Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/Vu661uayrSSmRU_JMrRPMIatrGg.roa
File: Vu661uayrSSmRU_JMrRPMIatrGg.roa (raw, json)
Hash identifier: mmq9rsVyvv2Ldv1zZHXqHLRZqVSvPNfMpUS0bFU6gEY=
Subject key identifier: 56:EE:BA:D6:E6:B2:AD:24:A6:45:4F:C9:32:B4:4F:30:86:AD:AC:68
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 018709ADF008846825349326B1794D4A076A
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/Vu661uayrSSmRU_JMrRPMIatrGg.roa
Signing time: Wed 22 Mar 2023 14:16:46 +0000
ROA not before: Wed 22 Mar 2023 14:16:46 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:09:ad:f0:08:84:68:25:34:93:26:b1:79:4d:4a:07:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Mar 22 14:16:46 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=56eebad6e6b2ad24a6454fc932b44f3086adac68
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:a7:f0:7a:f3:0a:20:82:12:cb:fd:01:71:f1:
a3:c1:34:4b:bd:ac:d8:e9:ac:a5:b2:98:a1:a2:e1:
95:82:47:c8:e1:11:d4:5b:61:96:7f:58:02:25:83:
d1:13:0f:b6:e0:ed:a2:41:d6:a0:d7:d6:90:b9:95:
ca:8f:15:cc:c3:ed:b8:fe:ab:6c:a0:1f:3c:d4:80:
bc:85:7e:bf:31:86:40:cf:64:31:c5:9b:bb:40:10:
a1:fd:5d:f7:1f:c0:2d:1e:f8:52:cb:3e:d2:e9:e7:
66:50:9e:07:5d:6a:9f:f6:f5:b7:22:d5:b2:d0:35:
94:d5:04:4e:db:65:77:ad:27:1a:37:a2:2c:c5:c1:
a4:0b:9e:b2:84:ad:cb:eb:72:f5:4a:48:89:fe:ce:
19:9a:0a:9c:24:d7:73:c4:c6:8c:a5:05:01:6a:6f:
2b:e5:99:c0:ae:ff:99:ef:1e:97:99:af:63:b4:fc:
5d:fe:06:45:1f:50:52:71:bf:dc:e3:08:a5:7f:e7:
39:c5:1e:0f:03:3e:f0:49:94:37:18:3e:fb:e4:87:
b4:a5:9d:7f:70:6b:b5:16:bb:10:33:11:cb:a8:90:
2a:ae:58:87:64:0e:a6:5c:3e:4d:31:81:73:e3:df:
09:01:ca:43:d4:05:3e:97:06:da:9b:95:0e:85:c6:
87:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:EE:BA:D6:E6:B2:AD:24:A6:45:4F:C9:32:B4:4F:30:86:AD:AC:68
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/Vu661uayrSSmRU_JMrRPMIatrGg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
a3:01:6c:8b:30:6d:bc:ae:59:dd:8f:84:b7:bd:30:8f:48:5d:
63:a0:ac:1b:a2:4a:a4:6a:ad:73:d2:16:6e:aa:00:a5:64:12:
ad:b4:02:7b:11:8f:71:47:60:8c:67:f6:47:72:cc:0e:b1:d2:
bd:65:9c:e4:f4:c9:e2:23:81:57:4b:ed:99:9a:80:83:5c:8a:
d4:aa:3a:9c:b8:17:a7:1d:96:4c:23:c8:7c:67:5c:88:df:57:
4d:48:17:30:49:a3:be:a4:da:01:16:13:3a:57:cb:0f:33:a0:
b8:55:dd:d2:4b:3c:d0:66:ed:33:45:c7:bb:85:16:d5:9a:85:
c4:2a:fd:b2:34:7d:26:e2:53:d9:03:e9:c1:4e:57:47:10:9b:
4a:48:fa:d1:5b:af:77:7c:a0:cd:52:7d:a7:a4:15:6b:ec:72:
ce:e1:6d:d6:b5:8d:77:47:fe:d0:6a:dd:bd:7e:c1:90:53:d8:
80:1f:a7:88:b0:52:15:8b:54:c7:d5:57:d0:67:7a:85:ff:b2:
5a:5b:6d:f6:67:ec:bf:e2:83:4e:c8:8c:fb:12:6a:c0:5e:34:
58:c5:f8:b1:41:88:a5:6f:9c:7f:46:08:81:3a:22:2c:a9:92:
c0:e9:8e:dc:be:fc:0b:82:2c:fa:eb:65:da:d6:ce:23:d3:92:
33:b4:e9:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 2 03:32:32 2025 by rpki-client