Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/Go80ltb5flyzPATxTniyl20o7Js.roa
File: Go80ltb5flyzPATxTniyl20o7Js.roa (raw, json)
Hash identifier: O4inoa6BCQW6SmKSVeSmxQ9a+2x7OYHijqWUvudR2Fs=
Subject key identifier: 1A:8F:34:96:D6:F9:7E:5C:B3:3C:04:F1:4E:78:B2:97:6D:28:EC:9B
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0184790ECEB81CC08AEE28C5076ECC5C80CD
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/Go80ltb5flyzPATxTniyl20o7Js.roa
Signing time: Tue 15 Nov 2022 02:12:04 +0000
ROA not before: Tue 15 Nov 2022 02:12:04 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:184:51c3:ad7c/128 maxlen: 128
2001:67c:64:ffff:0:184:3fbd:71f7/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:184:4250:a4df/128 maxlen: 128
2001:67c:64:ffff:0:184:75cf:c8d9/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:79:0e:ce:b8:1c:c0:8a:ee:28:c5:07:6e:cc:5c:80:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Nov 15 02:12:04 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=1a8f3496d6f97e5cb33c04f14e78b2976d28ec9b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:8f:5c:bb:bd:c5:88:11:67:15:80:d1:3d:a3:
38:35:da:22:d8:4e:8d:6f:5f:b2:b0:ab:ec:54:47:
0e:e4:47:97:8d:cd:db:bc:c4:48:d8:f1:1e:87:dc:
93:e0:06:15:05:59:39:b5:96:9d:5d:4d:69:41:81:
29:4d:f4:9f:d2:9a:e0:35:de:7f:dc:03:28:1f:6e:
4e:97:98:86:8a:46:83:b2:c6:75:90:69:3c:67:c2:
3f:14:81:63:9d:62:db:37:a2:6b:92:50:0d:30:1f:
6d:af:f0:f7:af:df:f6:a6:5f:8b:c7:3a:98:f6:9f:
8b:96:61:00:f1:6d:8c:9e:64:5e:84:91:59:d4:d0:
0d:6e:4c:08:ec:f2:3e:cb:8d:9a:70:54:ab:74:83:
aa:e7:92:9b:ce:3f:cd:d9:dc:a0:0e:db:9e:5d:1b:
f5:d9:68:e4:49:ab:aa:98:5a:7e:b3:17:19:1a:91:
52:ff:aa:8c:33:64:48:47:f4:1c:2d:ff:a3:a8:62:
fb:03:69:d5:3a:d5:36:ae:28:96:ee:d6:d6:5e:fb:
62:85:04:0e:bd:e6:10:d0:c4:df:f3:05:b3:7b:a0:
10:a4:f7:1a:a8:0a:5e:05:de:96:e9:f3:0d:1a:58:
a8:35:b3:39:fa:6c:25:62:d3:ae:54:3d:8b:b8:61:
e7:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:8F:34:96:D6:F9:7E:5C:B3:3C:04:F1:4E:78:B2:97:6D:28:EC:9B
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/Go80ltb5flyzPATxTniyl20o7Js.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
3b:01:9d:46:c0:ce:02:19:6f:77:56:b8:ae:d5:c7:64:58:8d:
aa:e6:6b:d3:b5:2e:d6:9c:65:36:72:3f:c7:6c:90:36:a6:d9:
0b:09:01:c1:02:b8:c4:78:5d:da:41:87:dd:90:ee:1a:79:c2:
b1:e4:ed:df:50:9e:b2:ce:36:76:54:d5:b3:ef:72:43:bc:29:
0c:69:8b:e1:b2:1b:ff:88:88:a9:f4:cf:ba:ab:ba:be:22:64:
fb:ad:e1:1d:e9:34:5c:31:cd:52:60:77:56:aa:a2:7b:a9:5c:
fe:5a:b9:e4:16:d5:d8:74:d8:06:e4:6c:ff:89:69:74:b4:3a:
81:41:71:a9:23:c6:d7:4b:1d:73:d9:3c:c7:74:56:fc:0b:fa:
cb:a6:5f:c0:0d:4d:71:57:5f:9c:81:c6:9e:35:c9:83:0b:45:
12:7e:6b:28:55:a8:5e:fe:1c:15:22:63:1f:5a:ca:dd:e2:2a:
92:34:de:9a:19:14:b9:93:27:2b:58:c2:d9:ae:53:eb:64:02:
a9:4d:56:0d:02:fe:dc:58:84:56:ea:73:7c:e8:1f:8c:30:25:
48:a4:70:6a:01:d9:03:10:08:80:aa:88:47:8c:42:22:ae:bb:
81:b5:fd:2a:07:b9:94:6b:14:ba:4c:f7:07:99:b6:10:b8:81:
d7:70:06:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 22:21:01 2025 by rpki-client