Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/GvfzdXAreU1Cr2BJaKn4LNd838c.roa
File: GvfzdXAreU1Cr2BJaKn4LNd838c.roa (raw, json)
Hash identifier: RKIgnLeyo4thQfa/Lc8S9KNsX5CCQT2ksuKc3DeU++I=
Subject key identifier: 1A:F7:F3:75:70:2B:79:4D:42:AF:60:49:68:A9:F8:2C:D7:7C:DF:C7
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 018721AC35D753D3AD4BB851F16C9DB1B4B7
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/GvfzdXAreU1Cr2BJaKn4LNd838c.roa
Signing time: Mon 27 Mar 2023 06:05:46 +0000
ROA not before: Mon 27 Mar 2023 06:05:46 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:187:21ab:a4fc/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:21:ac:35:d7:53:d3:ad:4b:b8:51:f1:6c:9d:b1:b4:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Mar 27 06:05:46 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=1af7f375702b794d42af604968a9f82cd77cdfc7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:07:40:83:c3:13:f7:44:63:9c:5a:ec:71:b9:
3b:c6:98:58:02:b5:22:e9:8d:e4:fa:a7:a7:5f:19:
94:bb:56:05:00:4c:5b:9b:b8:42:c8:18:dc:66:70:
6b:39:64:e2:da:52:bb:24:75:fa:ad:a1:ae:4f:93:
79:96:b6:6a:0d:fa:a5:f8:e0:02:ef:f7:81:dd:a5:
8e:6e:14:a9:aa:37:6b:c7:ef:1d:2b:92:62:f5:30:
5e:de:3b:46:d4:23:6d:15:15:3f:e4:d2:30:19:5b:
69:fa:99:0e:ed:96:65:0d:2b:92:e1:05:13:35:01:
f0:8e:76:92:5e:9e:a0:08:69:3b:b9:e3:06:e3:ad:
e5:95:f1:db:25:73:5a:0f:95:a5:b8:02:ef:0e:c0:
55:e7:ea:7a:bf:41:e7:3f:06:bc:2b:ab:7c:7b:24:
31:71:c2:ab:1b:c7:55:be:f4:9b:6f:79:f2:7b:f1:
73:34:42:2b:23:22:3f:ba:a7:bc:79:3b:d9:4f:40:
66:58:ee:68:5a:40:6b:3b:6b:cf:d3:39:3f:b7:a6:
a1:cc:c5:69:2a:b1:3a:c1:b7:eb:bd:1a:60:4b:ba:
c5:c9:f9:32:ab:ea:8f:00:42:76:92:6a:01:bb:1b:
84:b6:aa:b7:c9:de:27:21:ed:34:a3:6f:5e:08:2e:
ac:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:F7:F3:75:70:2B:79:4D:42:AF:60:49:68:A9:F8:2C:D7:7C:DF:C7
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/GvfzdXAreU1Cr2BJaKn4LNd838c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
ab:9e:ea:fd:cb:0f:38:b9:51:74:73:cb:a3:52:f6:a7:4d:f0:
67:6d:5d:91:d5:cf:60:b6:95:05:3f:57:af:32:ad:a4:ee:aa:
04:20:56:94:36:62:81:de:12:ae:5e:da:7f:4d:49:2f:0b:e3:
44:41:8d:07:85:d0:e1:67:18:fa:20:de:a8:fd:16:21:fc:7f:
28:f2:b9:18:60:39:d4:72:cf:fc:ed:83:34:6d:99:3b:f0:de:
dd:11:4f:3c:19:91:1c:1e:78:1f:95:9e:16:e3:f4:26:66:34:
7f:06:1a:c6:04:5f:3a:91:42:a2:d9:01:43:96:f2:2d:cc:e1:
84:09:79:f2:d8:6b:8f:9d:ee:5b:72:35:2c:13:30:a6:4a:63:
db:1b:44:ee:07:59:b2:86:1e:a5:a5:7b:7b:ea:e4:3b:34:24:
a8:10:e0:b8:b0:c6:b4:09:d7:98:1a:7b:f1:5a:ae:24:96:dc:
ee:11:59:10:61:40:90:32:f6:05:c8:cb:74:e3:c0:fa:ed:a3:
f8:f3:e9:96:1e:7a:06:d2:3e:59:7b:9b:e7:d4:d9:19:b6:94:
ac:a1:83:52:b4:a1:9d:d7:88:ed:54:a6:01:3b:f5:39:9a:52:
1b:7e:1c:dd:9d:2b:b9:65:71:c6:81:6d:1e:58:5e:af:c6:54:
d8:b0:0c:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 01:44:54 2025 by rpki-client