Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/goY-jH1w6MULTfWLUELV9Dgccis.roa
File: goY-jH1w6MULTfWLUELV9Dgccis.roa (raw, json)
Hash identifier: RL/cdUr3s9BB9xbFlIdix0rDatVPsKStddLyHzHFxBE=
Subject key identifier: 82:86:3E:8C:7D:70:E8:C5:0B:4D:F5:8B:50:42:D5:F4:38:1C:72:2B
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0186B1B42F26C898350FC03AE81EF7426B9D
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/goY-jH1w6MULTfWLUELV9Dgccis.roa
Signing time: Sun 05 Mar 2023 12:17:01 +0000
ROA not before: Sun 05 Mar 2023 12:17:01 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:b1:b4:2f:26:c8:98:35:0f:c0:3a:e8:1e:f7:42:6b:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Mar 5 12:17:01 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=82863e8c7d70e8c50b4df58b5042d5f4381c722b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:87:86:a8:1d:e1:62:c5:a1:de:f0:02:8c:18:
a7:83:db:3d:7d:ac:de:33:82:05:d5:bb:90:ff:47:
14:10:7f:ba:68:97:45:fe:40:75:3f:c7:35:05:22:
e6:56:8f:5d:c5:c7:28:82:1f:e3:78:7f:be:b4:56:
ba:ec:ea:4b:8f:e6:2e:9c:7f:14:f4:f0:4e:fc:1a:
18:d1:e1:48:0f:0e:da:06:e7:f2:91:50:0e:98:fe:
09:e9:f3:f3:44:55:ab:cb:cb:29:02:5c:37:e4:2a:
17:e2:35:d0:6e:f6:9b:2a:c5:a2:bd:d7:b1:ef:c8:
ea:bd:8c:c2:7e:07:82:7d:55:40:32:e3:39:35:23:
f8:88:78:12:bd:b6:08:31:55:13:21:bd:5e:cf:e8:
e7:2d:2a:40:fd:c1:6a:ce:f1:55:bc:5e:cb:43:df:
d0:22:fc:f4:39:6f:fc:1f:7c:26:94:e0:67:2f:18:
5f:df:ec:22:c6:5a:c4:2b:59:2f:97:78:cb:ff:5c:
73:4f:10:00:b4:7c:3b:2b:0c:ec:71:92:01:08:90:
cf:61:31:19:7c:33:4d:bb:6f:89:3d:75:fd:14:ae:
b3:a0:a6:9a:35:46:59:15:59:49:1a:65:f7:86:12:
cf:6a:3e:b9:12:d5:17:e1:c1:58:f9:1e:97:94:83:
6c:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:86:3E:8C:7D:70:E8:C5:0B:4D:F5:8B:50:42:D5:F4:38:1C:72:2B
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/goY-jH1w6MULTfWLUELV9Dgccis.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
0a:63:27:f8:40:9a:b8:24:72:61:85:72:a8:1a:25:55:a2:71:
05:1e:e5:28:2a:1a:b3:7f:93:65:25:1d:9f:db:19:6f:b6:36:
24:33:2f:4c:c8:e0:6e:5b:0b:38:c0:74:4d:3c:20:07:b4:73:
c6:d1:a0:cd:17:ec:76:86:42:7f:0f:18:53:e3:cc:85:57:d4:
5b:c0:4a:22:8e:be:71:60:73:1d:77:f8:22:b4:ad:17:8a:55:
7f:73:22:ed:0d:90:96:5e:be:55:86:b5:99:b0:70:07:3d:0d:
58:90:1b:02:bf:10:87:a8:8a:28:b0:8f:a6:08:15:a7:ad:e9:
b7:94:67:00:3f:ee:c4:09:30:47:d0:22:e2:fb:96:18:0c:4e:
5d:79:71:e2:fb:7c:90:34:33:84:94:20:1f:61:de:25:4a:dd:
08:ea:08:12:36:3c:36:42:60:62:ec:1e:2b:ea:a0:82:5f:36:
dc:7b:7f:1e:d0:c2:4f:71:21:09:00:d7:61:b6:d1:b5:e3:3a:
ef:05:9d:36:21:62:6c:5c:7b:0b:09:c9:69:dc:9b:3e:d6:f4:
e4:9a:b7:ce:38:28:dc:58:08:ed:fc:ac:01:0c:4a:d4:4c:48:
0e:c8:6d:2e:cb:a8:96:31:bd:19:eb:2a:a4:c4:c3:5c:e1:e2:
4f:4f:a4:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 00:07:14 2025 by rpki-client