Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/6_HpRNq2QdZrQ_d7e17XLaXb_Go.roa
File: 6_HpRNq2QdZrQ_d7e17XLaXb_Go.roa (raw, json)
Hash identifier: mpzw22uCReKQ2aL/WKicbXcl3DK47ofJbQVSTthzmXE=
Subject key identifier: EB:F1:E9:44:DA:B6:41:D6:6B:43:F7:7B:7B:5E:D7:2D:A5:DB:FC:6A
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 01896AD1924426BA33D91D0F773EF98B81A5
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/6_HpRNq2QdZrQ_d7e17XLaXb_Go.roa
Signing time: Tue 18 Jul 2023 21:04:26 +0000
ROA not before: Tue 18 Jul 2023 21:04:26 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:188:5fe2:b396/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:187:4695:a68a/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:188:7858:a003/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64:ffff:0:187:fa9a:b088/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:187:b2b8:a7dd/128 maxlen: 128
2001:67c:64:ffff:0:189:6ad1:6337/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:6a:d1:92:44:26:ba:33:d9:1d:0f:77:3e:f9:8b:81:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Jul 18 21:04:26 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=ebf1e944dab641d66b43f77b7b5ed72da5dbfc6a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:ae:1f:2d:79:ee:0c:cc:9f:d2:3d:5b:9d:f1:
f7:35:2f:a2:0b:de:28:90:35:1d:84:77:3f:0e:21:
13:c0:10:a2:10:33:e4:19:82:4e:43:b1:d6:4f:15:
ae:2b:b0:9b:f4:1a:e9:cb:b9:34:0a:b6:45:e5:40:
3c:64:4a:a5:66:97:a4:4c:e1:0b:80:29:bc:4a:2f:
31:52:9e:29:4a:58:a0:e3:dc:e9:d3:04:8a:cd:24:
c1:4e:f1:01:76:14:8b:9a:42:12:30:21:07:bc:e0:
19:2b:c7:c2:92:6c:73:c7:fd:9f:57:0f:bc:9a:fb:
fd:47:7a:3d:7b:33:3b:9e:8c:b3:1f:86:e1:3c:34:
c0:52:40:95:6d:24:09:94:b8:57:d1:90:e9:2c:29:
8d:f6:18:0f:84:97:64:0c:8f:2c:d5:03:f7:4a:43:
44:21:0a:0f:bb:5e:32:0e:a8:fb:e9:2b:c9:9f:de:
54:a5:ae:13:a8:e7:ed:8a:32:39:cb:b6:92:0c:e2:
08:6a:79:f9:f2:63:5f:8f:5f:7c:5b:86:e4:88:ea:
38:e8:63:91:cd:b3:b1:1c:13:38:e2:b7:29:49:7d:
50:df:db:99:b5:18:d0:a6:e7:b4:6d:f6:df:b4:f4:
df:1e:04:7d:aa:bc:12:b2:d9:7e:5c:45:85:0b:9e:
72:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:F1:E9:44:DA:B6:41:D6:6B:43:F7:7B:7B:5E:D7:2D:A5:DB:FC:6A
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/6_HpRNq2QdZrQ_d7e17XLaXb_Go.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
6a:bc:ee:1b:be:5d:9f:14:6d:d0:b7:0d:ec:5c:eb:93:5d:13:
e0:d6:96:38:63:4e:81:a0:32:ab:a5:f2:f6:80:8b:11:de:a2:
25:e0:ff:8b:93:af:29:5c:fc:09:1e:c7:95:2f:8f:4d:df:af:
53:95:04:2e:bc:30:41:d8:ba:00:f0:ba:54:3b:47:c7:c9:c8:
a3:1b:db:8b:ff:cf:b9:43:d2:6a:7b:93:45:00:96:92:6b:7d:
a6:b7:6e:02:2c:8a:6e:6c:1c:64:4f:d5:ae:ac:e1:dc:03:14:
2e:37:1e:bd:ba:92:bb:bb:37:3a:ee:f3:24:98:35:55:43:a8:
e5:cb:ee:0a:05:f0:06:17:a1:9d:71:13:25:09:6e:43:9a:6a:
a3:18:77:65:7b:6d:a2:5d:d1:59:99:4a:a3:24:95:8d:fd:35:
48:4b:4e:f4:1e:e4:14:51:09:30:63:1b:f8:ff:22:93:cf:6e:
4e:d5:dd:57:26:e7:6b:56:67:38:d5:30:84:e6:5d:a3:b4:b8:
a1:83:5a:53:de:94:25:74:d4:11:f4:ab:8f:d9:b2:13:f8:12:
20:b3:14:ad:fa:2d:be:38:15:c8:5d:26:fa:75:fe:7a:da:14:
4d:df:26:cd:6d:fe:79:89:28:46:c6:04:eb:17:80:33:a1:89:
0d:7d:37:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 05:37:13 2025 by rpki-client