Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/Vxes1efHhk1tCr8Jng7IOVSTU0k.roa
File: Vxes1efHhk1tCr8Jng7IOVSTU0k.roa (raw, json)
Hash identifier: I/oXIP3mPaiWQ1G2bWtumOdRn4AeGUJrwU9VTmhxSOg=
Subject key identifier: 57:17:AC:D5:E7:C7:86:4D:6D:0A:BF:09:9E:0E:C8:39:54:93:53:49
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 018641AC7AC723DB4AA6086C8E916EC69527
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/Vxes1efHhk1tCr8Jng7IOVSTU0k.roa
Signing time: Sat 11 Feb 2023 18:11:08 +0000
ROA not before: Sat 11 Feb 2023 18:11:08 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:41:ac:7a:c7:23:db:4a:a6:08:6c:8e:91:6e:c6:95:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Feb 11 18:11:08 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=5717acd5e7c7864d6d0abf099e0ec83954935349
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:2c:87:e9:0d:be:7c:95:bf:05:02:d5:24:11:
87:7e:ff:1f:4a:6c:99:c7:9b:0e:3b:9c:17:30:f3:
64:74:b5:ba:44:8d:d6:3c:24:4a:a6:e2:1a:0a:e1:
bb:cd:f4:06:22:eb:d2:9d:0e:5d:52:c2:56:d7:5a:
cb:25:d4:c3:da:30:43:53:cc:1f:82:21:69:78:9e:
73:b4:01:80:76:70:21:b3:bd:17:6d:ed:5b:25:65:
94:37:9a:88:4d:4e:21:e8:fc:a5:f9:7a:32:c7:e5:
7f:e7:48:3a:0d:47:5c:aa:22:d0:70:a3:97:7f:cf:
13:a8:81:1d:36:51:ea:78:e4:ff:cd:4c:4f:41:dd:
ca:dc:d1:bc:87:41:09:b1:fd:f4:bd:21:a5:a2:16:
27:25:d6:9d:a5:79:3f:57:70:b9:fe:d6:46:d4:25:
c2:32:08:7c:92:1c:7c:85:64:47:40:df:3f:ad:a2:
6b:41:48:cd:f5:7d:c8:52:3d:d9:43:0f:9c:f7:aa:
56:66:de:63:03:57:ec:58:74:93:e3:14:8f:e5:a7:
cf:95:c4:6a:6f:02:02:f1:ec:d0:c7:a0:a4:6d:34:
bf:08:e6:fc:f4:75:09:bc:8c:39:3b:fb:1b:b9:8a:
20:db:62:24:c2:f3:56:be:57:f2:76:93:b9:0e:ff:
b4:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:17:AC:D5:E7:C7:86:4D:6D:0A:BF:09:9E:0E:C8:39:54:93:53:49
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/Vxes1efHhk1tCr8Jng7IOVSTU0k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
a0:4f:28:d0:ec:9b:29:5f:9b:59:c6:fb:98:5a:d1:bf:96:ec:
f0:87:0a:e3:6f:e2:67:92:67:3c:2f:7a:88:88:a1:4c:e3:12:
11:5e:ae:0b:28:d7:57:1a:47:3a:38:70:92:6e:ea:07:35:df:
aa:b2:11:c1:9c:0d:1c:e5:7b:6f:55:50:9c:42:44:3b:eb:c6:
0a:2a:88:54:54:ce:96:08:07:0e:93:02:9a:45:19:c6:37:9c:
ca:9c:96:fa:4d:22:1b:f9:4d:0b:3a:aa:5b:61:a6:48:44:33:
25:b5:ee:41:f8:fa:58:1e:ad:d1:43:f8:98:65:d6:a7:bb:c2:
6e:8e:62:eb:26:04:78:b6:62:8d:de:f2:30:1d:ed:8c:88:19:
ed:a5:a8:e6:46:71:97:b6:6a:73:1b:20:41:c3:0b:47:05:12:
67:6c:89:4c:e2:83:c1:bf:d0:e4:92:b9:f2:91:54:db:a9:09:
70:ad:cb:42:3b:24:54:be:63:52:fa:0b:cc:ce:a1:3c:3a:54:
2d:d6:fc:ec:6b:97:46:3e:a9:48:38:a6:09:79:e9:da:bd:e7:
b6:36:bc:e7:da:80:d9:98:3d:49:37:ee:fa:48:9d:c0:5a:72:
c0:21:7c:6e:74:51:53:0e:83:1a:df:a7:00:9b:63:42:3e:a8:
ec:0d:e5:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 2 08:23:42 2025 by rpki-client