Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/vAiKkucE90M4KGe8aKIgeTmorLs.roa
File: vAiKkucE90M4KGe8aKIgeTmorLs.roa (raw, json)
Hash identifier: DwIEjADwqniT8jOdi23880x4sHVitMU7tz4lVrbSJ7k=
Subject key identifier: BC:08:8A:92:E7:04:F7:43:38:28:67:BC:68:A2:20:79:39:A8:AC:BB
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0189B5F373ED6027CB7BE55AB80DA1E3D9B6
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/vAiKkucE90M4KGe8aKIgeTmorLs.roa
Signing time: Wed 02 Aug 2023 11:12:58 +0000
ROA not before: Wed 02 Aug 2023 11:12:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:188:7858:a003/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:189:a0e4:5c7d/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:b5:f3:73:ed:60:27:cb:7b:e5:5a:b8:0d:a1:e3:d9:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Aug 2 11:12:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=bc088a92e704f743382867bc68a2207939a8acbb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:bf:cd:94:8c:4f:ec:b3:cc:d8:df:2b:3f:77:
72:31:f2:39:09:61:1c:f2:0b:15:c9:42:cb:b3:24:
6a:30:99:2b:c0:75:b8:e6:fe:ee:aa:76:8c:40:ed:
b5:3e:6a:ed:0e:5c:28:6c:5a:62:4b:5b:39:f3:6f:
8f:5e:f6:e4:6e:dd:70:8a:a6:b1:6c:76:8f:d0:29:
23:89:a7:e4:9d:90:fb:7e:94:01:60:23:86:1b:53:
db:ac:ec:22:83:7f:2c:53:29:fe:88:82:4b:c6:86:
b5:80:c1:b0:14:66:71:3d:c6:19:c4:67:7e:8f:ba:
2e:38:49:e7:d5:e0:32:b5:a0:35:18:46:a2:a4:3a:
db:4e:30:e5:64:fc:5a:be:bc:35:e6:81:3f:46:34:
e1:26:3d:4b:b4:c6:0d:ec:c7:7a:3d:46:39:e0:bc:
58:1b:a9:2c:ab:b2:41:39:ac:eb:2d:d3:85:82:9b:
2b:65:8f:18:f8:d9:2b:53:5f:20:2e:11:06:c2:c6:
b7:4a:df:b8:a1:fe:6c:41:3a:61:20:34:9d:45:b0:
b1:fd:74:48:4e:a7:4b:65:ea:96:93:51:8f:00:16:
cc:9d:b8:be:61:4a:13:5a:60:02:dc:f4:9e:5e:a7:
54:40:a7:d9:55:f5:4b:15:21:2c:00:11:9e:04:78:
36:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:08:8A:92:E7:04:F7:43:38:28:67:BC:68:A2:20:79:39:A8:AC:BB
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/vAiKkucE90M4KGe8aKIgeTmorLs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
3a:a3:a4:48:88:e5:e3:bb:ac:8d:25:89:d7:04:d4:14:af:01:
79:77:26:e9:a7:4d:68:3d:9a:ea:c0:81:19:39:7b:07:8e:3e:
a5:c2:6f:1c:a9:f1:64:ad:de:55:bc:73:eb:82:3b:ff:3a:72:
4d:ab:8d:5f:90:ed:e0:2c:66:56:f1:6d:1c:4a:35:40:35:b7:
76:2a:df:68:70:16:57:84:20:cb:3e:4c:66:bc:3f:a0:30:66:
40:91:1c:b0:9d:bd:50:3e:1b:b8:ea:46:92:2c:72:b7:79:c0:
b8:25:2b:55:7e:60:44:46:e3:05:ec:aa:6d:3b:33:02:a3:a2:
3d:98:1c:55:74:14:66:ba:57:c0:4e:f2:ca:e8:07:c0:e9:ae:
48:ae:70:01:f0:49:e1:89:cf:1d:8f:b5:f0:bb:ee:0c:1d:2e:
42:ee:be:74:7d:e6:a3:46:e3:7b:65:04:4a:a4:9f:fb:a5:65:
fa:29:c2:72:7d:8f:a0:b2:00:06:5f:d4:df:5e:65:2a:da:cd:
75:92:4d:48:82:9e:83:57:77:7f:2d:dc:e8:98:7a:ad:db:10:
4e:da:9a:63:1b:e9:2d:67:2a:75:52:db:fe:a3:c6:28:20:e2:
fc:00:a1:5c:cb:15:26:a4:26:1c:8c:bd:fa:ac:b9:6c:74:5b:
dd:ec:99:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 20:23:49 2025 by rpki-client