Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/Gjq4Bwb432iPupiVqAlZZzlU83A.roa
File: Gjq4Bwb432iPupiVqAlZZzlU83A.roa (raw, json)
Hash identifier: VLcpc9bKUvqfEzIgZavDPiI6Fd8ebtp/5T4oj/yw2Ew=
Subject key identifier: 1A:3A:B8:07:06:F8:DF:68:8F:BA:98:95:A8:09:59:67:39:54:F3:70
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 01888B7652C90011FC06D205283550DB8AD5
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/Gjq4Bwb432iPupiVqAlZZzlU83A.roa
Signing time: Mon 05 Jun 2023 12:09:27 +0000
ROA not before: Mon 05 Jun 2023 12:09:27 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:188:5fe2:b396/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:187:4695:a68a/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:188:7858:a003/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64:ffff:0:187:fa9a:b088/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:187:b2b8:a7dd/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:8b:76:52:c9:00:11:fc:06:d2:05:28:35:50:db:8a:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Jun 5 12:09:27 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=1a3ab80706f8df688fba9895a80959673954f370
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:22:df:f8:8b:3b:72:55:d8:25:fe:1d:d3:e0:
86:5c:3c:fb:8a:a9:b4:2f:f1:2f:b3:4b:69:49:7c:
cd:40:34:1d:9e:99:bb:c6:a4:76:ba:a8:c7:16:8b:
ad:9a:45:0f:80:e7:e1:38:b9:30:50:84:74:1a:82:
81:24:53:21:9e:1a:63:12:58:da:cc:0a:6c:a0:09:
6a:4c:83:a5:a5:fe:e1:1c:45:ff:3c:90:a8:a1:38:
1a:1b:68:4f:c9:cf:b2:f2:d5:ef:2b:7b:c1:a0:41:
58:63:48:ae:fd:7c:26:2f:a0:37:ca:30:cc:2c:09:
6e:82:af:fa:35:2e:b8:4a:c2:71:b0:bc:d1:bf:4e:
fb:21:d0:8d:8d:3c:d6:9c:c6:31:47:a3:14:30:8a:
bb:81:0e:a1:93:2a:52:8e:f5:1f:56:20:0d:33:03:
aa:2a:cb:94:13:ac:17:ad:d7:90:b8:22:ce:f0:df:
7e:b5:48:4c:a8:f2:81:ce:76:9e:2b:a2:26:88:57:
fd:55:26:46:9f:4e:38:13:a5:71:c1:16:12:52:26:
c4:19:20:bd:d9:14:db:25:c5:ff:60:86:e5:36:97:
b0:00:51:93:9e:7d:90:c1:9b:ab:1d:47:f9:56:41:
2e:d4:36:a9:b6:6c:eb:a2:2b:1a:ce:56:92:ff:02:
3f:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:3A:B8:07:06:F8:DF:68:8F:BA:98:95:A8:09:59:67:39:54:F3:70
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/Gjq4Bwb432iPupiVqAlZZzlU83A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
a0:02:0a:ab:6d:d3:20:cd:82:b5:5c:d9:be:de:6c:a9:ac:d9:
19:50:aa:38:40:4b:48:23:13:2c:52:90:64:46:8a:09:a2:61:
17:54:cc:62:74:1d:1b:4e:22:c2:c6:df:b8:68:57:f8:b0:e7:
63:82:4b:bf:73:8e:00:75:7e:ad:45:6b:ff:3b:15:38:45:a6:
be:1a:a0:f1:86:26:ec:db:07:f7:64:56:0c:7d:9f:68:a1:d4:
ca:0c:0a:37:77:46:01:a6:b1:b0:d2:18:e3:d5:37:6f:ec:ba:
5c:e6:a6:79:95:a4:5b:18:37:e5:35:08:31:05:96:53:41:4e:
33:a7:8b:95:89:2e:87:2a:0d:28:62:16:bb:12:18:54:60:45:
2c:19:81:55:dd:ac:a7:f0:eb:e5:d6:cd:4b:28:c0:61:0d:47:
00:ec:20:dd:6b:68:22:37:21:c6:d0:a3:04:ca:a1:2e:6e:82:
76:f7:bc:67:ca:9d:09:24:8f:ae:4f:67:d0:24:d7:cc:c0:96:
f4:ef:77:91:ec:e4:b3:d6:8a:e4:1f:f8:f2:05:87:72:f3:96:
13:af:98:51:02:bd:b0:f9:6c:38:a7:a8:ae:24:90:27:20:fd:
6e:61:96:f4:eb:db:dc:78:fd:97:d0:9f:65:f9:2a:30:a8:50:
9a:1b:e9:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 12 07:06:49 2025 by rpki-client