Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/g0ip7MOygmzKN7dkSB_YTqxNM0g.roa
File: g0ip7MOygmzKN7dkSB_YTqxNM0g.roa (raw, json)
Hash identifier: qS6KmzKofjljllMGrrjhUfgVcZ/BLUBVDCdKeDpRLRU=
Subject key identifier: 83:48:A9:EC:C3:B2:82:6C:CA:37:B7:64:48:1F:D8:4E:AC:4D:33:48
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0188D62403D90FD481E7FD9B8FF7CC01BD63
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/g0ip7MOygmzKN7dkSB_YTqxNM0g.roa
Signing time: Tue 20 Jun 2023 00:11:04 +0000
ROA not before: Tue 20 Jun 2023 00:11:04 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:188:5fe2:b396/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:187:4695:a68a/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:188:7858:a003/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64:ffff:0:187:fa9a:b088/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:187:b2b8:a7dd/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:d6:24:03:d9:0f:d4:81:e7:fd:9b:8f:f7:cc:01:bd:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Jun 20 00:11:04 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=8348a9ecc3b2826cca37b764481fd84eac4d3348
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:f0:81:43:d0:44:c9:52:d7:ad:33:5f:24:43:
d8:0f:be:3b:15:71:43:ce:75:a8:ce:f5:5d:9f:60:
c6:6e:67:e0:18:65:e9:28:76:9a:ae:7e:cb:cc:63:
51:59:02:d0:90:fa:81:49:da:8f:11:55:d4:cc:16:
66:14:94:30:81:28:1c:22:4d:dd:7f:5b:59:8b:76:
eb:b9:88:6d:03:f2:04:01:3d:5f:52:49:a5:5e:32:
2c:dc:66:88:61:95:19:97:6d:36:4b:17:6a:aa:df:
f5:8e:41:48:36:28:27:27:67:c7:c5:90:46:43:6e:
83:a1:b4:2b:f0:19:fa:3c:60:d5:ac:15:da:fb:e6:
56:fe:31:27:67:b5:f3:bc:da:1b:31:5e:63:0c:c5:
6e:89:ff:29:ed:9c:cd:4a:7f:73:c8:ea:05:bc:bd:
74:14:98:99:a6:44:5e:1b:d5:55:16:de:f4:1b:36:
dc:bd:73:15:8e:fc:be:b5:30:04:3b:4b:20:85:84:
60:a8:90:39:c2:e7:c2:e2:98:3a:f5:d0:e4:7e:14:
30:e7:3a:d8:8f:94:c5:6b:aa:d5:b0:46:9c:92:34:
3a:28:e8:53:d6:89:24:ea:a1:b1:ef:b6:4e:5d:6d:
8c:fe:f8:06:37:4a:9c:02:be:a7:a8:db:e4:58:b2:
de:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:48:A9:EC:C3:B2:82:6C:CA:37:B7:64:48:1F:D8:4E:AC:4D:33:48
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/g0ip7MOygmzKN7dkSB_YTqxNM0g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
6f:cd:ca:ee:74:09:38:1c:e5:07:cd:7a:76:94:b9:cb:c0:97:
fb:61:2f:ca:2b:87:f7:e5:c0:1e:c7:00:18:25:6c:82:3a:4b:
18:7a:4a:e2:bd:de:79:ca:31:5d:2c:21:13:31:ad:7a:2f:09:
af:6e:ec:e0:ca:cb:3b:7e:2d:2f:c2:d8:2f:96:e8:02:f2:fa:
3f:bd:0a:bd:01:3f:e3:0f:6e:16:12:81:c6:32:2b:65:52:ce:
15:c1:37:e5:55:1a:26:99:fa:bc:ae:2b:f5:c5:17:3f:19:12:
58:aa:8c:4d:43:f5:90:e1:ba:94:ba:76:57:18:b7:de:c6:0e:
07:d9:8b:6a:5e:62:c7:c8:99:fc:9c:ca:da:08:d7:1e:ca:6c:
7d:a6:45:74:e1:6d:eb:d9:ab:87:3e:4a:ec:e3:e4:22:b4:60:
52:f7:f4:96:14:52:ff:61:e3:e4:06:fe:8c:42:f9:22:1b:0e:
58:35:59:e8:df:32:9b:8e:83:71:4e:25:a6:f0:41:e3:bb:76:
67:79:84:c6:8b:cd:88:b7:a0:18:2f:73:8d:e1:48:b7:48:a8:
98:1d:7b:1d:25:bd:25:80:7e:57:c7:56:a2:2c:6f:c8:79:e5:
9b:4a:0f:10:72:6f:2f:b8:4c:bf:8f:a3:59:6c:d3:c6:be:31:
1e:d1:d4:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 00:10:36 2025 by rpki-client