Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/VE7XxTPjTwiaPFFFzor7HuxEpEg.roa
File: VE7XxTPjTwiaPFFFzor7HuxEpEg.roa (raw, json)
Hash identifier: 4z/yKJzFsNoTGV6XlSksHZm1fBp3uh/oQZiYwor2KrA=
Subject key identifier: 54:4E:D7:C5:33:E3:4F:08:9A:3C:51:45:CE:8A:FB:1E:EC:44:A4:48
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0186D2BE0698526C23A8FFC96A86C8DAA540
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/VE7XxTPjTwiaPFFFzor7HuxEpEg.roa
Signing time: Sat 11 Mar 2023 22:15:14 +0000
ROA not before: Sat 11 Mar 2023 22:15:14 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:d2:be:06:98:52:6c:23:a8:ff:c9:6a:86:c8:da:a5:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Mar 11 22:15:14 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=544ed7c533e34f089a3c5145ce8afb1eec44a448
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:bb:34:30:c0:ce:4e:c6:e6:ae:fe:f8:e2:cf:
a5:17:f9:99:c9:db:c2:6b:b4:10:8b:ca:ff:de:ff:
24:7a:e5:3a:91:a0:21:25:9c:04:c9:4e:2d:6c:d1:
d5:a0:1f:41:19:e3:a0:ab:3b:af:9e:7e:51:5a:9b:
1c:c7:36:8e:eb:5d:19:7a:1a:f3:0e:e3:4a:a5:18:
42:17:ac:5d:5a:ae:f2:a0:8b:f4:1c:a1:c5:65:0f:
5c:d7:91:15:cd:bc:3c:ba:e9:1c:77:7d:da:5e:2e:
4f:59:09:1a:65:67:0d:a2:e8:ce:49:d8:a9:07:11:
1c:ed:ec:54:51:36:30:a4:ee:a3:55:57:01:c6:48:
79:52:a7:34:cd:15:30:6c:14:3e:5a:52:27:05:b8:
1e:6c:b5:ef:ac:d4:5f:90:42:10:68:58:6b:ee:58:
83:01:75:dd:07:86:0e:13:2f:a7:a5:01:f5:a6:31:
f3:67:45:82:34:96:40:63:27:e8:4a:c9:ed:ef:5b:
e3:3b:a0:cc:4a:f9:39:9a:25:79:8f:64:c7:b1:13:
13:7c:60:13:49:fc:b3:78:9c:4d:5e:17:f3:49:9b:
39:30:2e:a2:6d:b2:81:18:b4:32:1c:4c:49:e1:22:
04:d7:d6:b7:d2:f6:d9:d2:3d:d3:d2:5d:94:64:4e:
b7:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:4E:D7:C5:33:E3:4F:08:9A:3C:51:45:CE:8A:FB:1E:EC:44:A4:48
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/VE7XxTPjTwiaPFFFzor7HuxEpEg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
95:20:63:ca:94:de:14:32:99:c5:5a:f4:4b:f4:7e:9d:67:78:
7c:6c:63:3a:a7:21:e2:4c:7f:2d:44:7e:83:f7:ad:d2:fd:70:
cf:c0:a0:6b:de:45:a3:31:58:a3:66:d1:65:ec:44:98:c4:9c:
59:19:60:0f:62:c0:a9:77:62:09:10:c0:c8:4f:3a:0a:d3:46:
a5:bf:18:db:9d:27:ab:ef:9c:cb:f8:9b:43:b4:3a:75:34:cb:
40:ff:ac:4b:14:eb:69:c5:a7:0e:bb:4b:94:17:78:fe:5f:8d:
71:71:cd:b5:8a:df:bf:41:1e:a0:f1:a4:88:15:96:41:af:14:
40:93:cb:5d:9c:2e:e3:1a:91:b9:0b:3f:fb:1a:8f:67:f5:2a:
80:31:6d:55:75:82:69:b6:4d:3a:db:a7:3a:86:de:9c:e7:0e:
80:bb:f7:83:d0:4b:8f:9b:81:4c:43:46:fa:0c:e3:f7:45:9e:
12:b6:c3:64:f2:2e:e9:77:cb:93:f5:29:da:15:f2:f2:e0:6e:
97:32:ab:29:10:41:fb:67:fa:33:a0:a6:8e:99:a7:06:76:cd:
d7:d1:37:c7:36:ac:88:40:34:7e:39:75:2c:f9:83:c1:0e:a9:
8f:bf:a9:a5:73:0d:a5:ca:46:3f:c5:97:e8:f4:9b:f8:f7:29:
4a:73:8b:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 21:42:08 2025 by rpki-client