Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/GolK2rACWDKnE9NLyjjodxJErVA.roa
File: GolK2rACWDKnE9NLyjjodxJErVA.roa (raw, json)
Hash identifier: Z4rYPfLOfrtPAxH10+21YcWY5hmFDP3l5HZg0woBF6Y=
Subject key identifier: 1A:89:4A:DA:B0:02:58:32:A7:13:D3:4B:CA:38:E8:77:12:44:AD:50
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 01898FC20FCB867F65897DD748AD4FF9F691
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/GolK2rACWDKnE9NLyjjodxJErVA.roa
Signing time: Wed 26 Jul 2023 01:13:27 +0000
ROA not before: Wed 26 Jul 2023 01:13:27 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:188:7858:a003/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:8f:c2:0f:cb:86:7f:65:89:7d:d7:48:ad:4f:f9:f6:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Jul 26 01:13:27 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=1a894adab0025832a713d34bca38e8771244ad50
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:78:5b:07:6b:6b:d8:6b:bf:1c:2d:86:5f:d6:
01:d9:a0:b8:cc:a5:95:9a:c0:0b:fe:c0:e7:9e:86:
6f:f2:4f:9f:b2:86:a6:41:93:36:bf:65:f3:3d:f4:
01:4c:5b:c4:e5:33:a2:61:7e:d2:b3:6e:23:e3:9c:
d3:8a:12:7c:bf:64:fb:a9:65:ab:9a:35:72:85:2c:
61:1e:65:e2:a1:42:d5:0b:d7:c5:7f:85:27:8e:86:
86:d1:77:19:0c:0c:17:30:95:d2:21:f1:34:2b:42:
b1:87:0c:fe:7e:48:f1:6d:2b:60:cb:f0:9a:ae:17:
8c:ac:25:e3:52:10:b1:35:23:43:64:ef:83:6a:fe:
cc:25:24:d8:51:2e:e6:d6:0a:04:f5:e2:a4:8b:ad:
35:40:a1:a1:41:a2:13:7c:49:39:94:f9:12:4d:20:
2c:82:8e:75:85:0e:4b:47:7c:06:43:53:a2:26:36:
12:07:87:09:94:8a:07:f3:78:70:8e:ed:e9:88:74:
59:ae:23:33:ff:df:1f:10:cb:6d:36:4c:5a:40:df:
4a:dc:47:6c:db:54:eb:32:c0:31:e0:27:15:6e:27:
fc:e0:0c:3e:49:2e:a5:dd:49:73:a6:24:cd:43:bb:
e8:3e:b7:18:a8:5e:b3:27:da:9d:2a:c5:cc:d6:af:
a2:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:89:4A:DA:B0:02:58:32:A7:13:D3:4B:CA:38:E8:77:12:44:AD:50
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/GolK2rACWDKnE9NLyjjodxJErVA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
00:0f:60:ae:7d:58:78:af:0c:1b:02:cd:4e:b3:2f:7b:2a:c3:
1c:ee:a5:34:e4:7e:12:43:c0:0e:b4:39:b8:8b:5e:b8:08:ac:
b5:f6:89:57:ee:7b:bd:61:c4:ef:49:91:1e:19:67:fb:d7:18:
d5:2b:eb:fb:18:08:62:cf:de:68:67:f4:88:de:83:31:93:ef:
31:03:51:1c:b5:96:74:62:0e:a6:e7:0d:19:95:23:69:be:81:
f0:f7:6a:79:54:c3:d6:44:de:f3:9d:e0:c2:cd:98:4f:02:2b:
d8:dc:f7:4e:f9:17:6d:fe:94:c2:22:2d:20:c4:05:a8:53:d7:
c8:73:ea:4a:82:eb:b0:58:c3:0b:06:55:e7:cc:9b:59:27:a7:
12:89:74:c0:35:7a:26:19:00:36:73:f0:2a:76:2d:b0:ec:1f:
ef:16:ca:37:4c:59:17:24:1d:44:f0:82:b8:75:8d:f9:66:4e:
80:90:2d:00:96:48:82:90:14:06:a9:bc:ba:57:9f:fb:ab:ff:
85:a5:3c:c9:de:ef:80:5b:cf:b2:96:05:01:ee:36:f4:a6:21:
27:b1:ce:38:d7:da:4c:92:4e:b6:3b:09:6e:cf:32:4b:38:64:
03:14:bb:16:8e:3a:e2:3c:12:05:37:c3:b0:c4:90:29:6b:19:
e3:b1:1a:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 21:05:26 2025 by rpki-client