Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/mVLov_kczLx76a2xB132wVMwx-8.roa
File: mVLov_kczLx76a2xB132wVMwx-8.roa (raw, json)
Hash identifier: BREzVr9mGctzw44+ZaTWZVtN09QW4boM2GQNQMEkzh8=
Subject key identifier: 99:52:E8:BF:F9:1C:CC:BC:7B:E9:AD:B1:07:5D:F6:C1:53:30:C7:EF
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 018A383A9B7E3C19807A35DD3518D28103DC
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/mVLov_kczLx76a2xB132wVMwx-8.roa
Signing time: Sun 27 Aug 2023 18:21:19 +0000
ROA not before: Sun 27 Aug 2023 18:21:19 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:38:3a:9b:7e:3c:19:80:7a:35:dd:35:18:d2:81:03:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Aug 27 18:21:19 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=9952e8bff91cccbc7be9adb1075df6c15330c7ef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:33:c1:f9:ed:04:c2:d0:25:aa:73:a8:5d:a1:
74:a6:32:92:6c:ec:81:8d:2c:c5:c0:d0:74:fd:41:
9f:9e:6e:68:4a:44:50:29:1a:fc:82:11:28:54:05:
9b:fa:65:e7:13:61:ce:f5:82:d9:c1:9f:98:6b:f3:
fb:c6:43:85:d8:fc:7e:3a:1c:e8:ee:80:f4:3f:f5:
f1:c0:ae:77:1d:bf:fe:d5:12:6c:74:0c:85:f8:ad:
45:0b:c7:03:77:c0:aa:12:4a:85:c6:96:a5:47:2b:
13:ef:59:07:89:5a:af:3e:96:5d:74:99:30:ab:12:
2f:ca:3a:f7:53:11:68:ce:ee:8f:ce:a6:25:10:a2:
31:5c:ab:45:94:c2:0e:e5:cd:e3:d3:09:1b:ae:66:
e9:26:00:d4:21:bb:0a:f3:b0:74:86:7e:20:e3:1a:
9d:cc:ee:6b:08:f4:a4:88:16:ce:3a:03:3b:71:6c:
e9:dd:2d:27:ee:2f:d4:86:5b:ef:e0:ed:af:f2:45:
09:56:2a:07:6a:5c:0a:58:65:62:ae:55:2f:bb:a5:
7a:4e:26:b2:ed:be:57:5d:17:82:25:92:92:57:37:
cd:6e:f2:06:c2:23:64:ed:f9:3e:c9:38:bf:f5:12:
c5:1b:1c:4b:bc:75:14:bb:15:74:0b:76:cb:11:93:
ec:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:52:E8:BF:F9:1C:CC:BC:7B:E9:AD:B1:07:5D:F6:C1:53:30:C7:EF
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/mVLov_kczLx76a2xB132wVMwx-8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
b3:a6:75:b1:01:2c:b4:fc:ab:a8:ef:cc:85:b0:ef:a1:7a:fe:
0c:8e:4e:ac:48:77:02:9a:8a:de:32:2c:63:c0:69:40:98:c0:
4f:e7:e3:ec:02:d5:ba:cd:bb:93:98:09:2c:95:43:1c:75:86:
52:7c:7a:f5:e3:66:a8:49:29:91:b4:67:82:b5:c4:ef:70:09:
ff:0c:07:83:6b:ed:ba:66:8f:96:15:52:81:25:64:55:0e:3b:
65:07:fd:2c:15:27:7f:41:b7:59:ba:aa:ff:9c:a5:09:d5:60:
07:46:f2:f7:60:37:e5:11:ea:15:4f:ef:d4:9b:db:ec:8e:10:
de:4a:21:2f:5f:df:95:21:f7:b4:72:69:6c:ef:22:53:da:dd:
3a:e2:59:45:02:b6:3d:16:bc:db:fc:5e:be:6e:bc:64:f7:35:
d8:79:bf:38:22:b8:6a:6b:57:05:04:84:13:3a:ce:f8:fd:1f:
af:08:b8:9c:50:2d:b2:2a:8e:f0:6b:50:e1:d0:46:46:bc:67:
ea:7d:2d:e5:3b:61:1a:37:35:7a:9a:2f:36:ef:40:a1:7c:9a:
0f:10:25:1b:21:36:a6:56:ab:42:f0:36:08:a7:fb:4d:61:81:
a8:a0:70:06:8d:a6:6d:7b:3c:1f:bd:cc:e9:21:29:db:e3:eb:
35:42:c2:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 08:26:12 2025 by rpki-client