Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/b2vvppRjIVZGuS8DxxQp1hUX5SM.roa
File: b2vvppRjIVZGuS8DxxQp1hUX5SM.roa (raw, json)
Hash identifier: wkdL8th3L90bA8MMz+Lnypl22Ri0zB2LM+0sqgCIAh0=
Subject key identifier: 6F:6B:EF:A6:94:63:21:56:46:B9:2F:03:C7:14:29:D6:15:17:E5:23
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0187DCCBE79540976D060DC1A5B4D0EC83B1
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/b2vvppRjIVZGuS8DxxQp1hUX5SM.roa
Signing time: Tue 02 May 2023 14:09:23 +0000
ROA not before: Tue 02 May 2023 14:09:23 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:187:4695:a68a/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:187:b2b8:a7dd/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:dc:cb:e7:95:40:97:6d:06:0d:c1:a5:b4:d0:ec:83:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: May 2 14:09:23 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=6f6befa69463215646b92f03c71429d61517e523
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:ca:53:72:48:c0:9a:38:de:86:97:bc:a6:d7:
66:38:a0:a4:e0:4b:01:80:d7:ff:77:40:d7:01:fc:
c4:17:94:db:18:98:fb:3b:9f:5c:c8:29:3f:b1:d1:
a2:55:aa:ec:77:0f:0a:ec:0b:fa:c7:c5:00:c2:ad:
87:5e:3d:b1:af:d4:af:25:0c:d8:ce:86:c8:91:be:
74:38:9f:67:fb:15:a6:34:e6:f3:05:bf:5c:8e:46:
bd:fa:40:56:4e:e5:fc:d3:95:db:20:99:10:87:07:
10:95:d9:94:90:7b:21:09:27:9f:a8:7a:60:be:14:
bd:76:73:79:d9:50:9b:de:7a:03:38:7e:75:c9:4b:
78:1b:1a:20:ad:60:a6:70:d8:87:57:e1:c5:4c:5b:
29:af:0e:6b:9a:26:7b:ee:2d:49:6c:62:78:29:4c:
80:14:02:39:c8:d4:79:04:75:8b:a6:69:5f:cf:e5:
f5:81:b7:c2:cf:2b:75:2f:f9:9f:a8:79:fe:06:d4:
0a:fb:75:33:5e:53:22:80:19:9a:8c:fa:25:8a:4b:
04:15:48:a7:a3:3e:5f:0b:de:00:e0:96:91:dc:d0:
bd:cf:90:a4:b7:88:fa:fb:31:75:c0:96:73:5d:12:
b8:21:3b:dc:38:4f:ae:5a:c6:da:3a:36:bd:1d:7c:
43:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:6B:EF:A6:94:63:21:56:46:B9:2F:03:C7:14:29:D6:15:17:E5:23
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/b2vvppRjIVZGuS8DxxQp1hUX5SM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
7f:3e:18:6a:dc:be:f2:5a:b7:ae:d0:9f:4f:52:42:d0:85:07:
e9:43:99:c2:3a:5a:99:d3:b4:73:39:e5:19:81:44:c9:f1:5a:
58:17:f4:d0:8d:61:57:fc:8f:8f:51:64:5e:75:0a:c8:12:24:
6a:70:51:84:98:d7:0c:1c:16:83:5b:82:29:db:f8:89:0a:09:
13:99:8b:bb:05:04:bb:91:a5:b5:bd:1e:10:a0:93:e8:c9:be:
fd:75:b2:0b:88:c9:06:63:03:af:e2:64:bf:45:2e:74:6c:c7:
b9:7f:44:e8:4e:50:dc:8a:4a:5d:6e:22:78:b3:fe:c1:b2:05:
b5:2b:8f:66:a5:df:d8:e0:37:9d:05:4d:8a:74:13:9a:df:92:
ad:a7:db:54:60:aa:82:78:04:08:e8:84:1c:3e:a9:55:fb:51:
3d:d7:d0:3d:90:6d:02:9b:b3:c2:d1:e1:c6:04:a1:8d:23:ea:
1c:b2:d8:7b:64:75:f4:1c:c5:c0:ab:60:9a:da:be:7f:24:67:
31:87:15:c8:87:70:da:b1:dd:96:aa:f1:6c:4b:45:35:92:27:
0c:18:33:5a:e1:22:49:b5:2b:65:1b:b8:4b:f1:39:80:94:45:
32:a3:a7:f3:8b:3a:0b:dc:e8:03:8c:75:14:de:9a:e8:0e:66:
c6:25:fc:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 00:41:55 2025 by rpki-client