Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/VxGphRaO9DTJboWcxo5qBQg1h9M.roa
File: VxGphRaO9DTJboWcxo5qBQg1h9M.roa (raw, json)
Hash identifier: zf9SuamcxTspuF1o2IUlBbqQ29mBVWfJuspLAJ0Za0Y=
Subject key identifier: 57:11:A9:85:16:8E:F4:34:C9:6E:85:9C:C6:8E:6A:05:08:35:87:D3
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 01877D18AC974F43F1B21A3AE95F3C1BBDFF
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/VxGphRaO9DTJboWcxo5qBQg1h9M.roa
Signing time: Fri 14 Apr 2023 00:09:41 +0000
ROA not before: Fri 14 Apr 2023 00:09:41 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:187:4695:a68a/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:7d:18:ac:97:4f:43:f1:b2:1a:3a:e9:5f:3c:1b:bd:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Apr 14 00:09:41 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=5711a985168ef434c96e859cc68e6a05083587d3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:d7:73:d3:74:a7:0b:cc:97:4f:2e:ba:0b:d6:
a5:79:34:a7:dc:7d:a7:47:27:89:ce:1e:14:97:d3:
ec:36:41:17:9c:b2:59:81:40:fa:e0:4e:1a:b2:36:
6c:eb:2d:48:f2:91:2e:c1:5d:e5:12:32:e2:78:5b:
e8:67:f3:d2:e3:24:cf:9d:86:54:37:1d:30:1b:11:
5a:ff:bf:b3:92:a6:3e:b0:13:ab:23:ae:4d:c0:f7:
f7:39:27:5d:1a:d6:56:f4:a2:d6:04:5f:3c:c4:b1:
e4:97:ab:1e:2b:c6:6d:c7:24:d4:12:4f:0f:2f:02:
a3:6e:68:7a:49:95:09:3b:c0:9a:20:5a:db:23:55:
b4:85:98:dd:f7:40:20:67:a2:04:63:86:9a:06:89:
55:fb:e9:5f:18:83:ce:77:27:b3:63:b9:b3:d4:92:
09:96:20:1e:6d:b1:b1:40:37:00:f4:50:71:b9:83:
ef:95:b3:2a:2d:27:c0:bb:fd:2f:3a:7c:89:35:8f:
7a:c8:6a:da:b8:ef:a5:82:d1:0c:e2:1f:c6:19:3d:
6d:87:2f:9f:07:04:51:47:57:0d:07:26:78:b9:3a:
01:2f:79:36:49:81:6c:2d:89:bf:99:5b:be:22:cc:
45:70:81:7f:c9:d3:27:99:f0:f4:34:12:aa:2d:14:
41:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:11:A9:85:16:8E:F4:34:C9:6E:85:9C:C6:8E:6A:05:08:35:87:D3
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/VxGphRaO9DTJboWcxo5qBQg1h9M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
30:51:49:2f:c9:13:71:f9:73:d9:7a:4c:19:74:14:d9:95:7c:
c3:0b:61:d0:b4:b3:bf:9b:df:5c:25:e4:16:b7:fa:6b:e6:2d:
42:12:93:9d:b4:3b:b5:92:d4:8c:e2:3b:fc:2a:f1:1f:37:a8:
85:dd:52:95:99:dd:14:2d:34:9f:4b:a9:63:eb:cb:ea:63:01:
09:5e:ec:7d:38:00:94:53:c5:67:35:70:57:57:f7:48:ec:3f:
09:50:4f:e1:b8:ea:a6:24:77:98:1f:40:ae:b8:fc:b2:24:fc:
de:57:e5:22:0c:8b:44:25:ca:10:2a:15:f0:b0:31:4a:6b:e5:
71:75:97:cc:89:50:15:9c:5c:4e:c7:46:cc:3d:0a:67:f3:ec:
26:13:7c:5a:b3:48:db:df:6a:2e:3d:a3:d8:3b:e3:2f:d5:ef:
e2:be:fa:87:7e:00:ce:dd:9f:88:b9:f6:ea:55:f0:df:d6:7d:
0b:25:49:9a:71:89:43:85:7b:d7:ec:82:fd:6c:c7:92:6a:14:
f6:dc:b7:17:88:67:ab:20:ac:e8:d4:70:08:49:b4:df:b8:2d:
e7:3b:2c:77:d5:a9:32:a2:c3:e4:2f:03:db:9e:96:4f:b3:67:
26:0f:56:1d:48:3b:e6:b6:4f:7b:a6:0f:11:4d:14:25:0d:fb:
70:a6:07:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 2 09:56:18 2025 by rpki-client