Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/gPJ4h0uwxniTa4uixKnoZJnkFy8.roa
File: gPJ4h0uwxniTa4uixKnoZJnkFy8.roa (raw, json)
Hash identifier: TZDWBJ1UnqPQdqc3BES0/p3Fh2qeQvbfg1h7OdRi3Nk=
Subject key identifier: 80:F2:78:87:4B:B0:C6:78:93:6B:8B:A2:C4:A9:E8:64:99:E4:17:2F
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 01893948FA2089733BAB7DEFAEFCAB13365E
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/gPJ4h0uwxniTa4uixKnoZJnkFy8.roa
Signing time: Sun 09 Jul 2023 06:13:51 +0000
ROA not before: Sun 09 Jul 2023 06:13:51 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:188:5fe2:b396/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:187:4695:a68a/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:188:7858:a003/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64:ffff:0:187:fa9a:b088/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:187:b2b8:a7dd/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:39:48:fa:20:89:73:3b:ab:7d:ef:ae:fc:ab:13:36:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Jul 9 06:13:51 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=80f278874bb0c678936b8ba2c4a9e86499e4172f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:b9:7c:09:a9:f5:40:6c:72:e4:22:6f:5a:f8:
75:db:c1:ba:fd:f3:b5:f9:02:ec:40:79:56:79:cc:
27:ab:99:a4:00:14:d8:e0:08:12:90:95:10:af:2e:
e5:05:e5:34:80:fd:dd:e8:a3:16:cf:f6:b0:c1:18:
bf:8a:c6:67:ba:a9:10:29:81:dd:3d:f1:51:a1:c9:
73:02:c9:45:46:39:c1:f6:2d:11:10:db:ff:8b:58:
54:fa:01:d4:3c:49:d4:22:5f:82:fe:5a:99:07:aa:
e8:81:db:ac:1d:a0:65:78:7e:23:c0:05:f9:7d:72:
af:a1:be:b6:43:97:7c:d4:f3:ba:27:75:c6:17:b5:
e9:8a:26:73:e0:53:37:10:59:66:c4:f2:3a:48:52:
74:ae:3e:d1:0c:cb:54:d2:37:12:04:ce:44:6d:07:
83:fb:80:c1:64:4b:9d:9e:f8:15:18:0b:10:d6:a6:
41:ab:bb:54:19:00:53:dc:6a:53:68:34:68:e7:86:
9d:f3:f8:83:01:96:71:79:7e:26:bf:6f:f1:7a:c8:
0e:fd:6d:c3:a0:5f:2b:42:a1:a4:76:b5:15:5d:e6:
e1:7f:eb:c7:6d:d7:b2:ab:b5:9d:a6:a0:6e:06:26:
62:8b:a9:04:68:b0:da:2b:34:28:59:7f:bf:ce:df:
b7:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:F2:78:87:4B:B0:C6:78:93:6B:8B:A2:C4:A9:E8:64:99:E4:17:2F
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/gPJ4h0uwxniTa4uixKnoZJnkFy8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
64:30:21:85:74:6b:fb:34:86:d4:6c:51:4f:72:ee:41:5f:3f:
a0:c7:57:24:89:16:9c:65:22:f2:a8:bb:5a:27:34:52:97:b2:
3b:34:f2:07:98:c0:8f:ab:14:74:3c:b7:b1:40:d5:57:5f:eb:
f1:34:e4:d0:db:a7:ed:fc:1a:72:e6:a4:b9:2a:f4:63:2b:87:
8c:08:51:6b:5b:ea:59:49:60:02:b5:af:30:9c:6c:6b:63:ff:
fe:6b:ac:b0:11:55:53:dd:79:f9:bf:2f:a3:98:ac:68:b5:f6:
91:eb:0c:b8:34:23:a9:c5:c3:2c:ef:89:43:ae:c2:d5:39:2c:
05:e6:10:81:c2:a4:ac:60:4e:d7:f3:b1:83:21:20:91:5d:00:
d4:94:a2:6c:d7:3a:2a:be:90:19:a5:d2:93:c5:8a:5d:46:4f:
8f:d1:1f:df:d6:a1:c6:67:65:1b:96:25:47:45:6b:06:1f:4b:
a3:ba:96:b9:06:22:ed:e8:80:55:03:4c:c0:09:91:5f:31:37:
d9:59:10:30:a0:8f:f4:bc:d0:81:cb:3f:ff:8d:1c:f0:00:5e:
17:f9:3b:d4:63:c7:0a:e7:b8:82:94:a9:ae:b9:2c:66:ed:4c:
41:db:09:ce:04:97:a0:c7:70:dd:9c:15:a9:8e:e0:a3:17:98:
f5:a8:23:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 12 02:54:45 2025 by rpki-client