Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/vORbVb1LNX7sCcTl399dkwokyo4.roa
File: vORbVb1LNX7sCcTl399dkwokyo4.roa (raw, json)
Hash identifier: O6If12iSv9QT+7mIL4h4kNe504J5rfQb+LjvhwzQ1Ls=
Subject key identifier: BC:E4:5B:55:BD:4B:35:7E:EC:09:C4:E5:DF:DF:5D:93:0A:24:CA:8E
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0181FDE8528818E752D93C8103ACF1B93AA0
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/vORbVb1LNX7sCcTl399dkwokyo4.roa
Signing time: Thu 14 Jul 2022 18:11:09 +0000
ROA not before: Thu 14 Jul 2022 18:11:09 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:81:fd:e8:52:88:18:e7:52:d9:3c:81:03:ac:f1:b9:3a:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Jul 14 18:11:09 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=bce45b55bd4b357eec09c4e5dfdf5d930a24ca8e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:d4:1d:c1:25:f4:68:71:e6:53:fe:37:ac:d9:
3f:29:93:17:0d:97:31:94:52:c2:02:1b:9a:22:48:
18:06:45:f1:57:e8:a2:a7:0c:b0:4b:9c:c6:8b:0d:
49:b6:8b:b3:8a:9c:29:df:02:ce:f3:37:b0:dd:9c:
8b:2a:53:49:11:3f:79:d1:c0:5d:5c:9e:ad:66:eb:
cf:a6:8f:68:ec:7d:18:e2:9a:12:3c:90:d5:36:71:
c2:9e:7d:73:55:94:76:cc:b8:f4:0f:ab:97:ce:2d:
39:46:e4:dd:e5:84:15:e5:a8:c3:58:d4:d5:53:a3:
f3:fc:17:37:7b:04:90:22:ea:b5:8c:0e:c5:93:9b:
c3:b0:68:34:01:b6:95:c0:64:0c:3f:f3:80:b0:bd:
d1:1f:d0:07:8b:47:37:8e:d0:15:5c:53:c3:0e:76:
5f:60:cd:f6:2e:9a:91:2d:74:00:ec:93:f7:05:c5:
da:a3:ba:0b:1d:8f:57:d6:ef:34:c5:0a:bb:df:9b:
da:0d:e6:e2:04:1f:81:0b:af:ed:29:82:5a:ca:2d:
55:34:6f:f4:d7:b2:2a:86:1e:28:41:90:03:8d:5d:
e7:48:a9:74:d3:10:43:8d:54:66:d8:bc:d3:34:b5:
4b:83:4c:6b:41:87:fd:74:f8:a2:63:2a:a6:53:fc:
47:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:E4:5B:55:BD:4B:35:7E:EC:09:C4:E5:DF:DF:5D:93:0A:24:CA:8E
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/vORbVb1LNX7sCcTl399dkwokyo4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
8d:c8:9d:d5:eb:32:bb:44:1b:e1:8a:08:8c:49:cb:77:47:33:
bd:e6:0d:82:dc:66:b5:e5:2f:fd:4a:44:92:4f:d7:20:a5:0a:
e4:a4:fc:b6:56:2b:3d:13:74:2d:87:1a:19:39:5d:be:64:24:
6d:3f:20:37:45:bf:be:8f:f7:8d:7a:0d:01:9b:5b:8b:9f:ee:
f5:2c:50:3f:cf:01:08:48:a0:ce:16:e0:5f:5a:85:09:15:0d:
3d:6d:b8:5a:78:1f:db:88:f5:cc:b6:a6:26:bb:4d:bd:db:bf:
61:43:74:af:18:c0:4b:6c:5f:8b:75:74:ab:eb:a1:e3:79:a7:
3c:b2:82:53:f3:a5:de:51:9d:7b:e6:e7:5e:46:30:f5:f0:34:
17:50:37:71:94:14:c4:c6:ba:10:f5:40:09:f1:83:45:14:38:
71:1f:ee:b8:9e:1d:32:01:fd:dd:29:11:c6:1f:c0:6f:17:a2:
07:93:56:5b:b5:06:07:1d:34:45:d8:9b:58:0d:7d:7b:5b:35:
b9:b4:3f:e3:1d:b6:3d:e9:00:39:63:be:d1:da:96:b3:ae:a5:
52:a5:fe:8b:1c:ec:02:8e:27:db:83:fb:2f:a4:7c:cf:46:c7:
28:48:c8:9f:35:35:27:da:4e:c7:20:a7:30:9d:0e:bc:4b:b3:
98:9a:1b:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 17:35:49 2025 by rpki-client