Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/vNWeGYiSxD_CncfqUt3W6NygzD8.roa
File: vNWeGYiSxD_CncfqUt3W6NygzD8.roa (raw, json)
Hash identifier: CXu6UMZRkpQt3ve8PALvhmBQAUHHo7K2pA4ldFd0SdU=
Subject key identifier: BC:D5:9E:19:88:92:C4:3F:C2:9D:C7:EA:52:DD:D6:E8:DC:A0:CC:3F
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 018872C9392BF0209F67EF9E9920C40447CA
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/vNWeGYiSxD_CncfqUt3W6NygzD8.roa
Signing time: Wed 31 May 2023 17:09:29 +0000
ROA not before: Wed 31 May 2023 17:09:29 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:188:5fe2:b396/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:187:4695:a68a/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64:ffff:0:187:fa9a:b088/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:187:b2b8:a7dd/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:72:c9:39:2b:f0:20:9f:67:ef:9e:99:20:c4:04:47:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: May 31 17:09:29 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=bcd59e198892c43fc29dc7ea52ddd6e8dca0cc3f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:76:f2:c6:e7:aa:70:25:c0:02:54:65:fc:66:
fd:a3:d8:49:9e:d2:26:45:6e:a8:67:0b:64:0c:63:
ee:2d:08:71:98:7b:c6:3a:96:59:0b:53:02:85:8c:
93:a4:94:1b:80:11:54:49:01:3c:d5:b1:94:32:86:
f4:96:34:e5:96:8e:17:65:d2:61:0c:a2:24:e2:f6:
d6:7f:37:46:34:e8:a9:e0:94:17:cb:1d:bd:46:09:
c4:85:d1:f3:e9:b7:7f:4f:96:e3:8a:a9:ec:59:38:
31:ba:6b:a2:93:dc:37:45:6b:4a:bf:ad:af:5d:a0:
e7:c9:95:d0:71:ca:3a:39:ed:72:d6:86:ac:65:61:
c0:df:92:2a:26:66:8f:28:c5:f3:de:33:45:17:8a:
ae:a5:1c:9a:dc:8d:77:b9:4a:d9:36:8a:df:60:0c:
67:bf:a5:7b:27:2c:7a:54:74:0b:2e:c7:9b:67:e4:
cc:c1:31:20:87:ad:46:e9:e5:a7:57:dc:1b:d1:06:
8d:00:7b:47:dc:c4:fc:9f:38:97:67:a7:a0:4d:07:
00:f2:96:a1:40:81:e0:57:db:11:d1:38:08:42:8f:
62:8f:fc:70:9e:ab:9f:0b:ce:c7:96:2a:ce:8f:1b:
f9:66:fe:1e:81:2d:cf:8f:f1:40:4f:3e:32:83:e1:
00:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:D5:9E:19:88:92:C4:3F:C2:9D:C7:EA:52:DD:D6:E8:DC:A0:CC:3F
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/vNWeGYiSxD_CncfqUt3W6NygzD8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
8a:a1:90:53:0c:df:fc:bd:2d:6c:19:39:9b:21:21:4a:23:1f:
34:9b:44:ff:fc:0d:35:34:9a:54:0b:7c:de:e2:4d:c6:e2:e1:
f1:a2:53:a4:7c:71:64:75:0a:3e:59:b5:f3:e1:d6:05:7f:81:
56:a5:4c:d5:5c:b4:7b:9f:dd:02:29:00:76:23:b8:72:54:8d:
51:92:f5:5b:e5:4a:1f:b2:48:6e:c5:3f:6d:89:79:b7:09:59:
c7:9b:7d:4b:79:f0:6a:b4:43:29:7c:9b:e9:ee:09:18:7a:95:
15:f1:4f:af:7d:f1:45:8f:ed:d4:e6:ec:5b:a9:4e:29:09:e9:
25:d5:c3:44:81:00:42:10:24:14:14:0f:a9:29:5f:a1:46:26:
7c:5b:34:c9:ca:d0:ab:2e:dd:9f:3a:b9:9b:d2:35:ff:8d:e0:
e0:d2:7a:20:39:fa:6e:40:a1:92:02:10:70:27:de:8e:9b:d9:
ed:76:9e:02:86:f0:3a:2d:be:e9:e3:b7:c9:0f:fb:3c:63:ac:
e6:ba:e8:d6:f0:43:50:18:07:32:81:e6:20:aa:a5:eb:f5:54:
f0:2f:51:90:05:91:2a:17:cc:b2:b6:09:7b:97:3c:cd:70:6c:
8a:e3:03:97:5a:11:17:01:35:aa:07:4f:80:32:bc:ff:e0:94:
90:3e:56:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 07:20:26 2025 by rpki-client