Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/VC8z30c3ZGjAjF-EKWt-I73RuUY.roa
File: VC8z30c3ZGjAjF-EKWt-I73RuUY.roa (raw, json)
Hash identifier: nz/g4mUYx9509uHsz125CYeFmGQWbXTVGr6g9PJ6hms=
Subject key identifier: 54:2F:33:DF:47:37:64:68:C0:8C:5F:84:29:6B:7E:23:BD:D1:B9:46
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0184ACFDBED61B5BA878FDA8DD89EFC907B0
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/VC8z30c3ZGjAjF-EKWt-I73RuUY.roa
Signing time: Fri 25 Nov 2022 04:13:41 +0000
ROA not before: Fri 25 Nov 2022 04:13:41 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:184:9f03:9814/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:ac:fd:be:d6:1b:5b:a8:78:fd:a8:dd:89:ef:c9:07:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Nov 25 04:13:41 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=542f33df47376468c08c5f84296b7e23bdd1b946
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:f0:71:cf:d4:a9:d4:4a:77:73:6f:f3:24:9b:
0f:73:86:9a:d8:ac:07:3d:86:a2:ff:0a:5e:89:e0:
7e:ac:af:b5:24:7f:80:fc:8c:dd:5a:6b:f5:72:40:
47:cc:51:8e:93:c4:44:60:f7:55:1d:c9:5c:65:69:
f3:1d:dc:f6:36:e3:49:e4:0b:9d:04:c0:d4:6f:32:
31:d1:51:22:de:31:ec:aa:ce:3f:ed:e1:89:42:24:
01:1a:55:f2:cd:33:97:7b:30:95:80:60:f6:99:3d:
b3:18:ac:c9:f8:f2:ff:7c:88:f3:6c:b0:be:ec:ce:
0a:04:53:c4:ba:d0:29:c6:52:b1:87:1a:e6:13:73:
f4:6f:37:98:30:99:e2:88:83:03:32:f6:82:eb:34:
fb:95:66:69:0a:9d:4d:fc:fd:04:bd:a3:f4:9d:6c:
08:f2:42:ae:8e:a0:91:90:3f:7c:92:22:85:f9:29:
13:4f:ad:48:d0:c1:8c:d3:34:6d:69:a4:cc:0a:ba:
16:53:06:00:c7:b7:3d:83:25:4d:80:c8:9c:d3:cd:
25:40:55:6e:c3:8d:e4:53:14:47:de:79:6d:aa:12:
5f:f8:16:b2:0f:ad:78:b8:f6:79:f6:46:8c:a9:e0:
5f:36:5f:cd:1a:a0:52:15:44:47:e8:a3:47:3b:9a:
aa:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:2F:33:DF:47:37:64:68:C0:8C:5F:84:29:6B:7E:23:BD:D1:B9:46
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/VC8z30c3ZGjAjF-EKWt-I73RuUY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
51:c4:94:10:ae:e3:e0:41:3c:a8:97:13:83:51:e7:53:85:f9:
0c:55:1f:5b:c9:e9:a2:24:e0:20:5c:69:56:8f:fb:29:c6:0a:
9b:c0:1b:e7:01:8f:32:6c:0e:dd:c0:48:1a:31:6a:f5:0b:73:
88:da:02:f8:01:24:1a:64:d0:e4:84:c7:b6:6e:03:53:19:65:
aa:d0:72:65:7c:85:c9:29:12:66:45:15:2e:6b:34:d2:e0:bb:
0a:9f:16:b7:35:76:42:54:57:3b:d3:3a:03:13:7e:19:28:9f:
f4:4a:66:0e:65:4b:f2:54:1f:15:41:52:18:a0:42:63:fc:d2:
34:29:ed:f9:25:fa:70:3a:5f:64:67:15:ee:48:55:0a:26:94:
73:91:73:b4:af:c3:b2:6f:c3:f1:dd:31:e6:4d:5f:ca:0e:a3:
c4:08:22:8f:2e:70:ae:cc:09:4b:47:94:54:ef:56:1f:51:1c:
44:8a:50:01:43:6f:3d:4a:5a:0f:9c:49:1e:17:f7:c2:df:a3:
c8:23:79:62:da:0f:7c:8e:bd:fd:ee:1f:dd:78:c2:41:0f:63:
c4:bc:69:cd:10:81:52:d0:4c:8d:85:06:11:7c:f3:01:1f:58:
9e:07:e6:2f:c1:95:a5:2f:a9:5b:69:e8:38:8b:b2:15:af:ab:
23:b9:ba:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 17:36:26 2025 by rpki-client