Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/vAJxO1uKSEqyJ-z6GS4hT7BFrXc.roa
File: vAJxO1uKSEqyJ-z6GS4hT7BFrXc.roa (raw, json)
Hash identifier: C4bR1ABaQZttA8xrYGo4dG0V/c5okfprvPiAqEnEsrc=
Subject key identifier: BC:02:71:3B:5B:8A:48:4A:B2:27:EC:FA:19:2E:21:4F:B0:45:AD:77
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 6CB62DBA
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/vAJxO1uKSEqyJ-z6GS4hT7BFrXc.roa
Signing time: Tue 22 Feb 2022 07:04:42 +0000
ROA not before: Tue 22 Feb 2022 07:04:42 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:17f:1bf4:40b5/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:17f:203f:21de/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1823878586 (0x6cb62dba)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Feb 22 07:04:42 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=bc02713b5b8a484ab227ecfa192e214fb045ad77
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:4e:0e:dc:10:6d:fd:fc:87:37:f0:3c:0f:a6:
33:76:5c:1e:1a:35:02:a6:0e:f0:14:12:8a:80:b0:
42:34:46:7f:49:0e:ee:02:3a:0c:90:a5:2f:07:0b:
e1:8b:9d:46:9f:1d:d1:10:ff:f9:02:62:7c:8a:f3:
b4:7c:b3:46:fb:c4:fb:08:58:dc:5a:51:e8:7a:5c:
7c:95:61:eb:43:b9:50:14:a1:1e:26:c4:f1:f6:19:
b1:80:a9:34:18:21:c2:c5:d8:7f:6b:5e:56:ad:fe:
0b:75:c3:40:65:58:b0:6b:6b:61:80:77:90:b7:88:
5a:79:06:fc:19:3d:61:95:d0:5f:b8:f0:e5:ba:7e:
db:f0:66:ac:0f:57:b4:a9:4d:8b:41:ec:02:42:fa:
a6:ea:02:72:27:2c:44:eb:7d:ad:3d:1b:39:27:0d:
2d:3c:72:59:38:25:00:3a:0b:3e:8e:cd:5e:dc:b9:
39:22:b7:13:49:bb:9d:8a:0c:70:77:9a:63:bc:91:
16:67:6d:19:8f:cc:65:33:8f:cc:5f:58:c5:0c:7b:
d4:4d:af:71:f5:f8:bc:8c:43:a9:fa:6c:4b:5f:ef:
3c:20:3e:33:28:ee:aa:74:fd:36:27:f4:80:f0:22:
ba:ae:61:bc:66:63:3a:3c:b1:33:e6:e3:38:3d:06:
ed:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:02:71:3B:5B:8A:48:4A:B2:27:EC:FA:19:2E:21:4F:B0:45:AD:77
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/vAJxO1uKSEqyJ-z6GS4hT7BFrXc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
62:88:08:8e:f1:3b:a9:a2:13:99:7f:e8:42:92:4e:44:db:94:
20:67:22:ed:c6:ab:c2:a9:7b:88:c3:9b:6e:50:18:2f:4e:07:
2e:63:1b:3c:66:a1:7f:d3:46:54:dd:a6:5c:b2:47:6a:91:95:
87:37:a9:94:c5:f3:b1:df:9f:4a:35:6c:1a:f4:fc:7a:12:1c:
5f:d1:fb:f3:30:6c:1a:b2:45:d9:b0:cb:be:e2:ca:6b:36:85:
7a:65:10:00:37:1b:b4:9f:90:e8:86:0a:a8:7b:97:f3:0b:67:
b8:85:1a:17:46:4d:9b:f4:1a:98:94:53:59:b7:39:5b:2d:97:
93:6e:18:58:c7:64:c2:72:81:c2:49:a3:8e:9d:1d:f8:f7:da:
66:00:d0:a7:13:99:bf:09:d5:6d:86:e2:df:d8:ff:a4:44:6d:
62:93:7f:01:a3:26:0d:65:90:2f:f4:98:e9:8b:e9:fd:75:8c:
11:ab:99:5e:1a:88:55:ed:48:13:66:31:d7:82:00:6d:d8:e9:
d2:0b:cb:fe:1e:ee:2a:df:9b:eb:39:1c:c5:4c:c4:9b:9d:86:
c9:98:8a:14:ab:d4:83:bb:6c:2c:c8:99:72:dc:62:0c:17:07:
47:28:90:b3:71:7d:b9:82:f1:86:e4:3c:4f:fe:6f:3a:b0:d6:
ec:d9:fd:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 21:27:31 2025 by rpki-client