Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/g8PB8uC5Tj-GEg9hU3aWcMoZG5s.roa
File: g8PB8uC5Tj-GEg9hU3aWcMoZG5s.roa (raw, json)
Hash identifier: OG6YswgFa3NXqs5uM8/g6Gyia4kSkbZxU8AKkEyjD54=
Subject key identifier: 83:C3:C1:F2:E0:B9:4E:3F:86:12:0F:61:53:76:96:70:CA:19:1B:9B
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 01871BB348D97E04AFECBEBF79B224B0F250
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/g8PB8uC5Tj-GEg9hU3aWcMoZG5s.roa
Signing time: Sun 26 Mar 2023 02:15:46 +0000
ROA not before: Sun 26 Mar 2023 02:15:46 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:1b:b3:48:d9:7e:04:af:ec:be:bf:79:b2:24:b0:f2:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Mar 26 02:15:46 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=83c3c1f2e0b94e3f86120f6153769670ca191b9b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:a9:a1:31:da:d2:02:88:b6:bb:0d:9c:c8:44:
e8:89:fd:35:4f:4a:53:0f:05:92:85:7d:65:18:ab:
9c:e3:ea:84:f2:1b:3b:7c:a6:eb:13:c7:3a:1b:46:
1e:63:b5:23:5c:e8:4e:66:ba:5f:14:06:25:9f:1a:
64:6d:97:70:59:b4:ff:fe:a4:47:3d:29:a0:20:a8:
23:62:15:d1:24:d5:77:f0:79:ec:f9:0f:5f:1f:a4:
99:34:46:82:0b:93:56:34:11:0e:7b:90:6b:9e:c0:
97:ad:99:c1:01:3c:73:10:e2:e1:c6:d9:04:72:e4:
f2:fa:5b:39:a1:6d:54:31:6c:07:e4:78:fc:11:8b:
70:04:1e:a1:aa:3c:66:b6:f4:58:5e:81:6a:6d:bd:
18:9c:10:44:50:f6:bc:9f:67:4d:ef:66:ff:f5:f3:
27:69:e8:83:ac:06:d7:40:40:8c:7d:64:5b:ae:7f:
ac:9a:dd:eb:5d:6f:b5:9c:25:60:21:4e:94:27:ce:
cb:fc:bb:ef:44:40:fb:57:96:3c:8f:cf:51:64:cc:
4d:14:10:66:68:0d:76:18:32:c3:5c:55:bf:c5:cf:
fd:4d:71:0a:95:54:2c:e6:a9:87:f6:e8:9c:45:7f:
b4:80:96:34:1b:fc:d1:54:0b:62:1f:98:fc:e8:2b:
70:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:C3:C1:F2:E0:B9:4E:3F:86:12:0F:61:53:76:96:70:CA:19:1B:9B
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/g8PB8uC5Tj-GEg9hU3aWcMoZG5s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
87:d1:08:3e:09:67:2e:4d:54:2c:c4:3d:ac:ab:ba:0d:b9:9d:
ee:9f:ca:3a:20:7e:0b:ca:43:c8:c7:3f:27:93:0e:f9:2c:ed:
d0:71:7d:57:02:5a:ac:c9:b5:fe:04:16:13:bd:66:93:2b:29:
4f:b5:db:77:34:a5:d9:79:73:56:01:a3:3a:0d:50:01:e4:12:
c2:ba:cd:94:e6:7f:08:31:9f:f5:60:c3:45:ed:fc:14:af:98:
82:a4:71:1b:91:4e:c6:92:8a:95:b4:4d:26:da:e0:1d:af:f3:
f2:fe:e5:14:9b:d8:36:0e:86:81:b4:66:fb:dd:57:b2:13:e2:
17:d2:a7:d2:26:c0:33:86:50:4a:dc:c2:37:19:66:18:36:e4:
6a:43:31:69:6b:e1:1d:22:c8:0a:9d:b3:b6:25:95:d3:e5:de:
6e:b3:44:a7:d8:2f:22:52:9d:f5:b1:54:b3:42:fd:d7:2d:84:
0d:09:1f:a9:4e:24:80:3c:ad:36:bc:e9:3d:f9:da:81:dc:27:
dd:b1:62:f0:a5:9b:e4:c4:4c:8b:a3:ef:89:4f:ee:45:31:53:
71:64:a3:a5:56:6b:e5:b5:a1:65:60:b0:38:36:23:90:40:66:
05:ff:9b:8e:06:92:72:5c:a5:0d:dd:67:11:c8:5a:e7:be:a6:
be:c5:74:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 08:59:22 2025 by rpki-client