Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/V8hFgqvSwPLFWsjJTMeKg1Ri41A.roa
File: V8hFgqvSwPLFWsjJTMeKg1Ri41A.roa (raw, json)
Hash identifier: 2+IiyN0EjvqpU7qd/xb0M6IJQVQLDOS7A4TtvAOapoA=
Subject key identifier: 57:C8:45:82:AB:D2:C0:F2:C5:5A:C8:C9:4C:C7:8A:83:54:62:E3:50
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 814E303A
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/V8hFgqvSwPLFWsjJTMeKg1Ri41A.roa
Signing time: Thu 05 May 2022 07:04:23 +0000
ROA not before: Thu 05 May 2022 07:04:23 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:180:466e:42dd/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:180:8961:505f/128 maxlen: 128
2001:67c:64:ffff:0:180:9308:b71d/128 maxlen: 128
2001:67c:64:ffff:0:180:457:1e3f/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2169385018 (0x814e303a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: May 5 07:04:23 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=57c84582abd2c0f2c55ac8c94cc78a835462e350
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:dc:b1:78:27:d8:3a:4b:d9:ba:61:f9:e7:3a:
70:f0:80:9f:d9:98:c0:2d:10:60:9b:1f:3a:97:3d:
a5:c8:c9:04:74:e9:45:aa:6f:32:44:d5:8f:07:d7:
57:3b:97:4c:d9:4e:bb:a6:98:6d:00:19:e1:2d:1b:
97:81:4a:ab:6f:c8:0a:41:5f:dc:67:c4:cf:b2:a5:
06:4e:f1:d7:fb:10:72:e0:d1:2b:fb:00:06:75:25:
22:67:e4:85:4c:58:fe:25:b3:64:89:2b:30:7d:52:
92:68:71:c0:d9:c8:68:2c:55:88:d6:b4:80:8f:6d:
7e:27:b3:09:59:ab:d1:0c:0e:d6:11:c7:04:18:bf:
fa:1e:55:75:6d:1b:0e:af:2e:92:45:a0:de:46:40:
3d:b0:95:b8:cf:14:9f:7a:c5:e0:8e:4b:b6:5e:f0:
05:95:2d:71:dc:11:84:c3:5b:00:f0:70:53:a8:27:
f3:c6:fd:38:d6:7d:5d:35:7a:97:d7:91:08:38:11:
9d:06:3d:b1:35:c4:27:e6:98:23:b0:63:6a:a2:1f:
a1:0d:f0:58:58:5d:da:7c:c0:27:ea:f7:b6:9f:62:
07:59:5c:f1:ef:7d:86:14:e1:5a:57:15:5b:54:59:
4e:b0:be:8e:e6:a1:d3:8a:5f:2f:bd:22:3a:15:a2:
ad:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:C8:45:82:AB:D2:C0:F2:C5:5A:C8:C9:4C:C7:8A:83:54:62:E3:50
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/V8hFgqvSwPLFWsjJTMeKg1Ri41A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
af:c9:48:cc:13:b4:40:d0:23:db:3f:fb:6d:62:27:9b:e0:8a:
e3:eb:fd:68:a4:f9:b7:05:b0:eb:d2:36:a1:d1:c0:29:c7:e3:
a7:8f:ca:6b:7b:ad:eb:01:dd:46:ea:ea:6b:e7:87:3e:35:9a:
36:2e:a6:42:15:a9:95:5b:90:74:87:c6:a9:ba:53:9a:6a:dc:
c5:36:5e:5c:af:64:da:af:86:d9:01:14:81:db:70:be:b9:20:
ca:40:35:f1:7d:43:b8:37:4b:5f:10:a2:fd:47:78:12:dd:38:
e4:84:36:18:f6:9a:86:d6:65:0d:14:8d:5c:fc:cf:18:47:4d:
a7:01:f7:78:73:ca:60:ab:c5:00:4f:26:6c:2a:dd:c5:92:c8:
14:62:92:02:17:13:86:a9:ee:39:21:31:0d:37:75:7e:f9:bd:
1b:80:48:b0:d6:bf:fd:02:86:2c:5d:11:ed:50:b2:b6:6a:70:
ba:b9:55:6e:65:f5:30:6a:5d:9f:cb:af:67:39:b8:c8:ce:ff:
2e:df:6c:4c:3e:49:54:d4:16:32:ff:fa:90:53:96:5d:bc:31:
b3:60:a8:b1:9d:2b:99:03:42:2a:85:75:f8:7b:91:49:50:e0:
9f:da:a8:21:8e:1f:5b:1b:b0:52:7f:e6:ce:64:9d:dd:56:f9:
ce:3f:cf:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 06:56:10 2025 by rpki-client