Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/gJXyxlOj7tVbHL72SviWvYd9wYQ.roa
File: gJXyxlOj7tVbHL72SviWvYd9wYQ.roa (raw, json)
Hash identifier: G6QA6Te0QdYEBwrETBz/i6F+R95amTTkvS01P+Kf6hM=
Subject key identifier: 80:95:F2:C6:53:A3:EE:D5:5B:1C:BE:F6:4A:F8:96:BD:87:7D:C1:84
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 67C481F2
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/gJXyxlOj7tVbHL72SviWvYd9wYQ.roa
Signing time: Fri 04 Feb 2022 09:04:41 +0000
ROA not before: Fri 04 Feb 2022 09:04:41 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:17e:a0dd:2f5b/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:17e:c3fa:8308/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1740931570 (0x67c481f2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Feb 4 09:04:41 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=8095f2c653a3eed55b1cbef64af896bd877dc184
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:8e:d1:8c:db:48:76:e9:29:d0:11:de:35:e2:
44:5d:6a:3e:19:36:f5:f4:71:e8:10:45:f2:a9:83:
d7:2a:52:a7:7c:b9:96:6f:68:1f:ba:b8:60:1e:2c:
2b:1c:de:49:eb:65:23:77:ff:e1:75:06:12:59:bd:
46:fa:15:82:bd:15:8f:dc:55:fa:c6:50:a4:0d:54:
ef:21:c0:a4:a6:15:9d:9f:98:00:18:f9:ec:68:33:
70:eb:dc:1c:bb:e1:99:c4:ec:36:49:6b:87:69:6f:
07:d9:76:b5:71:17:d9:a3:5f:26:7f:0e:17:6e:cf:
bc:71:45:19:be:cc:0b:11:71:97:64:48:d5:db:8f:
92:61:3b:2f:89:02:48:18:29:28:1c:5e:09:5f:d7:
24:46:d7:fd:de:04:bd:5b:fc:91:7e:ff:89:58:4f:
b0:77:c9:1f:f7:70:19:8b:09:02:a2:71:68:5d:f7:
30:67:6b:a1:fa:96:86:20:ab:b7:2a:e3:0f:70:5d:
39:95:b3:93:21:c6:d0:30:e9:82:27:da:52:9c:33:
5e:c3:5b:89:fc:70:49:c3:de:5c:d4:82:e1:5c:09:
be:c7:60:e2:e8:23:ee:6e:16:f6:df:cd:c9:1a:71:
c5:33:4d:87:45:f3:34:7c:76:1c:3d:ec:25:a7:f5:
fe:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:95:F2:C6:53:A3:EE:D5:5B:1C:BE:F6:4A:F8:96:BD:87:7D:C1:84
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/gJXyxlOj7tVbHL72SviWvYd9wYQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
ab:c8:df:6c:84:e1:20:f9:d5:ad:96:0a:b5:30:66:f1:fb:0d:
27:ab:eb:5b:08:46:75:42:e8:8c:50:fc:d1:5f:80:82:b1:0c:
3c:82:d6:65:60:ca:3a:71:ab:58:4b:39:98:f8:90:72:34:85:
d7:41:95:39:2b:1b:48:32:45:92:38:d5:42:c7:7f:14:d6:72:
c1:15:c0:03:6c:f8:d6:f2:5a:85:99:94:12:46:ba:1b:e0:d4:
d3:21:2a:90:e3:af:f0:15:3b:9d:bd:8c:af:eb:ec:f6:1d:63:
d9:b3:c0:02:67:27:52:51:ac:14:20:05:cb:97:c7:bb:f2:e6:
a3:af:44:7a:e7:aa:f4:5d:94:4e:90:7a:f1:73:92:47:0b:52:
6e:bc:c3:27:3f:0e:b5:7f:d4:a3:ee:70:ff:7b:f0:8a:6d:0f:
f5:4e:93:d4:45:15:ad:eb:13:e4:36:8f:cd:82:76:45:68:3d:
ed:ff:1b:2f:84:06:4c:4f:92:21:05:0e:2f:47:a2:fb:52:30:
e8:55:3a:9b:89:60:c2:76:24:0e:4d:18:8e:0d:6f:85:ed:2c:
83:91:50:58:6d:10:e2:d3:81:02:ef:a4:b5:52:f9:51:c7:d5:
23:43:4c:7c:35:26:10:77:c2:68:fc:30:7e:0e:a4:ff:10:4f:
e1:cd:bf:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 11 04:00:26 2025 by rpki-client