Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/vNO7aUxQBHjNsAYICWFtlScHr_s.roa
File: vNO7aUxQBHjNsAYICWFtlScHr_s.roa (raw, json)
Hash identifier: 8wRzYVKpjvtGFpzjMdkQF0GOm7H8Z5hBN1c9bzkp/kQ=
Subject key identifier: BC:D3:BB:69:4C:50:04:78:CD:B0:06:08:09:61:6D:95:27:07:AF:FB
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 01877B2E453008CC25170A39A10E9D12437D
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/vNO7aUxQBHjNsAYICWFtlScHr_s.roa
Signing time: Thu 13 Apr 2023 15:14:02 +0000
ROA not before: Thu 13 Apr 2023 15:14:02 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:187:4695:a68a/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:7b:2e:45:30:08:cc:25:17:0a:39:a1:0e:9d:12:43:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Apr 13 15:14:02 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=bcd3bb694c500478cdb0060809616d952707affb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:6e:fc:ae:9b:82:13:d8:c1:fd:e0:03:ce:db:
d2:ee:29:04:ce:11:01:aa:1e:f6:b5:f6:09:5d:51:
c5:c7:a2:ed:80:b6:dc:45:a8:1a:d7:80:6a:57:e5:
16:1d:de:8a:75:a7:0f:36:97:db:a1:39:09:63:3d:
a4:48:41:4e:e5:71:d9:a7:bc:a6:ee:09:43:7a:7c:
2a:04:84:83:5c:6d:bb:0f:14:f0:17:ef:fa:bf:3d:
54:6b:b0:66:b4:7d:d6:6e:3e:a5:d6:7c:bf:10:17:
3e:26:71:50:10:7a:7b:0d:80:54:37:6a:a9:d0:e4:
15:7f:ae:92:08:5e:60:8c:00:e6:e1:d6:19:5b:4c:
a8:cf:5a:69:4a:a6:47:80:be:7d:62:35:97:91:84:
af:a8:cd:06:8f:94:87:a5:92:9c:70:61:87:04:42:
3f:f6:d1:b9:88:88:ff:75:49:27:22:71:cd:43:88:
d6:97:d5:a1:69:c0:d3:25:66:9a:67:70:78:81:73:
59:dc:54:05:50:a3:d4:fa:e2:2b:c8:00:ac:2e:3d:
46:43:18:dc:cf:9c:f8:5f:85:07:46:78:1a:32:4e:
bd:d7:bd:58:0b:af:ae:63:f2:69:69:0e:14:07:12:
03:21:72:57:39:8a:0b:bd:d6:5f:71:bd:45:63:07:
01:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:D3:BB:69:4C:50:04:78:CD:B0:06:08:09:61:6D:95:27:07:AF:FB
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/vNO7aUxQBHjNsAYICWFtlScHr_s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
33:ad:0d:f3:30:04:57:0b:35:d0:d1:41:75:43:d7:a3:9f:bb:
b9:6f:23:86:f2:38:6d:c4:a7:e0:11:d9:49:2b:bc:b8:7b:c4:
b6:19:92:6e:36:5b:17:9f:5e:03:a4:82:48:12:3a:8f:6f:55:
c1:b8:89:76:39:4d:26:d6:12:6d:01:ea:d2:2a:59:c3:ad:d7:
04:f0:45:06:e1:0f:42:7b:5f:da:cc:ea:6f:81:5d:a5:8b:20:
bc:a2:7c:d9:72:d6:c4:7e:d5:87:df:28:d2:9e:b2:26:58:d9:
c4:a6:ab:f0:a9:53:c8:fd:af:38:45:d9:96:af:8a:4f:6a:d6:
89:f0:f0:0c:84:fd:cb:e6:52:03:36:33:b1:eb:b6:e0:bb:17:
84:45:a4:14:43:9e:4b:47:c9:34:cc:1f:30:23:ee:bc:fc:a4:
bc:1d:9d:2f:fb:14:84:93:59:14:3a:01:fc:17:82:e1:94:c7:
6f:5a:1b:cf:03:22:42:51:08:44:c3:a3:17:d1:b0:5b:40:55:
67:02:8d:e9:dc:84:7e:25:44:94:f0:db:86:12:f7:d9:33:22:
0c:7a:39:5b:0d:34:c3:f9:ed:37:84:24:2e:b8:c7:19:af:e6:
53:c0:1c:be:87:84:59:62:dd:07:ee:35:3c:5d:09:84:db:9f:
a6:ba:f9:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 19:49:15 2025 by rpki-client