJbT4KRBZgIfDLi/3zY5kFnVkcx7SYiL+LX7GgSN3hvHVa
Nh5xAT4szf8OTF184g5cNTXy4rXRHd6OxRFQc4U1E6KIjlChtvv4SEli3rS7kMJk
UnU=
-----END CERTIFICATE-----
Generated at Thu Jun 12 05:13:32 2025 by rpki-client