Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/1-5VGSP28U2I9AANC99C1jaACfII.roa
File: 1-5VGSP28U2I9AANC99C1jaACfII.roa (raw, json)
Hash identifier: q1EokMfwUwMSAw79Mt5HrSvgchmaRjpk6wtBGXB2Sbw=
Subject key identifier: FB:95:46:48:FD:BC:53:62:3D:00:03:42:F7:D0:B5:8D:A0:02:7C:82
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 01856691607737E9634AA30B662099F7959F
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/1-5VGSP28U2I9AANC99C1jaACfII.roa
Signing time: Sat 31 Dec 2022 05:04:41 +0000
ROA not before: Sat 31 Dec 2022 05:04:41 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:185:6690:fdf3/128 maxlen: 128
2001:67c:64:ffff:0:185:3dcc:d8f/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:66:91:60:77:37:e9:63:4a:a3:0b:66:20:99:f7:95:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Dec 31 05:04:41 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=fb954648fdbc53623d000342f7d0b58da0027c82
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:6b:db:57:73:c7:45:04:bd:f9:19:f9:a2:08:
a1:a7:ca:a3:54:0d:63:4c:6c:85:2e:b0:97:b9:83:
01:db:da:91:43:92:d4:ff:3a:92:33:ef:f8:e0:51:
fb:78:1d:c1:67:21:0d:4f:b5:f8:4b:6d:2f:93:df:
2a:94:64:98:6b:35:18:3d:89:3d:e0:3d:84:4f:ae:
ed:97:b3:91:95:63:bd:e9:c2:81:36:8b:96:d5:df:
50:8f:c6:69:e5:f7:bc:9d:50:9d:c7:c7:43:68:0f:
5c:33:a3:56:71:70:67:0b:d8:b0:43:cd:95:da:33:
01:ea:3d:d0:07:a8:87:f3:c4:e0:3a:55:1f:d5:6f:
ec:f9:a9:ff:e4:47:09:33:72:ef:75:1f:97:22:98:
68:60:4b:1a:47:b2:39:9b:d9:ac:5f:78:da:2b:8d:
73:0f:f6:c7:ef:94:d3:ad:c6:e4:8d:57:6b:4c:6a:
22:28:6d:7f:99:2b:49:8a:80:ee:2c:d5:4d:7b:f5:
74:f5:26:aa:cd:31:79:ec:36:49:22:fe:95:36:21:
a0:9d:74:0f:ae:78:57:0f:b2:78:a3:15:eb:28:a5:
bf:80:54:5c:08:1d:03:dd:11:51:15:4c:5f:78:a5:
c4:55:2e:9a:49:40:01:c5:2a:03:b8:74:68:8d:d6:
f2:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:95:46:48:FD:BC:53:62:3D:00:03:42:F7:D0:B5:8D:A0:02:7C:82
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/1-5VGSP28U2I9AANC99C1jaACfII.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
3a:8a:4c:cc:82:99:8f:5c:3d:76:5b:8a:32:7d:30:bb:8b:a8:
d6:89:ce:30:30:4a:ea:4c:54:f3:53:76:49:51:ef:e0:93:9f:
20:e2:f9:19:dc:52:ea:6b:73:fd:32:97:34:d1:58:ab:2d:47:
53:43:8e:e0:97:07:53:18:ba:54:3b:1b:68:7c:46:17:61:6d:
7d:06:36:f6:ed:fc:4b:68:3f:36:3f:bb:e2:c6:24:c5:76:45:
7d:89:74:f1:30:f0:c3:b2:80:d5:3b:2f:69:6e:4b:c1:2e:6d:
be:95:b9:9b:ad:63:97:62:25:fc:05:b9:08:dd:c1:bb:bc:e8:
e6:da:9d:e5:4e:4c:93:6a:59:87:01:cb:7d:d4:cc:32:bc:3c:
55:f5:77:92:0a:5e:b9:4d:93:da:4b:84:bb:d2:d6:e1:b2:ec:
f4:85:f3:ba:8e:aa:91:5f:36:d8:b9:f6:a1:87:13:f5:30:5a:
ce:8c:ab:4b:21:d2:a4:6f:ad:e6:69:4b:63:48:b8:71:af:70:
5f:ae:dc:c3:1d:6a:f1:a5:cf:d8:25:c4:6b:07:6b:38:4b:f2:
0b:ac:2f:a5:83:ac:eb:df:8c:00:5a:de:d9:66:37:a7:c8:77:
d1:05:16:5a:9b:cf:dd:e8:22:5d:bc:ed:fe:40:2c:31:f2:a5:
29:d7:5d:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 22:58:39 2025 by rpki-client