Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/go5FBdJhlp_NEY3gj9QJvViFS60.roa
File: go5FBdJhlp_NEY3gj9QJvViFS60.roa (raw, json)
Hash identifier: oPuxmVmXJ9xySUpNT702HQP0ffW8KWxAshVWqQ4eEzc=
Subject key identifier: 82:8E:45:05:D2:61:96:9F:CD:11:8D:E0:8F:D4:09:BD:58:85:4B:AD
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 018A3C53956DEEC4F15E3428D97418750E85
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/go5FBdJhlp_NEY3gj9QJvViFS60.roa
Signing time: Mon 28 Aug 2023 13:27:05 +0000
ROA not before: Mon 28 Aug 2023 13:27:05 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:3c:53:95:6d:ee:c4:f1:5e:34:28:d9:74:18:75:0e:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Aug 28 13:27:05 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=828e4505d261969fcd118de08fd409bd58854bad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:12:18:72:4c:c1:fd:18:9c:d6:06:f7:1b:77:
4f:d2:99:ef:b3:7c:9f:d1:c3:57:d7:0c:cb:f3:bb:
30:0b:d2:ad:42:4b:dd:b0:70:3d:ce:cd:a2:52:ec:
ed:8b:4b:1c:e3:b0:90:b7:84:f9:1b:91:1b:3a:fe:
e1:b3:20:78:41:f7:0e:da:0a:03:fe:45:13:fd:3d:
04:d5:5b:4e:38:d7:d3:af:05:ee:a8:b2:d0:3b:7c:
ca:04:7e:cc:52:bf:4c:d6:29:13:a7:ef:e8:d5:a6:
67:a7:6c:da:9c:cd:d0:58:b9:ee:55:7c:a5:c2:fb:
80:06:c8:4f:41:31:49:72:b5:ca:30:65:e1:af:33:
d8:e9:18:bf:1b:11:db:de:2c:03:7e:99:58:34:10:
4d:39:93:70:00:81:7f:6b:18:55:61:46:e6:59:b3:
e5:88:83:f2:24:a5:9d:6b:c7:65:ba:f7:d1:fb:47:
ec:3c:a3:08:59:c8:85:fd:eb:df:e3:3d:dd:33:ca:
17:da:ba:cb:5a:4c:6b:d9:b8:28:aa:de:b1:f2:71:
72:1a:53:9a:f9:05:df:0a:ee:30:9d:90:32:5a:7e:
62:4a:ac:3b:8b:14:34:26:c1:4f:7d:75:9e:54:e4:
f3:e0:ee:c5:8e:4e:69:83:4b:f0:e6:29:b4:1e:52:
df:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:8E:45:05:D2:61:96:9F:CD:11:8D:E0:8F:D4:09:BD:58:85:4B:AD
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/go5FBdJhlp_NEY3gj9QJvViFS60.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
3f:df:90:89:76:46:18:52:cd:23:fb:f3:79:13:fc:54:23:0c:
e1:46:83:6f:40:f0:f0:41:bd:0d:e2:be:76:7a:ea:13:d3:41:
4c:3f:dc:fa:84:29:8b:97:b2:bf:85:78:f4:c2:a5:d8:99:42:
8a:34:d7:e9:bf:d1:3d:43:8c:81:f3:21:c0:76:7b:ba:8f:2a:
e9:21:d3:c2:d8:f6:dc:ef:76:23:21:59:48:0f:c9:26:54:b1:
44:b7:9d:ea:ac:c6:15:8b:4d:6d:bc:5a:b0:39:d0:9e:b5:19:
8d:b9:c6:2d:b1:44:70:6a:5a:1b:b0:56:74:1b:5e:9a:69:d4:
9e:15:2d:ef:f0:97:41:58:5f:f6:e8:fe:f8:7d:f8:10:ba:c1:
c5:01:09:81:66:59:51:6b:78:61:cf:10:20:5a:c3:46:3f:3d:
aa:16:12:63:f2:f8:82:c9:c7:bd:55:00:a7:ed:40:87:82:be:
90:27:71:78:c1:8c:0a:01:1f:b3:c4:a1:dd:13:f8:97:03:76:
dc:f6:b3:1d:ad:7f:d5:0d:21:55:25:6e:64:1f:d9:01:e2:78:
d5:c0:cb:4a:7b:09:51:54:ea:96:e0:65:cb:b5:12:4e:03:27:
5a:49:5f:e4:6a:00:14:99:56:6f:51:a8:57:7a:66:a6:a9:63:
31:c6:31:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 06:48:11 2025 by rpki-client