Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/vRncZF_BZ9NXYxh1WLRT2EhSqIM.roa
File: vRncZF_BZ9NXYxh1WLRT2EhSqIM.roa (raw, json)
Hash identifier: X/FzbznvJqfjozA5GuOLK1tLpARhcyGA0czH5FE+P6o=
Subject key identifier: BD:19:DC:64:5F:C1:67:D3:57:63:18:75:58:B4:53:D8:48:52:A8:83
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 01868C92B1F99E2C23D7A751DFE8CB4D8E92
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/vRncZF_BZ9NXYxh1WLRT2EhSqIM.roa
Signing time: Sun 26 Feb 2023 07:14:29 +0000
ROA not before: Sun 26 Feb 2023 07:14:29 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:8c:92:b1:f9:9e:2c:23:d7:a7:51:df:e8:cb:4d:8e:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Feb 26 07:14:29 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=bd19dc645fc167d35763187558b453d84852a883
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:f6:e0:83:b3:51:77:0a:36:8c:b4:9c:79:fd:
7c:de:38:95:89:ab:e1:d4:34:99:e2:7d:e0:ba:72:
3d:51:65:56:ca:c8:ae:94:71:14:e5:39:15:23:14:
fb:ab:e5:98:81:d2:ed:ab:f0:69:32:09:27:4b:4b:
8e:95:d1:6f:58:cd:f6:c1:4a:bc:2d:0e:a5:05:ca:
f8:7b:53:0b:51:d6:69:ab:24:04:dd:f5:41:58:7b:
23:04:99:93:91:99:66:1d:03:7f:e5:38:84:e1:24:
b7:04:5b:3e:0b:1c:09:ea:63:e0:b9:3f:83:90:a8:
97:27:ea:02:f4:00:20:f3:ce:2c:72:c4:7d:02:02:
d4:85:d5:44:75:e4:32:19:cf:a2:ce:6e:f1:c9:de:
6c:55:c5:32:f3:db:f1:84:f8:92:33:10:17:c3:a1:
c9:8d:14:e6:ff:f4:0c:60:fc:6a:b8:a6:d9:30:b9:
83:82:50:b2:0e:8a:37:96:bb:0f:fb:a1:1b:f5:21:
de:12:ab:81:d0:59:33:80:a5:81:fe:41:09:45:33:
30:57:df:8c:c1:b8:3b:3d:d5:aa:e3:51:46:6c:e5:
ac:19:c3:23:11:f7:0f:dc:36:6f:00:dd:d9:f2:94:
91:1c:9c:59:e2:a1:77:62:2c:9b:23:b6:55:12:58:
ee:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:19:DC:64:5F:C1:67:D3:57:63:18:75:58:B4:53:D8:48:52:A8:83
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/vRncZF_BZ9NXYxh1WLRT2EhSqIM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
37:78:e8:ea:13:68:f8:8c:2d:92:93:53:25:cc:a0:4d:fc:a3:
eb:11:20:d0:ff:eb:66:6d:24:8d:a4:3f:1a:6e:26:72:a7:f8:
dc:2c:e5:00:53:60:4a:cd:6b:d0:27:55:97:80:63:93:ff:9c:
96:cc:ff:97:0f:a7:bf:6a:3f:2c:ad:69:5d:94:4d:2c:46:32:
a6:28:0d:67:fa:09:4d:db:8a:ef:43:3a:6a:19:92:b8:50:e2:
f6:d0:89:54:6f:3a:8a:72:b5:bc:85:93:7c:f6:44:14:f9:a3:
2b:13:9c:d2:bb:f0:f5:aa:bf:e2:90:c7:04:8a:a1:b4:3a:af:
b5:88:4e:9a:2e:bd:e9:d9:45:03:87:d7:4c:74:ea:cd:11:2c:
d8:3d:95:91:ff:b9:98:f7:f6:62:69:18:85:bb:12:0e:aa:63:
04:a9:4c:bd:10:55:3f:20:68:fe:6d:c6:37:e2:a8:64:57:87:
1c:56:25:47:73:88:67:34:04:3b:54:b6:a8:39:30:ec:15:32:
3e:b1:d7:42:01:84:77:13:ad:fa:f7:32:5c:d0:01:18:9d:15:
2d:aa:59:19:c7:42:dd:87:12:7d:ce:be:1d:b8:95:e5:ec:fc:
a6:c5:1d:75:98:d9:9e:da:58:98:a1:48:eb:fd:15:5e:45:ca:
a6:e5:f0:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 2 21:35:47 2025 by rpki-client