Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/Vg7I6z_pkizIV60084bUDHYAifw.roa
File: Vg7I6z_pkizIV60084bUDHYAifw.roa (raw, json)
Hash identifier: 7wq/BnE9lusvANIHsEgll0TnxwsQo2nI3G6s4De8d4E=
Subject key identifier: 56:0E:C8:EB:3F:E9:92:2C:C8:57:AD:34:F3:86:D4:0C:76:00:89:FC
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 01855DFFC773DC14C21838F44B9D7F254398
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/Vg7I6z_pkizIV60084bUDHYAifw.roa
Signing time: Thu 29 Dec 2022 13:08:41 +0000
ROA not before: Thu 29 Dec 2022 13:08:41 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:185:3dcc:d8f/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:5d:ff:c7:73:dc:14:c2:18:38:f4:4b:9d:7f:25:43:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Dec 29 13:08:41 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=560ec8eb3fe9922cc857ad34f386d40c760089fc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:b0:10:52:0a:83:60:05:4a:f8:48:cf:a6:f4:
57:8c:24:d1:f8:7c:30:c3:a0:42:c2:df:4b:91:0a:
6c:59:fb:0b:d5:8b:e4:04:b8:59:0f:e9:29:01:de:
39:80:9f:30:f7:ff:1e:57:f1:a7:cd:26:7d:97:2e:
67:68:36:ce:32:f4:ca:9a:0d:40:b7:68:2f:d0:20:
7e:49:a6:68:df:f7:10:a5:75:e8:7b:86:2d:96:be:
e3:f8:4d:ca:c3:fd:a9:55:a5:3a:d0:fd:f1:0a:ad:
79:26:bb:d8:ef:d8:1b:fb:f6:7c:72:4e:b2:27:60:
0b:0a:29:35:6d:16:8e:1f:26:03:4e:19:45:3d:e9:
0c:1a:57:d6:ef:93:ac:34:fd:bb:0d:35:01:b8:a5:
08:0a:44:2f:f5:5c:0b:08:7e:9b:9e:01:54:8a:a8:
67:47:e4:d1:47:12:f6:a5:9d:87:d5:f4:8f:cb:16:
a8:51:5d:fc:05:31:03:4c:3d:43:d4:f9:13:89:9e:
70:a5:23:43:0b:ae:30:1e:03:83:5f:80:58:aa:cb:
bf:5e:d3:d7:9b:e9:fe:32:c6:84:2e:97:67:06:a1:
a8:0e:1d:9b:26:6d:97:6e:e6:ee:19:02:4f:cb:61:
0b:8f:7f:70:72:5f:d2:d3:73:51:64:8a:70:05:8a:
e4:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:0E:C8:EB:3F:E9:92:2C:C8:57:AD:34:F3:86:D4:0C:76:00:89:FC
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/Vg7I6z_pkizIV60084bUDHYAifw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
70:6b:46:0a:4f:91:76:53:df:3c:a6:56:5b:45:d6:b5:5f:91:
3f:9b:32:3a:0d:6a:c2:e2:d8:a3:1e:fd:06:60:aa:e0:4b:c0:
5c:15:f4:c8:8b:49:2f:b2:a9:21:bd:24:81:88:6c:59:cd:58:
7a:12:a5:f0:b6:0f:b6:73:7e:5b:4f:ae:a8:57:98:fc:ec:48:
82:d4:9d:ae:7b:9c:02:f3:62:dc:9c:56:7d:42:39:5a:e3:31:
0f:de:7a:fb:56:77:39:eb:f8:db:e8:da:6a:8a:bb:09:4c:53:
60:94:f7:a9:42:39:0b:4b:e0:d2:a0:f6:d8:3d:34:b1:d0:6e:
87:3f:02:71:ea:f0:2d:92:e7:05:44:93:0e:2b:d7:cb:d1:d7:
d6:8c:42:3c:9e:88:b0:34:41:e4:7b:4a:0b:3e:4e:95:1d:a2:
60:c6:e1:7e:97:10:bb:2b:e4:67:65:1d:1a:79:4c:4c:c3:ce:
dd:66:22:ad:cd:55:6c:f6:c6:95:b0:fd:f1:fb:59:e2:24:5a:
20:dd:ab:90:7b:7a:a2:3f:53:fe:84:e6:f7:36:36:2d:e0:59:
0c:bd:56:ad:dc:84:5e:9c:fb:b4:d8:57:98:44:02:92:90:04:
5e:1f:f6:c9:68:b3:06:6d:3c:87:ca:8c:0b:a2:e9:f5:69:37:
90:98:d9:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 07:22:50 2025 by rpki-client