Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/VswnhzlvtZOlnSNO4zDI83AMo6U.roa
File: VswnhzlvtZOlnSNO4zDI83AMo6U.roa (raw, json)
Hash identifier: qLWIK8CPNd2gpwaLTvi0sm4PMWeaVa/FUuaV/QRjJ6c=
Subject key identifier: 56:CC:27:87:39:6F:B5:93:A5:9D:23:4E:E3:30:C8:F3:70:0C:A3:A5
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 8AF68571
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/VswnhzlvtZOlnSNO4zDI83AMo6U.roa
Signing time: Wed 08 Jun 2022 10:16:02 +0000
ROA not before: Wed 08 Jun 2022 10:16:02 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:181:22f:7a99/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2331411825 (0x8af68571)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Jun 8 10:16:02 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=56cc2787396fb593a59d234ee330c8f3700ca3a5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:a4:b4:f0:10:1f:6e:01:bc:ea:51:be:f0:81:
72:31:ab:b5:86:ac:f5:f9:eb:05:0d:53:7b:41:0b:
c7:2e:ff:dd:70:91:8a:d5:4a:1a:e5:9b:c1:48:cd:
e4:1b:a1:18:9e:b2:f2:6b:32:5e:67:18:a4:9d:bf:
cd:5d:0d:a0:0f:a5:e2:8f:5e:f8:ea:56:4b:99:03:
e0:93:3f:98:79:de:dc:3a:b2:de:ea:74:d7:e8:ad:
11:fc:7c:f2:2a:0d:70:44:84:2f:47:70:9a:20:31:
fc:2a:51:08:76:87:46:84:26:22:1c:6c:82:5d:cd:
be:5c:1e:dd:26:b4:d7:ee:9f:d8:48:08:e6:27:8c:
c1:ee:a0:99:de:b9:e8:08:21:7a:21:a6:29:bd:72:
a3:cb:08:d2:9a:5f:0a:18:e9:93:b4:0e:8b:28:b1:
ae:6b:91:29:38:0d:6e:8c:d5:33:97:e7:c0:a1:06:
23:e9:19:8c:a3:da:d9:5a:ca:74:ea:4d:54:e6:d5:
11:f3:05:d7:1e:c8:22:be:10:9e:ff:d0:61:8f:38:
04:68:dd:98:61:94:d3:df:d9:0c:62:9d:b4:7a:9d:
6b:10:9d:3a:19:c4:af:3a:68:2b:71:13:ec:8a:bb:
a2:40:17:34:f2:e8:d4:b2:d2:22:e2:0e:88:5f:fd:
1b:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:CC:27:87:39:6F:B5:93:A5:9D:23:4E:E3:30:C8:F3:70:0C:A3:A5
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/VswnhzlvtZOlnSNO4zDI83AMo6U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
37:de:b6:4b:51:49:2a:2a:a9:11:e3:e3:6b:b1:32:c3:d3:af:
dd:b7:64:71:68:93:eb:00:b5:a5:96:ac:d7:4a:31:6d:5b:3f:
84:e0:cc:fe:fd:03:e4:f6:5f:6f:6f:f3:84:3d:78:46:95:80:
a1:11:ef:fe:d0:90:1c:01:09:ff:73:1d:a4:ca:ab:8a:b9:a7:
98:92:0f:1f:97:df:87:68:3a:b2:8a:1a:47:33:80:94:cd:3b:
cb:bd:15:a9:f6:5a:fb:57:42:e4:53:4c:3b:05:76:a0:58:2b:
e4:ee:7d:18:01:5e:b1:cc:eb:26:03:be:b5:7a:99:d1:59:d6:
8f:d9:df:bf:4c:d9:4c:51:04:b0:b8:a0:40:73:4a:e1:bb:d9:
14:61:9a:c0:50:f5:a4:b5:7d:9f:ba:f8:14:63:d1:13:91:31:
1a:c4:3e:ec:76:44:29:72:aa:91:87:61:f9:f3:3a:6f:77:1e:
7d:f6:1e:bb:54:30:93:25:12:e8:5e:83:dd:a8:3c:57:e6:34:
65:2a:93:c1:cd:6e:b8:85:2a:e0:a6:0a:73:5f:7b:dd:a9:16:
2a:26:08:57:32:3c:52:0f:0b:45:be:22:64:37:b6:1f:ca:d9:
aa:f7:84:0d:fb:63:b4:de:f8:9d:ba:11:36:55:00:67:26:bd:
56:a4:93:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 01:48:00 2025 by rpki-client