Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/5vaz0GgCS5PtOFuYIIIJ0mz44oc.roa
File: 5vaz0GgCS5PtOFuYIIIJ0mz44oc.roa (raw, json)
Hash identifier: 61SS0TofmGc5R54V6rygorcVz4Z0SJQumADMHFZP830=
Subject key identifier: E6:F6:B3:D0:68:02:4B:93:ED:38:5B:98:20:82:09:D2:6C:F8:E2:87
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0185AA9E14D2D60A6DD556525A62D788A53D
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/5vaz0GgCS5PtOFuYIIIJ0mz44oc.roa
Signing time: Fri 13 Jan 2023 10:12:44 +0000
ROA not before: Fri 13 Jan 2023 10:12:44 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:185:3dcc:d8f/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:aa:9e:14:d2:d6:0a:6d:d5:56:52:5a:62:d7:88:a5:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Jan 13 10:12:44 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=e6f6b3d068024b93ed385b98208209d26cf8e287
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:e2:1e:1f:f4:74:a9:fb:44:fe:97:12:b9:a8:
42:0b:67:d2:ed:03:47:87:2b:4c:36:80:f7:f8:ca:
14:af:29:3a:c7:a4:3c:49:d7:a4:e7:cc:8f:12:6e:
6f:ae:65:58:76:92:58:ab:29:ce:5f:bf:3f:0d:88:
13:2b:70:0f:0e:64:13:58:2b:71:75:ad:47:96:e5:
b5:da:86:4e:59:b4:7b:1a:e6:83:1a:b4:d0:20:15:
f5:5e:f8:95:3d:a9:f1:77:7d:70:7c:76:5f:35:37:
60:bd:2d:ca:9c:ff:92:86:ff:80:81:37:4e:85:5f:
a7:61:17:29:d5:c7:cd:5b:7b:8f:1a:54:97:eb:08:
a1:00:ed:ee:df:bb:97:32:df:91:e3:98:6a:04:07:
9e:a9:eb:fd:31:65:85:a3:97:0b:cc:e9:cc:93:24:
d6:c3:05:d5:3c:a2:80:72:34:0f:fd:e5:ca:d6:b6:
cd:2a:7c:04:7d:37:c4:e0:11:80:76:d5:43:27:65:
9d:31:ab:05:9f:8a:66:73:42:62:49:eb:c0:cb:8f:
79:e3:8f:7a:2e:89:d8:b6:50:4f:e2:9e:a1:d5:6d:
eb:91:08:85:2b:f6:35:64:3f:3d:ac:a8:9f:4c:34:
eb:ba:8b:96:65:c0:65:3f:8f:66:e8:ce:ea:db:5c:
ce:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:F6:B3:D0:68:02:4B:93:ED:38:5B:98:20:82:09:D2:6C:F8:E2:87
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/5vaz0GgCS5PtOFuYIIIJ0mz44oc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
12:18:53:ac:29:b5:66:3c:dc:ea:aa:9f:30:4e:9b:ba:85:fe:
d9:69:9a:36:67:c0:06:35:a4:c0:5d:d1:d9:d1:b5:a1:92:4e:
71:ba:7a:91:d8:c5:76:56:9b:2b:fc:49:c3:91:8f:93:f9:2c:
5a:18:d1:be:a6:e7:ba:1d:9b:61:07:af:c7:b8:61:c5:65:8a:
b1:f0:09:13:1a:c6:95:20:a9:10:50:20:3e:2c:56:f5:fe:94:
6a:e1:1c:f0:25:f8:2c:1d:47:37:33:f8:41:05:27:4e:19:ea:
26:af:cc:8d:5b:62:75:03:99:21:57:f5:68:ba:98:09:f6:15:
b7:71:80:04:ea:77:8b:97:b4:25:c4:2e:8d:ee:a8:e6:4d:7c:
37:bb:2c:c7:8e:39:4e:77:9b:86:04:1e:03:ed:a4:f0:68:75:
e2:39:20:41:13:a8:e3:50:b5:9c:dc:1b:ec:5c:ec:79:d8:a4:
bc:b4:64:a8:a0:ab:57:a3:40:3e:77:35:3d:a5:99:23:42:4f:
2d:19:c7:ce:1c:4d:08:60:1a:c6:66:f4:ce:94:94:32:10:d2:
66:cc:cd:e5:46:30:19:5f:5c:98:9d:db:bc:51:2a:b6:c9:1f:
f5:d0:36:03:7d:91:f5:bc:46:f7:00:f3:d5:83:ca:07:c7:b9:
a5:dc:28:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 20:16:38 2025 by rpki-client