Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/Vli5Li2Ie-XRcx5Mu7rdXebozwE.roa
File: Vli5Li2Ie-XRcx5Mu7rdXebozwE.roa (raw, json)
Hash identifier: rbyf5QMTvV9SEfOjZLXhJ93gTUHVZ0uZ791cJGY5ulI=
Subject key identifier: 56:58:B9:2E:2D:88:7B:E5:D1:73:1E:4C:BB:BA:DD:5D:E6:E8:CF:01
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 018677201821834093E714CE8C5B9B9A56E0
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/Vli5Li2Ie-XRcx5Mu7rdXebozwE.roa
Signing time: Wed 22 Feb 2023 03:17:17 +0000
ROA not before: Wed 22 Feb 2023 03:17:17 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:77:20:18:21:83:40:93:e7:14:ce:8c:5b:9b:9a:56:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Feb 22 03:17:17 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=5658b92e2d887be5d1731e4cbbbadd5de6e8cf01
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:95:55:31:0e:a0:ff:b0:35:61:47:d7:f7:c4:
cc:49:47:45:98:76:ef:35:a4:99:46:9a:6a:e2:26:
ad:58:5f:25:22:ca:03:a7:22:01:c4:c0:7d:2d:00:
20:24:c3:4e:b5:0a:11:dc:e8:79:10:c1:98:f9:1c:
7b:6c:06:e2:af:59:74:09:45:be:63:54:35:13:bf:
e4:32:d3:46:4e:71:ce:ea:79:b4:9b:03:af:3b:32:
e3:0b:ac:6c:8e:0d:54:57:c4:50:78:07:c0:92:e4:
2a:56:3e:6b:59:50:4a:b5:53:f8:ff:1d:2c:34:7f:
0a:6f:50:62:d5:29:54:93:c9:58:76:70:bc:b7:ad:
58:27:b8:70:ac:1b:66:34:5c:8e:2b:bb:62:ec:b4:
97:1a:d1:1f:76:52:83:19:30:a0:04:eb:5b:0b:1e:
f4:14:ca:ec:cc:6c:b8:ee:e9:41:80:d2:1a:da:f4:
76:d1:61:6b:8b:b4:24:36:89:eb:1d:e1:db:6c:4c:
0c:64:db:26:1d:47:0a:95:5c:b7:bf:69:a6:a4:0e:
9a:85:ee:0e:0e:f1:ce:67:d8:b8:15:05:a7:b4:ee:
48:45:fa:0a:1a:93:db:b5:ed:dd:4b:2c:bc:60:bc:
7a:23:eb:a1:f8:c8:b8:c5:ae:c1:42:8c:ba:59:f9:
fb:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:58:B9:2E:2D:88:7B:E5:D1:73:1E:4C:BB:BA:DD:5D:E6:E8:CF:01
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/Vli5Li2Ie-XRcx5Mu7rdXebozwE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
7f:a5:5e:cf:89:08:63:ea:cb:68:00:bc:b7:51:ab:7f:a3:31:
d5:8f:43:7a:fe:de:55:c8:d7:79:44:f6:df:40:42:87:76:4e:
11:80:d9:87:21:cf:eb:62:d7:a4:f3:8e:01:73:30:4f:7f:60:
b6:63:40:83:3d:ba:d4:4e:fe:0a:84:c4:d4:66:8f:7a:f7:8d:
2e:50:c2:26:61:b5:d2:40:38:83:3b:1e:f6:cf:32:2c:f1:b0:
4f:0d:78:39:97:e1:b6:18:cc:c6:ba:f9:92:5a:24:8c:06:68:
23:34:61:7f:32:25:5b:cf:29:54:bf:a6:40:d3:b3:44:83:41:
9c:03:40:93:08:33:ff:00:2e:32:57:bc:c5:93:17:d5:85:25:
a6:3b:ac:71:32:3c:5f:04:38:cb:47:b6:fb:a9:7d:34:46:4c:
70:e6:44:00:e4:99:0c:a7:58:53:23:6d:c1:03:39:94:b3:00:
68:05:7e:00:42:e6:3b:e1:60:e1:80:a0:91:c1:89:ad:01:d1:
1d:db:14:95:ff:1e:9a:e2:77:f3:26:28:23:46:e2:26:31:45:
9d:bd:0a:6b:95:f5:65:94:9e:df:1a:eb:44:a1:f6:c3:1f:63:
32:e4:84:29:38:dd:77:d8:23:e7:4e:35:fe:68:32:ec:03:f1:
3e:a6:cb:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 20:06:31 2025 by rpki-client