Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/VxwzNe6ikLRztLyGkO0a17Xm7O8.roa
File: VxwzNe6ikLRztLyGkO0a17Xm7O8.roa (raw, json)
Hash identifier: tCTmu3LtO57GuPoGRShZtVHQVOJaem44YnWdPEy+MRE=
Subject key identifier: 57:1C:33:35:EE:A2:90:B4:73:B4:BC:86:90:ED:1A:D7:B5:E6:EC:EF
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 01871E7B8FF71BF924E3D9B2A56E1430A7B6
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/VxwzNe6ikLRztLyGkO0a17Xm7O8.roa
Signing time: Sun 26 Mar 2023 15:13:46 +0000
ROA not before: Sun 26 Mar 2023 15:13:46 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:1e:7b:8f:f7:1b:f9:24:e3:d9:b2:a5:6e:14:30:a7:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Mar 26 15:13:46 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=571c3335eea290b473b4bc8690ed1ad7b5e6ecef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:61:92:8b:3e:1c:99:63:1a:aa:3e:f6:16:14:
38:55:b4:84:58:13:6c:6e:0e:82:b4:95:d7:bc:88:
9d:ee:4f:36:79:80:49:f8:5a:88:ae:8b:e5:c1:17:
ba:6a:a7:be:01:ce:ce:6c:48:23:2d:ca:42:8f:ff:
b1:aa:d4:90:c8:26:db:e0:25:32:7e:66:4b:40:d7:
09:a4:fe:f1:01:7d:a4:d2:bf:ea:06:e2:84:73:2a:
37:0d:0c:9d:4e:01:e9:c8:66:dc:59:42:26:d4:90:
03:30:8a:23:8c:a1:3d:20:bf:17:21:ff:07:8c:fd:
1e:eb:08:11:28:86:87:59:cd:4c:69:02:ef:0f:f2:
7f:88:8d:20:26:8a:8c:6e:bf:22:83:d9:9e:45:95:
cb:25:ff:24:8b:14:0b:b1:7c:55:ad:a8:0b:b7:86:
8f:5c:cc:47:90:07:e5:4d:18:2e:1d:de:f9:2d:e5:
4f:73:e5:b6:e7:1a:2d:7e:17:64:b9:ca:fc:05:7f:
fc:55:84:b8:24:99:45:6f:d4:bc:cf:a0:02:21:17:
e2:e3:05:f6:7b:82:e1:f8:d5:15:13:9a:19:77:ad:
9e:d2:96:33:3d:b1:ea:5e:6a:c6:01:e1:e9:cb:06:
b8:1e:fc:30:7e:50:03:f3:4d:3b:55:c4:da:15:5a:
7d:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:1C:33:35:EE:A2:90:B4:73:B4:BC:86:90:ED:1A:D7:B5:E6:EC:EF
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/VxwzNe6ikLRztLyGkO0a17Xm7O8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
a0:f5:f8:ba:cc:15:82:3e:c2:f8:39:77:e0:6a:08:85:ce:8f:
f6:df:d7:a6:76:7d:68:c3:71:d0:cf:21:8f:a9:47:8d:d9:4c:
3b:e8:5c:3b:e5:90:72:1f:10:5b:5d:20:be:82:94:36:98:78:
32:e4:b9:7e:e7:d0:94:9f:f1:65:e8:57:d3:10:a7:fe:7f:26:
d8:20:ce:c2:08:02:e8:66:a0:60:0b:a2:48:bd:de:8f:24:8e:
7f:a1:c5:5a:17:05:84:3a:12:e3:7e:db:f3:30:60:24:64:da:
3b:4c:bf:bc:91:42:d9:0a:fe:be:81:3d:99:ad:62:e2:b8:1e:
ab:d1:3c:a0:66:da:3b:c3:d4:e3:aa:3a:ef:e9:ef:0d:4d:51:
1c:3b:5a:11:43:f5:15:cb:08:b6:41:d0:91:aa:22:5d:ce:25:
97:24:c9:05:45:bd:4e:d7:fb:da:d9:1f:5d:12:68:f6:10:49:
54:8f:8d:d0:97:b1:4e:d9:1c:f6:8b:20:77:3b:cc:90:11:87:
82:da:87:72:8f:88:90:8b:35:69:ce:94:63:05:5f:a0:cf:e5:
84:7a:6b:c0:68:23:cc:57:3e:ee:11:c6:7d:84:79:11:0a:34:
d3:5b:fc:33:8f:76:07:44:2b:57:a6:5d:09:18:be:2a:dd:f6:
d9:6c:29:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 22:00:56 2025 by rpki-client