Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/2N_fCWGolaVU5BKvJ9dvchiNXXc.roa
File: 2N_fCWGolaVU5BKvJ9dvchiNXXc.roa (raw, json)
Hash identifier: 4WxuDZTuyz6AVBM6jtV24vSLjHJuwXd229yrAgN/mO0=
Subject key identifier: D8:DF:DF:09:61:A8:95:A5:54:E4:12:AF:27:D7:6F:72:18:8D:5D:77
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 018506DDBE8B3C86F8745BE95E0D5D6B926C
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/2N_fCWGolaVU5BKvJ9dvchiNXXc.roa
Signing time: Mon 12 Dec 2022 15:04:33 +0000
ROA not before: Mon 12 Dec 2022 15:04:33 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:185:6dd:7f06/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:06:dd:be:8b:3c:86:f8:74:5b:e9:5e:0d:5d:6b:92:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Dec 12 15:04:33 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=d8dfdf0961a895a554e412af27d76f72188d5d77
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:e0:7f:6c:d6:1e:47:dd:24:68:bf:b2:a3:2a:
a4:8c:d2:b3:24:58:13:b6:2d:5f:e0:5f:d5:94:8f:
da:44:2b:df:d5:53:ec:6a:49:46:96:50:95:2b:d4:
2e:1f:ca:f4:61:8a:b9:8b:31:ee:73:aa:cb:38:89:
ba:8d:89:ba:12:58:da:93:5c:76:fb:3c:ac:3b:11:
30:4f:e2:3b:f0:d3:9b:05:94:e0:bd:d6:7e:b3:c7:
ce:7e:eb:42:64:b9:62:9a:05:4b:42:54:3f:ae:00:
03:3a:e9:1c:77:65:5f:d5:ab:74:54:6b:f7:e2:db:
dd:d8:4b:7f:1b:7e:5f:aa:dc:c7:18:4d:be:78:41:
e3:fc:92:9d:dd:10:59:27:59:5e:6e:bd:ca:a4:8c:
b7:48:8c:6f:12:f6:5e:b4:9b:f1:ed:e4:bf:35:0b:
0e:c4:c8:07:79:6a:6a:7c:fe:79:fe:7c:dc:1e:c0:
28:75:a4:17:8b:63:94:86:ce:b9:fc:23:86:24:87:
d3:6c:7f:ea:a4:98:dd:89:0f:8e:a1:57:39:17:f9:
63:08:34:16:62:b5:a4:f4:b4:ed:b0:ee:99:10:ad:
d8:38:3b:8f:bf:ae:c1:df:ec:7d:b5:b4:5e:f8:29:
9b:3c:9e:d5:37:49:e8:58:02:a1:dd:26:32:c9:33:
d9:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:DF:DF:09:61:A8:95:A5:54:E4:12:AF:27:D7:6F:72:18:8D:5D:77
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/2N_fCWGolaVU5BKvJ9dvchiNXXc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
18:4e:60:46:13:ce:15:ea:5d:52:4c:4b:7b:ae:23:32:43:68:
94:e3:1b:fd:af:de:6a:6a:20:ed:5d:87:d3:8c:7a:91:35:67:
5b:8d:50:65:92:70:e6:91:ce:5e:93:f9:be:d8:90:3f:cc:a4:
87:bb:a8:ad:31:71:30:ca:26:47:87:dd:db:cb:5b:d6:a0:fd:
e4:4c:4a:1c:53:a6:f4:6e:d5:4d:45:6d:2d:6c:ba:a7:36:d1:
6c:78:4f:18:2c:7b:61:a7:0c:62:c1:05:27:5e:2b:8e:4b:80:
c7:97:c2:64:21:6f:04:25:ac:90:d2:ad:56:cd:f6:a2:86:c5:
d4:45:0b:06:6e:c4:e3:03:43:ac:2c:a2:5f:37:39:5c:f1:31:
a6:12:8b:8a:e7:fc:fc:2a:0a:00:11:26:52:86:e7:0d:d9:ce:
9a:19:ab:b2:58:20:18:1a:54:c0:b5:1a:1d:1e:ef:75:91:2b:
ac:cb:97:0a:82:6a:0b:fa:3d:23:dd:4f:06:fe:86:38:2e:b3:
7f:0c:61:c6:5e:35:77:6f:ba:91:30:39:8d:2b:a1:98:36:0e:
3f:7c:60:57:fc:3c:0b:bd:87:83:fc:cf:02:53:63:75:44:ac:
4b:1b:d2:d0:91:10:15:86:de:78:75:5c:36:44:ec:52:ee:9c:
68:ec:ea:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 01:58:54 2025 by rpki-client