Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/goPxBg9bcZa0mZ4KfMWhUwLc6_8.roa
File: goPxBg9bcZa0mZ4KfMWhUwLc6_8.roa (raw, json)
Hash identifier: RWiXR1AGcfdv3Xsp4X1KrFl6mqKjtyw7l7r4YoH832s=
Subject key identifier: 82:83:F1:06:0F:5B:71:96:B4:99:9E:0A:7C:C5:A1:53:02:DC:EB:FF
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 018671BF24301CABA4E36699AA924FBA0C10
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/goPxBg9bcZa0mZ4KfMWhUwLc6_8.roa
Signing time: Tue 21 Feb 2023 02:13:17 +0000
ROA not before: Tue 21 Feb 2023 02:13:17 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:71:bf:24:30:1c:ab:a4:e3:66:99:aa:92:4f:ba:0c:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Feb 21 02:13:17 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=8283f1060f5b7196b4999e0a7cc5a15302dcebff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:73:42:66:aa:28:e0:49:68:b5:f6:28:c5:36:
30:68:d2:8a:59:6a:56:41:a8:0a:d1:98:a8:f3:d0:
dd:bb:97:9b:5e:5a:57:d6:2d:b1:52:f2:59:18:35:
5e:85:45:23:12:62:ae:2e:1d:3f:a1:68:b1:54:dc:
90:e1:d0:a5:71:58:52:40:70:0a:1a:3f:b8:29:2b:
9b:bf:39:30:ae:1f:7c:ca:63:92:30:e6:23:9f:95:
ee:83:2a:ac:5d:73:2b:bd:79:bd:c4:63:05:21:e1:
b4:24:11:0a:db:52:03:4d:0b:dd:a6:7e:22:b0:f6:
a6:00:0e:0a:87:0c:31:ec:37:01:ac:73:0b:05:20:
77:9d:f8:5b:a8:0d:15:a3:47:4a:1f:cb:50:10:ac:
28:30:ce:7b:72:ee:83:92:be:63:9e:8f:d5:b2:1f:
63:7c:da:ca:01:e5:a8:81:d5:73:ef:a2:b0:ea:59:
ce:fe:61:6f:fd:a5:b9:44:16:4d:1f:37:3f:74:dc:
ca:ae:a6:7e:53:8e:f3:42:49:d6:f6:06:dc:d8:05:
c8:67:2c:a0:d9:72:c9:af:88:41:08:b7:dd:4f:23:
62:64:80:a1:d0:33:90:99:cf:e5:c1:9c:56:1d:7c:
f2:4f:d0:a4:a1:c3:c8:c4:4a:3f:9d:b6:8a:90:8c:
4c:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:83:F1:06:0F:5B:71:96:B4:99:9E:0A:7C:C5:A1:53:02:DC:EB:FF
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/goPxBg9bcZa0mZ4KfMWhUwLc6_8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
9d:c0:82:f9:2f:9f:b6:03:99:51:c6:7c:49:65:01:b9:1a:c9:
f5:f9:67:d4:3d:22:37:63:6b:db:8f:41:c8:05:57:f7:52:82:
95:76:92:e8:f4:71:04:28:56:67:15:56:5c:37:7e:4f:f1:86:
e9:6a:8b:b7:0f:0c:fa:0c:04:bc:b9:c1:63:7c:b1:40:f8:6f:
e6:e5:a3:ae:c7:82:c8:da:f2:f8:37:68:e2:24:fe:70:2b:37:
2b:83:59:c0:45:65:fc:4c:1f:bb:06:31:7d:c1:93:48:65:b9:
83:e9:f1:aa:e4:97:17:39:e6:d6:84:3a:95:1e:f8:7d:b7:b8:
ef:78:02:e7:98:b0:2e:e0:cc:94:64:89:24:3d:28:06:9c:c1:
02:9a:cc:47:1c:0d:5c:83:77:38:46:da:d8:57:30:e4:e0:8c:
fc:ab:07:6d:fb:d1:b9:d8:4a:44:75:1e:ba:87:b2:27:95:d9:
75:29:ca:cc:17:94:b8:31:0e:f6:7e:13:f4:bb:b9:f3:ea:8f:
86:52:55:b1:1e:7c:80:9c:8c:07:e0:0b:76:f8:d2:36:c7:12:
84:0b:b5:1e:e8:5f:25:64:6d:b4:ed:aa:b9:9a:34:c8:2b:c2:
4c:43:8f:0d:23:25:48:f8:bc:47:21:76:9c:ad:bb:d2:7f:a7:
e9:76:31:a9
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYZxvyQwHKuk42aZqpJPugwQMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcyMDQ3YmUxNWIyNzU5MDJkY2Y2MTdkYzNkMGUxNmRjMWYz
MDgwMjIwHhcNMjMwMjIxMDIxMzE3WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4MjgzZjEwNjBmNWI3MTk2YjQ5OTllMGE3Y2M1YTE1MzAyZGNlYmZmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmHNCZqoo4ElotfYoxTYwaNKKWWpW
QagK0Zio89Ddu5ebXlpX1i2xUvJZGDVehUUjEmKuLh0/oWixVNyQ4dClcVhSQHAK
Gj+4KSubvzkwrh98ymOSMOYjn5XugyqsXXMrvXm9xGMFIeG0JBEK21IDTQvdpn4i
sPamAA4Khwwx7DcBrHMLBSB3nfhbqA0Vo0dKH8tQEKwoMM57cu6Dkr5jno/Vsh9j
fNrKAeWogdVz76Kw6lnO/mFv/aW5RBZNHzc/dNzKrqZ+U47zQknW9gbc2AXIZyyg
2XLJr4hBCLfdTyNiZICh0DOQmc/lwZxWHXzyT9CkocPIxEo/nbaKkIxM/wIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFIKD8QYPW3GWtJmeCnzFoVMC3Ov/MB8GA1UdIwQY
MBaAFHIEe+FbJ1kC3PYX3D0OFtwfMIAiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMt
MWFiZTNhYzEwYWE2LzEvZ29QeEJnOWJjWmEwbVo0S2ZNV2hVd0xjNl84LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMtMWFiZTNhYzEwYWE2
LzEvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBAJ3Agvkvn7YDmVHGfEll
AbkayfX5Z9Q9Ijdja9uPQcgFV/dSgpV2kuj0cQQoVmcVVlw3fk/xhulqi7cPDPoM
BLy5wWN8sUD4b+blo67Hgsja8vg3aOIk/nArNyuDWcBFZfxMH7sGMX3Bk0hluYPp
8arklxc55taEOpUe+H23uO94AueYsC7gzJRkiSQ9KAacwQKazEccDVyDdzhG2thX
MOTgjPyrB2370bnYSkR1HrqHsieV2XUpyswXlLgxDvZ+E/S7ufPqj4ZSVbEefICc
jAfgC3b40jbHEoQLtR7oXyVkbbTtqrmaNMgrwkxDjw0jJUj4vEchdpytu9J/p+l2
Mak=
-----END CERTIFICATE-----
Generated at Mon Jun 9 00:10:47 2025 by rpki-client