Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/vKiXJRn7zbrcSIi2JaymNLKEKZ8.roa
File: vKiXJRn7zbrcSIi2JaymNLKEKZ8.roa (raw, json)
Hash identifier: ZPKYd783MJBzqtOb4lRmWwKydwVhOwKdWE1jswbpiR8=
Subject key identifier: BC:A8:97:25:19:FB:CD:BA:DC:48:88:B6:25:AC:A6:34:B2:84:29:9F
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0189DF96074417271C3A8A10B0AF8B745C7B
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/vKiXJRn7zbrcSIi2JaymNLKEKZ8.roa
Signing time: Thu 10 Aug 2023 13:14:58 +0000
ROA not before: Thu 10 Aug 2023 13:14:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:188:7858:a003/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:189:a0e4:5c7d/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:df:96:07:44:17:27:1c:3a:8a:10:b0:af:8b:74:5c:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Aug 10 13:14:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=bca8972519fbcdbadc4888b625aca634b284299f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:79:ae:a8:fb:ce:fc:12:64:ce:d3:a2:ab:fb:
01:84:9e:e7:bf:81:52:f6:62:5f:1f:34:36:69:5a:
ff:1f:49:4b:d0:96:f9:05:61:3a:6d:06:f0:22:0c:
1b:c6:d7:9e:fb:3a:ee:3b:f4:2e:e6:80:84:f8:b8:
e1:ae:68:c1:71:5e:1c:31:81:c7:38:1f:30:74:20:
cc:22:89:7d:07:2d:9a:d3:36:5f:4c:07:5d:23:1b:
b0:1c:9f:06:cf:12:aa:5a:13:1c:47:32:89:11:68:
e0:25:17:f5:fc:35:c0:fd:34:30:72:84:27:62:60:
cc:4c:de:9f:7b:b9:c0:8f:2f:b4:76:70:95:27:68:
17:30:a8:9b:65:d5:b1:54:dc:6a:dc:53:d6:d6:8b:
37:1f:31:69:c4:9e:c3:11:fa:5e:1c:94:4d:5b:5f:
07:c0:46:f6:7a:03:1b:56:48:49:d3:79:65:d8:2f:
29:01:99:83:0f:79:a6:26:2c:c9:58:17:06:ec:da:
2b:65:b1:af:d3:a6:11:ee:40:04:38:d2:65:c2:71:
39:c6:21:65:d7:e5:bb:7b:7c:67:b8:f0:85:09:30:
e3:64:d4:d6:ce:ab:14:b2:77:19:19:1c:78:c2:54:
41:b8:bc:61:65:0b:d1:b9:b7:2d:eb:87:3b:cb:0e:
a3:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:A8:97:25:19:FB:CD:BA:DC:48:88:B6:25:AC:A6:34:B2:84:29:9F
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/vKiXJRn7zbrcSIi2JaymNLKEKZ8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
78:3a:89:58:74:37:1f:4f:a1:c3:64:85:9e:75:43:cc:24:45:
b9:3f:5d:8f:68:3f:70:18:7d:07:48:99:8c:a1:b5:27:62:4f:
c3:2d:38:91:b8:4c:54:e1:a0:85:d5:b9:2a:74:44:95:09:8f:
75:be:d1:79:b5:b5:e6:eb:91:11:74:65:da:75:b7:8d:3c:dc:
76:fb:44:13:8a:98:ba:95:ad:fb:4b:af:88:12:5b:16:6a:b9:
c3:a2:3f:78:61:92:f4:15:c2:91:82:8b:1b:64:f1:42:2a:f2:
97:d5:07:7b:0c:d5:e7:61:82:0b:ae:23:f4:42:41:db:dc:95:
85:ad:92:6c:a3:91:c6:de:3c:d9:93:11:73:fa:19:f9:a7:94:
c7:d2:7f:ca:06:43:14:0d:d5:5f:cf:3e:06:14:02:bc:0b:99:
19:87:70:3d:14:c6:a1:88:3d:77:94:74:13:00:00:95:d3:be:
de:eb:8a:90:99:77:12:bf:29:8e:e4:ac:3d:3c:84:5b:f3:8e:
f5:c2:e1:91:78:37:0d:9e:b0:f6:da:62:7d:66:2b:cc:c0:49:
9d:76:e1:c6:f2:88:19:53:a0:66:4a:80:ee:1b:e4:a9:69:7c:
78:33:08:a0:5b:34:ce:71:30:01:8c:60:c3:2b:d0:5b:c9:e2:
1d:8b:6e:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 16:05:11 2025 by rpki-client