Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/vchcbvAJI-Ee_EB1q8BGhBO3JSY.roa
File: vchcbvAJI-Ee_EB1q8BGhBO3JSY.roa (raw, json)
Hash identifier: myHzRWVwBWq9qrFoShvoIV5eotRSreNx8xASAGeOXN0=
Subject key identifier: BD:C8:5C:6E:F0:09:23:E1:1E:FC:40:75:AB:C0:46:84:13:B7:25:26
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0184DD3CEEAD3AEA4BBA9F1540DE04F752C3
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/vchcbvAJI-Ee_EB1q8BGhBO3JSY.roa
Signing time: Sun 04 Dec 2022 13:04:28 +0000
ROA not before: Sun 04 Dec 2022 13:04:28 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:184:dd3c:e66c/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:dd:3c:ee:ad:3a:ea:4b:ba:9f:15:40:de:04:f7:52:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Dec 4 13:04:28 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=bdc85c6ef00923e11efc4075abc0468413b72526
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:14:2c:94:32:00:93:33:e5:f9:3c:e6:25:44:
85:33:e7:30:01:8c:27:b2:9b:ab:9a:b4:13:f6:38:
c9:f1:63:b1:9b:69:4c:6a:29:93:82:4c:79:e5:cb:
22:d5:61:f2:f7:0b:66:d3:f0:73:bb:39:db:27:4d:
4b:19:a9:f7:f3:f0:f1:4b:24:f6:88:b2:a9:43:56:
f7:64:05:ee:5e:c0:fd:d1:a9:f9:0c:8b:ef:44:c9:
ec:53:15:a8:74:45:ba:03:c9:b9:98:4d:7a:39:ca:
67:71:c4:32:32:e2:b0:ce:4e:ac:ae:3e:77:e5:26:
4e:45:25:3b:9d:5a:64:ee:43:d5:26:a5:0b:1d:98:
11:0b:cf:bb:41:2c:34:f5:65:24:36:dc:ea:bb:43:
e1:36:ef:2f:83:72:d4:2c:2d:73:cd:fb:43:74:ea:
4f:65:a3:25:e1:a9:d3:42:cf:3d:04:a3:5e:ca:72:
ec:ad:88:30:21:39:c9:ab:c4:b1:25:f6:5a:92:aa:
73:ec:59:04:2f:02:d8:7a:b6:a5:e5:e5:9b:54:2c:
77:24:11:06:04:29:88:c0:af:61:2d:79:d7:58:c6:
4e:b5:9c:3c:73:94:16:e2:81:63:8d:7e:15:69:c4:
22:88:9f:e0:5b:eb:d0:20:88:4e:0f:91:0d:f2:e3:
9b:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:C8:5C:6E:F0:09:23:E1:1E:FC:40:75:AB:C0:46:84:13:B7:25:26
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/vchcbvAJI-Ee_EB1q8BGhBO3JSY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
1b:65:55:fe:94:7e:97:db:0c:c0:67:33:db:c9:b2:75:7f:5d:
45:c4:c3:8a:09:70:13:4d:b2:8d:e9:9c:55:85:5f:74:23:d1:
05:29:05:fe:fb:56:10:61:d9:98:9d:53:fa:aa:26:9b:65:42:
76:1d:28:50:20:40:c6:a4:fa:e5:47:d5:e5:d1:2c:4f:4b:fd:
bc:5e:24:7a:f5:e7:e8:8e:f2:ad:0f:67:70:00:71:5e:58:1e:
db:88:71:64:95:57:89:6e:22:88:9d:13:07:6d:cb:74:dc:ce:
79:2a:29:1b:8b:b8:94:4a:31:58:50:c2:91:25:45:ec:7c:aa:
99:29:ef:9b:11:ba:22:c7:92:37:35:37:1a:a8:c9:44:32:03:
39:eb:8f:d5:2d:cc:8d:4e:8b:90:44:fa:42:df:34:8f:59:4e:
ea:1a:fa:6a:3b:51:26:64:88:03:f7:50:9c:57:a8:d0:45:63:
62:50:dc:00:d2:9e:31:bf:01:c2:32:22:42:41:9d:39:90:1c:
68:c4:61:08:69:3c:86:24:78:5b:b2:24:f1:4e:16:9f:82:ca:
0b:99:a9:21:cd:e1:ab:b9:dc:62:d7:92:f2:87:29:5b:96:28:
2f:7a:a7:04:69:ee:00:25:1a:da:15:cf:63:3b:47:55:04:4d:
02:39:92:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 07:21:52 2025 by rpki-client