Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/nvIptVcMTLj6qtRich41ej1j-VA.roa
File: nvIptVcMTLj6qtRich41ej1j-VA.roa (raw, json)
Hash identifier: B6xNN0Sa/rUEMhbQkAMsU+Q+Pqxt2VAUjOEsex+uevs=
Subject key identifier: 9E:F2:29:B5:57:0C:4C:B8:FA:AA:D4:62:72:1E:35:7A:3D:63:F9:50
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0188CDFAC74EB98BD4E7E19744DBC3DC3EB7
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/nvIptVcMTLj6qtRich41ej1j-VA.roa
Signing time: Sun 18 Jun 2023 10:09:04 +0000
ROA not before: Sun 18 Jun 2023 10:09:04 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:188:5fe2:b396/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:187:4695:a68a/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:188:7858:a003/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64:ffff:0:187:fa9a:b088/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:187:b2b8:a7dd/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:cd:fa:c7:4e:b9:8b:d4:e7:e1:97:44:db:c3:dc:3e:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Jun 18 10:09:04 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=9ef229b5570c4cb8faaad462721e357a3d63f950
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:b7:af:d5:f7:5d:af:21:40:d0:02:9b:6d:d1:
05:23:5a:77:64:98:b7:70:3d:70:7a:41:92:cb:74:
24:90:44:dd:ed:2c:41:04:fe:7d:1a:58:7d:c1:ff:
8d:4a:41:10:9a:fe:88:08:40:c8:2d:0f:f0:07:38:
a6:1a:b9:30:c2:d5:17:45:40:0b:b3:df:cb:17:fe:
e7:dc:ef:4c:db:b7:48:c2:25:fe:a3:39:73:77:d1:
39:43:b0:18:c6:0b:db:c9:d6:ff:c4:7a:8c:af:23:
55:64:11:5e:43:75:51:03:e5:40:ea:f9:b1:eb:9b:
f8:43:3f:c3:72:6a:8b:b1:bf:22:f0:cb:15:9a:d0:
1d:5b:eb:6d:25:73:9a:16:67:0b:db:2a:33:f2:f7:
1b:7d:0e:79:54:51:a5:d5:12:e5:02:39:2c:69:5e:
e7:fe:d0:9d:d5:04:eb:ff:14:b3:51:0f:78:71:0b:
e4:dc:5c:15:fd:de:44:0c:cf:5d:66:91:17:6d:bf:
ff:c8:b5:20:c4:90:6f:fb:15:e8:40:38:1e:20:5c:
45:0a:a0:83:e7:82:8e:a7:ec:93:4f:37:29:f2:82:
dd:bb:eb:94:ce:0d:23:d6:4b:7b:40:1d:80:0f:27:
30:91:06:31:7e:8a:70:48:27:f3:87:d0:d5:12:33:
43:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:F2:29:B5:57:0C:4C:B8:FA:AA:D4:62:72:1E:35:7A:3D:63:F9:50
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/nvIptVcMTLj6qtRich41ej1j-VA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
13:6e:11:ef:0f:65:3b:8c:12:4e:93:c7:21:9c:de:5d:0f:76:
ad:2e:ec:c0:7e:4b:f2:0b:62:a6:c1:f2:9b:3d:aa:75:49:c5:
0c:6e:93:11:a8:77:c8:94:f0:6b:77:a9:c5:eb:61:0b:34:92:
63:d1:a0:83:e7:0f:ec:ac:8a:69:e9:dd:2f:3f:03:ba:1b:3d:
21:7a:97:18:5a:30:da:83:5e:cf:50:67:76:0f:b9:c5:f3:04:
60:ac:72:04:c7:f7:d0:a1:e0:20:01:f1:a9:64:02:63:4d:8b:
3a:7a:ec:e9:5d:a5:d3:5f:6f:fd:3e:60:29:a2:63:13:3b:89:
b2:6c:ca:ed:af:88:1a:bc:c4:6a:62:59:f1:88:6b:ea:50:b5:
e8:7a:4f:b1:e1:3b:8f:1d:04:ab:dd:6b:54:dd:c6:8e:dd:ec:
52:6e:85:95:e8:46:fb:ee:31:a1:3c:a1:41:f2:47:2d:34:d8:
81:4a:e8:b8:90:af:da:a7:3e:d3:d5:1e:f0:f2:48:ee:e4:3f:
6a:8c:3d:32:22:00:b9:e3:c7:2c:b9:49:e7:c9:87:a9:44:44:
14:2f:f2:d4:4d:72:fb:16:02:2d:fd:63:58:4a:15:6c:a1:4c:
c4:af:30:b2:3e:a3:e3:23:e3:bd:87:7c:a5:5a:9e:8a:15:71:
17:89:c0:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 20:08:03 2025 by rpki-client