Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/VjaUMh2JwQQArt-J8V3JexIuQ9E.roa
File: VjaUMh2JwQQArt-J8V3JexIuQ9E.roa (raw, json)
Hash identifier: ZqH0ME/BRD9lWGg7YXnIYe1bWU6ag3H4ZQxrboamqNs=
Subject key identifier: 56:36:94:32:1D:89:C1:04:00:AE:DF:89:F1:5D:C9:7B:12:2E:43:D1
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 018957EFF7EF1F2B1E03FE4A4F1A736D7B68
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/VjaUMh2JwQQArt-J8V3JexIuQ9E.roa
Signing time: Sat 15 Jul 2023 05:04:51 +0000
ROA not before: Sat 15 Jul 2023 05:04:51 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:188:5fe2:b396/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:187:4695:a68a/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:188:7858:a003/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64:ffff:0:187:fa9a:b088/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:187:b2b8:a7dd/128 maxlen: 128
2001:67c:64:ffff:0:189:57ef:9956/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:57:ef:f7:ef:1f:2b:1e:03:fe:4a:4f:1a:73:6d:7b:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Jul 15 05:04:51 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=563694321d89c10400aedf89f15dc97b122e43d1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:c2:54:5b:ee:b9:d1:c0:d4:02:7c:91:47:2c:
d5:e6:aa:15:e6:8c:73:06:e3:5f:da:10:10:29:43:
1c:8d:8e:84:f0:bc:c1:40:5d:f4:1f:54:16:9f:61:
e4:f9:39:88:ba:6a:b8:e5:e5:e7:c1:bd:39:31:ef:
6e:e7:c1:eb:2c:2a:73:2f:eb:70:73:69:e5:52:90:
14:72:6f:85:0e:41:28:c2:da:4a:35:d2:c2:f1:46:
3c:ab:d7:df:b7:20:67:40:4d:68:98:ba:c5:17:b1:
56:69:76:2e:be:ff:1b:11:38:fb:e9:a1:ca:ea:9b:
d7:b4:29:58:7c:db:c4:0e:03:d4:98:58:c6:1c:65:
8d:2e:7a:ba:ea:b7:76:72:f8:9a:11:05:4a:96:56:
59:e3:51:75:74:b0:6d:b7:bc:4f:20:51:3e:e9:db:
96:71:e1:f3:50:b3:9d:db:c8:0f:be:1b:95:72:45:
39:ee:74:5f:02:33:80:f0:c2:7b:d3:29:fc:c9:33:
35:f1:a9:b4:06:4e:b4:29:80:d8:cf:f6:df:2a:0c:
f5:fa:df:f7:7d:3d:ee:e9:61:fa:24:73:07:34:db:
51:f6:82:dd:ce:88:3c:08:cf:29:38:c8:26:66:ef:
44:62:26:5c:7f:60:4d:ab:2d:32:75:01:37:8c:bd:
6f:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:36:94:32:1D:89:C1:04:00:AE:DF:89:F1:5D:C9:7B:12:2E:43:D1
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/VjaUMh2JwQQArt-J8V3JexIuQ9E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
af:18:40:43:85:75:b9:bd:14:98:3f:3e:33:4e:5e:94:a8:10:
90:f6:68:96:43:90:f6:e3:de:ea:eb:17:4a:a5:f3:81:fb:6f:
2e:a5:02:b6:f5:e0:78:4b:40:0f:9e:14:7e:b8:9a:d4:7a:f1:
74:16:9c:3c:01:72:bd:02:d7:80:d7:26:69:e6:7a:8b:d8:f1:
89:35:5c:85:fd:8b:74:22:a9:32:f7:6a:04:84:0e:73:3d:e4:
d6:f5:6f:05:f8:0a:dc:88:cd:b0:8c:f7:90:ee:0e:eb:e2:f5:
f7:bf:84:b8:8e:ba:78:64:f3:2d:fd:ce:f3:55:87:58:1e:96:
a7:d1:40:1d:e5:44:2b:76:4b:98:9e:e1:27:da:77:6f:d4:95:
26:6c:3e:45:e0:ad:2f:ea:ad:1e:61:8c:0f:40:2e:06:d0:9f:
d6:88:fe:ae:d8:63:2d:c2:27:0e:70:24:3f:71:68:d0:7a:f4:
03:46:05:3b:4c:20:76:54:07:eb:d7:60:a7:e7:9f:c7:aa:ce:
10:03:b0:31:02:20:dc:cb:49:1b:82:9d:31:dc:2a:6c:b1:55:
1f:74:73:1d:f7:21:24:89:ff:15:16:cf:40:d6:52:23:8d:5b:
db:3e:74:22:d0:4b:6d:46:d4:59:01:fd:e3:c8:ed:99:af:44:
07:79:99:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 3 02:22:10 2025 by rpki-client