Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/_vhgP4XzP_pSICxbINrFfE3mp98.roa
File: _vhgP4XzP_pSICxbINrFfE3mp98.roa (raw, json)
Hash identifier: /sHd/31kYfJhma9w1RWORgtM41jDzM9k00+oFItj2tE=
Subject key identifier: FE:F8:60:3F:85:F3:3F:FA:52:20:2C:5B:20:DA:C5:7C:4D:E6:A7:DF
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0188345BB384838E506400BD4BF876740018
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/_vhgP4XzP_pSICxbINrFfE3mp98.roa
Signing time: Fri 19 May 2023 14:13:24 +0000
ROA not before: Fri 19 May 2023 14:13:24 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:187:4695:a68a/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64:ffff:0:187:fa9a:b088/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:187:b2b8:a7dd/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:34:5b:b3:84:83:8e:50:64:00:bd:4b:f8:76:74:00:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: May 19 14:13:24 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=fef8603f85f33ffa52202c5b20dac57c4de6a7df
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:ee:1a:f9:7e:8c:f4:24:6a:88:fd:68:33:27:
98:25:3c:04:15:46:b7:09:0a:64:19:82:96:0a:72:
11:38:c4:16:c0:5f:42:85:6d:99:f7:8f:30:91:dc:
4b:d4:bf:cd:f2:b0:0b:ca:af:cf:ef:0b:6b:3a:08:
74:29:25:56:bf:cf:77:b8:fd:fc:9d:5d:a1:24:15:
6e:e2:a2:94:31:5b:f6:21:e0:0c:95:2f:34:b2:ac:
d2:cb:90:32:19:ef:65:03:4e:93:1e:56:ce:d6:8c:
0f:8c:d0:0e:a0:c6:a1:8d:fa:a6:ed:56:52:35:e5:
50:f2:c0:a6:3c:fb:92:f7:a7:63:60:42:8d:66:1c:
1d:78:0a:cf:2c:76:84:dc:f6:fe:6c:b5:26:a1:1c:
b4:2e:85:fd:1b:ac:34:fb:77:31:35:15:ff:28:ca:
88:2e:c9:83:3e:1c:15:75:1d:e3:21:f2:3c:5e:da:
19:5f:50:d1:5d:5b:cf:01:92:ca:f1:77:55:d8:70:
d0:d5:f5:1e:c1:18:7c:9d:b9:6a:b6:a8:be:10:05:
9d:05:c6:94:c3:bf:6d:6d:e6:83:b4:c9:83:93:a6:
83:1e:d9:b4:2c:9e:10:83:83:44:27:a0:63:e9:74:
3c:d9:29:ff:f9:db:db:67:c1:77:77:f8:f1:7e:bf:
f0:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:F8:60:3F:85:F3:3F:FA:52:20:2C:5B:20:DA:C5:7C:4D:E6:A7:DF
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/_vhgP4XzP_pSICxbINrFfE3mp98.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
73:96:68:54:79:15:de:6e:c3:2b:13:1b:c5:c3:27:74:c0:f8:
a0:32:06:34:b0:a4:5a:1a:ed:a4:56:4c:c3:31:2f:17:53:99:
07:95:52:d7:45:cc:a0:e6:5c:0c:ea:35:20:1c:b7:49:14:a6:
9e:80:25:79:55:86:46:f0:40:81:a1:3d:d8:bd:2c:7d:cf:1d:
36:c0:c0:e1:3e:af:bb:5d:30:c0:1c:24:b3:fb:a3:b6:ba:4c:
e8:a5:20:54:4c:fa:a0:d3:73:4a:4e:ab:71:9c:24:77:97:51:
65:a3:7f:57:22:7f:79:07:8c:90:07:9c:b0:89:4a:56:d3:62:
6a:91:a3:c0:01:92:51:7c:42:4f:49:87:83:8b:4d:dc:cc:65:
35:85:92:d5:15:98:83:17:6c:ac:ad:bf:97:c7:cd:05:f0:32:
59:1e:63:14:cd:55:48:9c:39:16:76:72:2b:42:c4:d2:02:bb:
d0:9b:81:3d:18:1a:78:c5:71:68:a8:bd:dd:b2:d6:86:22:13:
37:9f:68:65:2a:81:bd:77:29:9e:24:46:e6:5c:46:59:b9:c5:
8f:4d:b2:dc:00:c3:0e:4a:a4:17:8a:8e:19:0f:e0:5f:3f:13:
15:18:3d:a4:da:10:8e:f9:50:e8:32:70:b0:e9:99:f2:3f:7d:
32:a0:68:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 17:57:38 2025 by rpki-client