Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/vK63Tik8rfxAqe7lSvUcRk8KIZY.roa
File: vK63Tik8rfxAqe7lSvUcRk8KIZY.roa (raw, json)
Hash identifier: eRVjShNUJjNNiUlInCv1gz80tnF+sO4jPonnuLmJQ6o=
Subject key identifier: BC:AE:B7:4E:29:3C:AD:FC:40:A9:EE:E5:4A:F5:1C:46:4F:0A:21:96
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0184441401BFD941349D3D80BA81A6B06DA0
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/vK63Tik8rfxAqe7lSvUcRk8KIZY.roa
Signing time: Fri 04 Nov 2022 19:17:52 +0000
ROA not before: Fri 04 Nov 2022 19:17:52 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:184:3fbd:71f7/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:184:4250:a4df/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:44:14:01:bf:d9:41:34:9d:3d:80:ba:81:a6:b0:6d:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Nov 4 19:17:52 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=bcaeb74e293cadfc40a9eee54af51c464f0a2196
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:22:db:c6:6b:4f:c7:f5:c4:89:c9:cb:ee:ad:
4a:8e:77:41:a1:6a:7f:66:ab:10:70:eb:d1:bc:da:
ca:bc:e7:11:53:88:95:74:7d:c5:eb:72:af:75:df:
a8:26:57:b2:e6:ad:2b:c9:d9:56:c9:f4:e2:9e:36:
4c:6a:0a:11:c8:6c:7c:42:83:02:78:00:2c:96:0d:
60:52:76:9a:1d:f6:b2:10:4f:f7:e3:ed:a7:f5:60:
df:13:19:3e:33:27:8e:f0:72:a5:57:85:3c:94:5f:
4c:8d:0f:df:66:8f:f3:eb:e2:bb:71:d4:a4:0f:dc:
8c:ab:df:2b:98:51:93:4b:56:2c:22:86:a7:49:22:
08:c2:12:b1:8b:ed:4a:fc:85:ff:b8:24:c5:17:20:
05:43:df:7e:01:83:5d:65:02:bb:01:86:98:c7:94:
5b:80:07:33:b2:ac:d0:d0:7f:98:cd:a9:3a:42:3e:
f0:26:c7:ed:bc:d7:eb:aa:ab:3f:60:43:18:69:c2:
d6:f3:2d:43:3a:26:a9:ea:62:af:2e:cd:6b:9a:98:
fd:70:c3:8c:54:89:37:a8:ff:ef:72:27:e1:a0:e3:
1d:5a:de:0b:9c:de:b8:a3:f7:1d:de:ad:6a:66:22:
15:75:e2:ae:5e:34:54:9e:de:51:8c:9f:54:1a:24:
81:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:AE:B7:4E:29:3C:AD:FC:40:A9:EE:E5:4A:F5:1C:46:4F:0A:21:96
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/vK63Tik8rfxAqe7lSvUcRk8KIZY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
22:49:a4:33:4b:26:d6:3a:4b:ba:95:80:f0:e2:68:39:dd:e9:
6d:41:54:c4:85:19:67:6a:04:a1:48:e5:bc:97:aa:f4:f8:30:
fc:78:d4:62:76:44:37:92:35:9f:df:97:cd:89:e0:84:59:72:
46:28:96:26:7b:2b:a8:66:c3:86:6d:ae:19:c4:f7:cb:f3:74:
8d:af:a9:8c:dc:56:ce:7f:00:d2:ce:dc:9a:db:06:97:64:8e:
ab:52:ba:b6:41:b0:f5:2d:f9:54:db:20:34:3f:b7:4d:bd:58:
02:b2:b7:13:88:6f:4d:d2:78:e9:f4:7f:7f:58:58:7c:c7:e9:
67:d5:f0:2d:b7:e8:e0:b0:bf:85:12:dd:0f:07:e7:c5:03:0f:
b8:4f:62:76:18:db:21:14:f9:df:07:ce:a3:7a:87:72:83:8d:
48:9c:ce:36:b1:3f:f3:91:a0:c3:c4:94:78:82:66:ef:17:2a:
e3:4d:95:39:14:c7:3e:ac:c0:e9:49:92:41:39:2e:51:9b:12:
d8:09:82:ea:df:ba:85:e0:e1:d1:1c:66:8a:31:2c:0c:26:df:
22:65:e8:1d:6a:ae:25:53:28:ff:c3:99:40:2c:50:b9:23:5b:
14:02:e3:ba:81:7e:bc:cf:ce:1f:50:02:5c:b0:3b:7e:ac:dc:
17:c3:6e:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 4 15:49:13 2025 by rpki-client