Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/Vg5hXnU5u2z9CkhJ8a0XS4vDS-w.roa
File: Vg5hXnU5u2z9CkhJ8a0XS4vDS-w.roa (raw, json)
Hash identifier: 7iYW6xzSqG0mCmfWeHRbS03JfJtNxKgzICi2Xw9Lhnc=
Subject key identifier: 56:0E:61:5E:75:39:BB:6C:FD:0A:48:49:F1:AD:17:4B:8B:C3:4B:EC
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 726AA6B2
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/Vg5hXnU5u2z9CkhJ8a0XS4vDS-w.roa
Signing time: Mon 14 Mar 2022 10:04:44 +0000
ROA not before: Mon 14 Mar 2022 10:04:44 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:17f:1bf4:40b5/128 maxlen: 128
2001:67c:64:ffff:0:17f:20ac:a2bd/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:17f:87e3:2531/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1919592114 (0x726aa6b2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Mar 14 10:04:44 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=560e615e7539bb6cfd0a4849f1ad174b8bc34bec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:26:24:66:0e:56:dc:46:d9:0b:bf:bb:c3:78:
99:32:ff:19:50:21:91:2d:59:be:8f:40:cb:af:09:
e3:fe:e7:5a:94:8d:a7:c9:2f:88:a2:d2:db:8b:4e:
06:be:46:e4:25:54:fd:98:0e:a6:01:35:43:57:8e:
c3:19:87:66:cd:c3:5c:e9:fd:2d:0b:4d:23:e7:77:
54:59:1f:82:c3:b2:79:c9:ef:15:ad:c1:70:47:97:
7b:36:83:45:45:a5:92:e4:3e:87:ab:3a:09:24:ce:
b8:f7:d5:8c:28:21:5d:81:f6:ad:d2:7a:fe:07:ce:
de:48:1a:50:03:7f:1d:9a:21:f3:8c:13:31:f9:c2:
9e:68:92:0f:93:84:92:7e:00:85:1f:f8:c1:a2:81:
7f:06:b7:f7:c6:dc:d3:3f:fe:17:66:04:b1:58:82:
92:f7:d5:21:bb:79:f1:6f:75:ed:14:8b:12:80:98:
58:75:28:ea:d8:df:da:4d:c4:22:3b:0c:c8:aa:99:
66:03:a8:44:19:99:13:b6:b4:d4:fd:d7:37:89:0b:
9b:37:6d:25:c4:06:77:1f:1c:5e:df:ba:c9:80:fb:
c4:c0:25:be:0a:ad:20:13:d1:3c:9a:6d:4e:5d:84:
b5:6a:95:28:e7:3b:f8:2e:f0:5f:5e:d8:8f:9e:66:
b7:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:0E:61:5E:75:39:BB:6C:FD:0A:48:49:F1:AD:17:4B:8B:C3:4B:EC
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/Vg5hXnU5u2z9CkhJ8a0XS4vDS-w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
9c:14:61:cc:89:b2:4f:ab:2e:e3:3b:8c:7b:03:e2:fd:a4:a0:
a0:88:a8:3a:83:3d:9d:c5:a5:86:78:20:2a:2c:b1:c4:51:f4:
7f:16:e3:0f:df:0d:70:7e:36:78:55:6d:09:c0:8d:39:26:48:
ee:4c:33:e1:98:84:52:df:d3:11:7c:ab:ca:84:b3:9b:d9:dd:
c4:c5:b6:3b:b7:cc:42:28:f7:9c:c9:76:35:1c:bc:ff:51:ae:
15:ed:87:06:e6:97:da:3d:27:e6:35:7b:be:72:b0:bd:fe:d2:
74:a6:36:ef:eb:c6:a4:84:6f:67:5c:a1:1e:eb:69:a9:f3:e9:
14:09:56:d2:c3:6f:23:00:d3:59:f4:5c:4e:26:02:8f:2f:40:
05:e4:3d:7a:80:d9:d8:30:ee:bf:83:b3:e9:0c:e0:66:f2:29:
c5:f3:8d:80:50:1a:e8:4d:e1:14:34:6a:15:06:a4:7e:ad:85:
fa:83:5a:7b:9a:b2:43:e2:70:82:5d:6b:b3:f4:c2:94:8a:c7:
4d:7f:6d:64:0e:35:5a:95:96:c7:14:4f:34:cb:ca:fa:c0:43:
94:f6:14:4d:74:9a:64:19:95:60:32:b1:f6:09:e5:a4:fe:ee:
cc:11:57:b4:79:1b:b6:d8:67:60:9f:5b:7f:95:b7:a2:27:90:
61:ae:51:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 4 00:27:14 2025 by rpki-client