Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/N-GZBP6ZZ1DeLQeJoZUWxsQbBeI.roa
File: N-GZBP6ZZ1DeLQeJoZUWxsQbBeI.roa (raw, json)
Hash identifier: IOvWvuT+ufBL8545MT+18qeSfYMEpjI66czYOlTSBqk=
Subject key identifier: 37:E1:99:04:FE:99:67:50:DE:2D:07:89:A1:95:16:C6:C4:1B:05:E2
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 018833ECEB8EE2B641D2F92A19E5864E846C
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/N-GZBP6ZZ1DeLQeJoZUWxsQbBeI.roa
Signing time: Fri 19 May 2023 12:12:24 +0000
ROA not before: Fri 19 May 2023 12:12:24 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:187:4695:a68a/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64:ffff:0:187:fa9a:b088/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:187:b2b8:a7dd/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:33:ec:eb:8e:e2:b6:41:d2:f9:2a:19:e5:86:4e:84:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: May 19 12:12:24 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=37e19904fe996750de2d0789a19516c6c41b05e2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:b2:c6:ed:31:b3:40:c7:8b:41:ae:b4:5d:ee:
dc:6e:6c:5c:3e:d8:c6:40:d2:72:63:bf:88:3a:61:
55:88:5f:38:13:77:0a:bf:fb:18:b2:6d:7a:64:7e:
14:a9:65:b2:0e:44:3b:d4:09:c2:c9:db:a8:91:7f:
23:cc:bd:0e:e4:b1:18:a7:31:1d:01:fb:7d:ab:2a:
cc:19:53:e8:ac:24:05:e5:84:55:a5:18:56:c2:f6:
0a:73:d1:04:26:80:d7:c4:88:f2:58:40:24:10:c2:
ef:9b:c9:fe:3a:f5:81:cf:ae:7c:b1:48:30:b6:90:
89:bc:c6:33:6a:30:4c:ba:b7:ad:9e:b9:31:b5:ec:
d6:53:b6:06:34:89:14:bf:45:23:8f:76:20:41:71:
a9:30:af:7f:46:f1:cd:d6:a1:c0:9c:ac:3d:13:48:
45:11:cc:3a:ff:7a:a5:ed:b4:7f:22:9e:20:10:e1:
0f:55:32:20:2f:ba:37:c5:95:0b:6f:fe:71:9a:5b:
0a:55:0e:96:d5:db:8a:a8:6e:ef:8e:15:ed:57:78:
40:1a:78:15:6f:2e:1a:31:c3:de:57:8a:ca:2b:b3:
f4:0b:cf:8a:42:05:66:9e:d5:06:a7:5a:da:ec:e0:
6a:35:7e:13:36:a9:26:3a:3b:48:b4:7f:7c:97:48:
63:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:E1:99:04:FE:99:67:50:DE:2D:07:89:A1:95:16:C6:C4:1B:05:E2
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/N-GZBP6ZZ1DeLQeJoZUWxsQbBeI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
67:48:af:74:c1:c2:d8:4d:3e:53:0e:82:50:21:9a:1e:94:48:
2c:e3:2d:83:6c:c4:f7:b4:ce:a0:3b:95:b4:1a:b1:3f:55:a4:
a1:56:f1:16:94:1b:dc:4d:21:13:67:da:45:7f:32:c7:de:9e:
ef:72:92:c3:0a:e8:61:83:8a:c3:73:14:e0:a3:6e:0b:1f:0b:
36:26:b3:e7:7c:bd:8d:c1:fd:a3:32:09:8f:15:5c:5c:38:08:
37:89:84:8c:2c:14:b8:f6:d6:54:53:bd:d6:fb:3a:8f:66:f5:
a1:c3:f0:00:ca:49:21:67:61:aa:3c:cf:c4:7a:d0:fa:ce:9c:
2c:c8:64:50:0e:4c:00:4f:bf:0b:f7:75:e3:ef:7b:08:ac:4f:
82:06:7f:ab:e2:61:d0:74:c6:0f:5d:90:1e:14:6f:1b:78:b0:
40:b9:89:56:85:3f:46:58:92:c0:ee:06:81:5f:86:6e:ad:14:
13:74:04:33:ed:e1:da:3a:1d:db:4f:e9:02:a1:84:9e:f6:3c:
57:86:7c:c9:11:91:c2:ec:8c:1c:ff:84:e1:e0:b3:6a:e5:a1:
1f:85:fb:bc:ac:ac:cc:73:a6:5a:df:02:c5:b8:1c:e8:8e:6e:
ec:8e:43:95:9b:cf:e8:51:52:7c:58:21:71:1d:3e:88:0a:aa:
d4:25:6e:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 11 10:40:23 2025 by rpki-client