Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/vBkGNr2oV8WcjbNG_dkkZz31mAQ.roa
File: vBkGNr2oV8WcjbNG_dkkZz31mAQ.roa (raw, json)
Hash identifier: xfostEaj27dJNVjkJqFEQ3Ja3BjMYONoKBv9pXXU5SA=
Subject key identifier: BC:19:06:36:BD:A8:57:C5:9C:8D:B3:46:FD:D9:24:67:3D:F5:98:04
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0189A049A2F74A0A7FDD6A9002FA8E3BD3FA
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/vBkGNr2oV8WcjbNG_dkkZz31mAQ.roa
Signing time: Sat 29 Jul 2023 06:15:27 +0000
ROA not before: Sat 29 Jul 2023 06:15:27 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:188:7858:a003/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:a0:49:a2:f7:4a:0a:7f:dd:6a:90:02:fa:8e:3b:d3:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Jul 29 06:15:27 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=bc190636bda857c59c8db346fdd924673df59804
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:6a:9e:3c:11:47:84:0b:13:5e:c6:f3:ad:a5:
3d:76:5f:36:8b:55:e7:2b:7a:ad:bb:b6:22:18:7f:
cf:56:d3:f1:66:e4:ba:5c:dc:cf:54:bc:63:aa:a9:
51:ab:7a:1c:80:38:5d:44:fc:82:a1:82:7e:b2:13:
39:10:48:55:d1:a9:8f:33:72:93:11:71:9a:5f:ca:
b3:d6:33:49:4e:6f:bf:18:d9:1a:6f:d8:2b:4c:7d:
54:77:f8:19:74:dd:83:8e:ec:15:84:92:90:b4:10:
74:34:c8:8e:68:45:5f:ce:16:6c:09:4c:89:02:eb:
83:c8:06:a9:ff:eb:7a:11:2b:fa:fd:59:f1:08:ab:
7a:0a:52:f3:3d:59:e6:b7:c4:bb:2b:20:5b:1b:c5:
eb:26:c3:96:d8:10:43:30:09:d8:58:ce:dc:53:34:
d9:45:aa:79:ef:73:38:5e:d0:c3:f1:06:ed:82:db:
ae:10:88:48:5c:9f:e1:11:86:fe:e4:ef:53:6e:c8:
1a:32:37:7c:48:c1:8d:46:07:e6:ab:66:be:3b:50:
f8:f5:cd:98:02:c0:0f:59:74:f6:20:d6:be:17:c6:
ce:a5:c8:46:7d:3b:51:85:0d:4e:f2:6a:8d:6e:0f:
d8:ea:60:48:65:b5:6f:e9:16:03:53:70:4b:9f:64:
aa:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:19:06:36:BD:A8:57:C5:9C:8D:B3:46:FD:D9:24:67:3D:F5:98:04
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/vBkGNr2oV8WcjbNG_dkkZz31mAQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
1a:05:fe:bf:f2:fa:4c:b6:b7:a0:5f:7a:0d:86:06:57:b8:99:
c1:dd:be:3c:51:89:ea:07:d2:8a:e1:c5:51:e5:97:8f:de:30:
c7:99:55:01:6c:af:e5:83:20:00:ea:48:6c:30:a6:83:c8:52:
7f:c2:1b:e2:30:b0:8f:71:c8:8e:13:49:38:90:7f:d6:fc:33:
20:b1:70:7c:f1:4f:76:8e:e8:c7:81:6d:01:11:05:a2:69:58:
6f:a9:cd:b3:62:c1:21:c7:b3:a8:33:ad:b7:e0:e6:b6:1a:8e:
98:d7:84:5f:3e:b5:a2:28:f7:1d:00:87:c4:a1:01:3e:c1:bc:
54:9c:fd:66:05:3b:61:cd:d7:86:26:96:2d:22:a8:c0:6d:f8:
24:f9:81:3e:e2:a6:5d:bf:23:d8:a0:a0:f6:50:74:b5:c2:e5:
85:52:7e:cf:0e:e5:54:fb:5e:e2:1d:90:67:d1:0b:55:ea:d6:
d9:b6:29:44:ab:9a:9c:cf:30:90:40:71:34:42:58:13:15:c8:
d4:57:97:84:8e:37:83:41:c4:cd:9e:01:d0:7f:19:c1:c2:9f:
54:aa:dd:4b:6e:73:9c:96:76:61:f9:37:0b:30:e5:51:98:7b:
5f:13:15:5b:98:1e:09:89:ae:16:fe:ec:4c:b3:9c:3b:25:39:
3d:6f:ea:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 2 17:18:04 2025 by rpki-client