Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/Ve557tXoAkqX0CNl0MD-alsQGvk.roa
File: Ve557tXoAkqX0CNl0MD-alsQGvk.roa (raw, json)
Hash identifier: L64jjXQAmPt9fgeytkM9AYAL6+zMhauev0OpcNMGEGI=
Subject key identifier: 55:EE:79:EE:D5:E8:02:4A:97:D0:23:65:D0:C0:FE:6A:5B:10:1A:F9
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0185BCA0EEF915D749F7245AF7AC201259B0
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/Ve557tXoAkqX0CNl0MD-alsQGvk.roa
Signing time: Mon 16 Jan 2023 22:09:01 +0000
ROA not before: Mon 16 Jan 2023 22:09:01 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:185:ba40:6692/128 maxlen: 128
2001:67c:64:ffff:0:185:3dcc:d8f/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:bc:a0:ee:f9:15:d7:49:f7:24:5a:f7:ac:20:12:59:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Jan 16 22:09:01 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=55ee79eed5e8024a97d02365d0c0fe6a5b101af9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:85:2d:ea:f7:39:d2:c1:7d:26:40:89:fb:73:
19:0f:03:a7:73:d2:c3:61:cd:c1:fa:53:ea:dd:08:
02:9b:33:f2:97:bf:73:fb:10:8b:51:71:fd:33:95:
ce:76:d1:d0:bd:2d:db:fd:04:05:78:87:e1:bb:db:
06:a6:8e:ca:cd:42:42:48:02:40:12:2f:42:c9:f7:
01:57:8e:ca:ac:dc:ab:8c:9a:5f:e0:73:f7:a9:3f:
fc:74:a0:40:36:e9:2d:b1:a2:9e:14:85:b9:d4:96:
78:e3:87:34:7d:68:a6:44:b5:37:34:40:f8:9f:83:
5c:b5:0c:9b:38:cd:0e:a8:b5:44:b9:de:ef:a9:4f:
d2:dd:07:b8:4f:45:da:69:26:6c:97:e6:8b:7e:15:
9a:2a:b6:63:1f:5b:36:10:ad:29:a1:33:42:16:a3:
f2:19:21:ad:c6:7e:1e:ae:8d:2a:e9:b4:41:fd:35:
29:4b:ff:35:f2:ca:f2:40:29:ce:06:f5:b7:e6:92:
c7:f8:43:bb:b9:ed:6d:14:61:3f:53:68:ad:89:74:
4d:19:6f:99:0b:c0:d3:6d:84:e2:55:6d:19:7e:1b:
a2:e3:c0:62:2a:8f:d9:63:47:78:b6:db:42:54:a9:
3c:68:f9:ef:75:2f:19:54:69:b1:94:4e:e5:1c:f7:
c6:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:EE:79:EE:D5:E8:02:4A:97:D0:23:65:D0:C0:FE:6A:5B:10:1A:F9
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/Ve557tXoAkqX0CNl0MD-alsQGvk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
70:06:8b:c9:25:de:4f:d7:43:8e:f4:b7:52:54:b0:c7:7b:72:
5b:58:3c:dd:0f:1c:5d:28:2e:9f:a5:62:47:07:53:49:42:cb:
8f:fe:73:11:89:65:68:e7:1f:0d:3d:3d:6d:41:85:4d:b7:09:
11:d8:c0:e8:2b:67:d7:c4:b8:0c:26:5e:58:c2:e8:d4:a9:d6:
dd:5f:da:14:61:3c:a2:42:64:b0:6c:b0:50:e2:7c:54:8e:88:
d8:56:2b:34:dd:fb:04:e3:6e:a8:12:66:70:27:34:67:b0:69:
b9:cf:7b:9d:75:22:6a:a5:f4:e5:3e:c4:a8:a0:58:8a:53:11:
f8:d2:b2:34:b1:30:4e:f9:fb:ac:5c:8a:d4:92:36:19:30:74:
bd:e1:de:0d:e9:8c:08:98:ba:62:d5:62:0b:de:ea:74:2f:11:
54:99:a3:d1:77:76:20:39:66:9c:ad:f9:f7:ff:67:59:26:09:
4e:45:e7:ef:f6:91:52:c9:2f:b3:fa:f1:31:9a:90:e8:02:f1:
77:67:21:85:e6:14:97:01:7a:a8:10:4c:b3:48:e6:44:56:49:
b8:d9:f8:11:dc:02:3e:33:09:8c:e0:9d:04:02:1a:00:f1:12:
9e:90:fa:6f:27:85:dd:d9:f6:c7:72:ab:13:c0:4d:00:9d:46:
fa:5e:0f:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 3 14:00:52 2025 by rpki-client