Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/1-VTeoKc-qI1ejZk7Je_Yb4vCE1A.roa
File: 1-VTeoKc-qI1ejZk7Je_Yb4vCE1A.roa (raw, json)
Hash identifier: 7tbc9Qi4kxrR+a1HMaqSGpgswkyf/6lYgmiKx/l0y6Y=
Subject key identifier: F9:54:DE:A0:A7:3E:A8:8D:5E:8D:99:3B:25:EF:D8:6F:8B:C2:13:50
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0184BF0400060D7929F88CD3B1A39E8DE39A
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/1-VTeoKc-qI1ejZk7Je_Yb4vCE1A.roa
Signing time: Mon 28 Nov 2022 16:13:41 +0000
ROA not before: Mon 28 Nov 2022 16:13:41 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:184:ae77:4719/128 maxlen: 128
2001:67c:64:ffff:0:184:9f03:9814/128 maxlen: 128
2001:67c:64:ffff:0:184:bdea:9abb/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:bf:04:00:06:0d:79:29:f8:8c:d3:b1:a3:9e:8d:e3:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Nov 28 16:13:41 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=f954dea0a73ea88d5e8d993b25efd86f8bc21350
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:19:57:97:e7:8c:ee:5f:99:66:45:5b:44:5b:
47:51:88:12:de:8d:ab:b0:35:4a:09:a8:b1:8a:35:
fc:f1:39:a3:51:da:ae:41:42:95:fa:48:c0:2c:3d:
68:71:5e:ea:ea:6a:80:21:2b:e5:4d:10:3a:26:d3:
54:36:81:0a:c6:fe:54:a6:b0:76:2f:2c:82:9e:f9:
c0:12:7d:9d:d6:61:fc:9a:be:24:af:0f:38:20:05:
80:a7:63:16:62:21:c1:7f:c1:92:69:bd:63:f3:7f:
70:8b:80:0e:1a:37:18:3b:4a:af:f3:02:9d:86:3d:
a9:8d:b8:54:52:00:9b:40:b3:12:65:0c:f9:c1:ea:
4f:9c:a9:a5:83:86:42:c7:33:05:e1:66:20:92:44:
92:f1:8b:2d:3f:34:57:9b:dc:7e:ce:65:03:1d:0a:
c8:49:91:ce:96:7b:b1:04:91:6d:49:f1:f2:42:4f:
10:5a:48:04:0b:48:51:39:f5:3c:dd:9d:e0:a2:ae:
ac:a3:5b:51:22:e4:4d:1b:bd:ab:f6:67:8d:6f:e3:
46:c1:a4:81:9b:9d:35:a5:fd:b6:97:5a:9d:92:65:
07:db:61:ae:16:72:3c:c3:c6:c9:d6:ed:67:18:3d:
ed:23:27:6c:37:6c:d7:41:44:c6:e3:1b:02:2c:31:
25:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:54:DE:A0:A7:3E:A8:8D:5E:8D:99:3B:25:EF:D8:6F:8B:C2:13:50
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/1-VTeoKc-qI1ejZk7Je_Yb4vCE1A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
16:df:af:10:8f:48:23:28:2f:5c:81:f7:3e:f1:92:c7:0f:36:
b1:c4:8f:51:2b:b7:8b:d3:55:78:8d:d0:97:e0:ed:f6:2c:fe:
88:77:ff:d3:42:14:50:ce:48:33:8d:df:e1:26:74:ef:ba:77:
a4:b6:77:8d:65:cf:54:d7:34:3f:67:35:8c:75:11:b7:ce:7f:
80:6e:c8:b3:55:9b:ee:b5:d5:9e:64:dd:55:97:d7:74:f8:05:
d8:57:5f:1b:98:49:b0:1e:8d:25:f9:37:aa:0a:c2:f1:2a:13:
ab:83:f2:e1:0a:33:73:1b:ba:22:8f:b8:1d:69:2e:03:d8:86:
1d:54:46:94:d0:14:11:2b:35:6c:86:6c:31:99:70:e4:92:44:
1a:b2:45:81:f6:12:71:54:58:f3:4b:d5:84:b5:11:f7:2a:8c:
88:55:5f:c0:78:0c:a3:df:b8:17:a7:fc:5a:17:0b:f5:60:2b:
24:db:c8:90:31:71:58:f0:33:7d:36:8f:ca:74:76:eb:a1:32:
83:0a:36:ba:13:58:f1:64:5c:e8:93:e4:4f:fc:d6:d6:97:45:
e7:f5:82:38:00:ef:6e:ce:35:69:b8:1a:ac:cd:1e:7e:73:6a:
b4:ee:aa:79:28:a1:59:a0:ab:ed:8b:82:c6:a8:b1:49:c3:b5:
85:d2:d3:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 17:41:22 2025 by rpki-client