Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/2VWvpm68yAGOfkTgYW5vNHOUrYE.roa
File: 2VWvpm68yAGOfkTgYW5vNHOUrYE.roa (raw, json)
Hash identifier: 0CdnNxb6YQ3I49XhSaQIg+jCqX1sJCtvZMCVlWka2q0=
Subject key identifier: D9:55:AF:A6:6E:BC:C8:01:8E:7E:44:E0:61:6E:6F:34:73:94:AD:81
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0187C568A2C71BBF60D767A0568EB62C953E
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/2VWvpm68yAGOfkTgYW5vNHOUrYE.roa
Signing time: Fri 28 Apr 2023 01:09:41 +0000
ROA not before: Fri 28 Apr 2023 01:09:41 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:187:4695:a68a/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:187:b2b8:a7dd/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:c5:68:a2:c7:1b:bf:60:d7:67:a0:56:8e:b6:2c:95:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Apr 28 01:09:41 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=d955afa66ebcc8018e7e44e0616e6f347394ad81
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:55:0e:f3:ee:9f:0a:42:e5:0d:4b:40:46:a3:
5c:d4:85:2b:c9:ff:75:08:cb:ce:2c:8a:f5:a7:56:
9d:fd:ac:28:80:ce:b3:f2:72:c0:72:c4:5d:b7:56:
3d:df:e4:51:ac:b2:89:bc:80:33:52:21:60:91:df:
00:4b:d8:b7:bd:34:df:8f:ae:f0:73:43:19:c9:72:
1b:dc:09:10:6c:c9:cf:40:e3:ea:82:63:de:f0:7d:
2b:3b:c4:ab:32:3c:01:eb:c7:a4:8e:5d:47:16:5c:
bf:30:34:23:57:81:3a:07:e4:8d:12:e3:47:93:4a:
3b:ee:6e:66:e3:41:b7:58:3c:c2:eb:74:e3:d8:3e:
aa:ee:70:33:66:c0:e2:7a:15:55:f7:6a:e3:2d:62:
fb:bc:38:50:c2:d5:42:61:72:11:63:0c:29:9d:a4:
a3:9e:ea:7b:5f:08:38:2b:ab:d6:57:cb:16:10:4a:
f1:e2:f7:86:9a:95:68:bd:e6:cd:93:8b:ce:0f:db:
4e:f1:03:50:b4:44:85:cd:9f:4c:70:7c:a7:d0:57:
2e:7b:c4:1f:45:a9:71:70:43:55:3e:a9:1c:71:eb:
70:db:34:6a:dc:f5:f3:e7:91:90:ae:4b:96:44:cd:
44:f0:88:e8:89:b0:6d:7c:64:cc:d4:89:6b:64:89:
8e:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:55:AF:A6:6E:BC:C8:01:8E:7E:44:E0:61:6E:6F:34:73:94:AD:81
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/2VWvpm68yAGOfkTgYW5vNHOUrYE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
24:71:5e:f3:d5:0d:83:80:34:47:6f:db:bf:4e:1f:f8:ba:64:
25:6a:40:ed:d1:8b:cb:13:11:b8:a0:eb:99:0c:93:40:66:bb:
03:d4:1f:0f:bb:2b:55:d4:59:7d:4e:44:5b:43:7f:38:1f:3e:
4e:22:78:c6:05:d0:96:2e:31:85:dd:f9:6c:3d:ad:78:50:f5:
2a:5d:85:1b:c0:32:d7:1c:43:f3:a1:78:79:06:1a:8a:06:be:
ba:5b:fb:c7:3e:1a:f9:8b:ec:38:07:de:4a:63:9a:ae:eb:40:
e2:90:b5:da:56:ae:09:2c:c8:ee:76:7f:d5:d7:3d:f4:91:6b:
73:85:f3:41:29:be:df:ca:e2:dd:af:73:af:a1:b2:3b:2b:17:
f9:c1:8e:a4:57:be:bd:b9:df:90:5c:7a:b1:01:ec:72:7e:4c:
a4:df:f7:4e:30:c5:d8:57:89:19:58:60:4b:c4:e5:3a:ed:c6:
67:25:a7:a5:a1:49:2f:ab:29:cd:6a:55:6f:4e:4d:6b:7c:f1:
33:13:6d:74:10:d5:87:5f:7a:3e:67:5b:b1:99:21:fc:72:f2:
00:91:38:af:90:08:88:16:33:8b:68:13:7a:60:7c:68:62:8c:
0c:ef:ef:1d:93:47:74:d8:90:c1:49:8d:5c:01:86:56:cd:14:
67:2d:1b:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 2 10:53:29 2025 by rpki-client