Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/veePeHE2QI8p2nCV5XamS7FF4uk.roa
File: veePeHE2QI8p2nCV5XamS7FF4uk.roa (raw, json)
Hash identifier: 1K2PMtrnGZmryQDVEhKpMK+MsU7ouAdu9azUsrByHxA=
Subject key identifier: BD:E7:8F:78:71:36:40:8F:29:DA:70:95:E5:76:A6:4B:B1:45:E2:E9
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 018481DB0072808CA3E5CE9346433704A170
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/veePeHE2QI8p2nCV5XamS7FF4uk.roa
Signing time: Wed 16 Nov 2022 19:12:04 +0000
ROA not before: Wed 16 Nov 2022 19:12:04 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:184:51c3:ad7c/128 maxlen: 128
2001:67c:64:ffff:0:184:3fbd:71f7/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:184:4250:a4df/128 maxlen: 128
2001:67c:64:ffff:0:184:75cf:c8d9/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:81:db:00:72:80:8c:a3:e5:ce:93:46:43:37:04:a1:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Nov 16 19:12:04 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=bde78f787136408f29da7095e576a64bb145e2e9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:16:b2:e0:78:e8:ea:51:93:ae:67:82:34:b1:
e4:df:25:16:75:b6:a5:1b:58:96:60:69:bb:d2:d7:
7f:55:01:91:30:6a:c0:f2:60:4b:7e:dc:6e:4e:77:
a2:7f:56:52:63:9c:da:f6:b2:18:3d:e4:0f:54:17:
06:47:ee:bd:1d:67:93:71:f4:29:8e:d9:bb:02:e1:
b4:90:f3:d4:c4:67:0d:aa:18:38:e8:71:12:db:ed:
f0:22:0f:2b:f7:31:66:c9:e4:80:c2:3a:46:dc:dd:
f6:a7:37:d5:1a:02:7d:93:21:5b:b4:b8:7f:ce:66:
e4:ab:b2:02:01:f0:a9:30:eb:74:55:2a:56:3a:f4:
27:f8:47:f2:5c:a6:f8:ef:a4:5d:20:9a:09:ca:69:
48:2c:bf:1f:31:db:39:f7:e4:6b:c3:ae:e6:ea:7f:
5c:03:38:2b:a1:94:6a:3d:cd:21:ce:a0:8e:5f:71:
b9:53:2a:db:f2:e5:b2:12:cb:1d:f1:a1:6d:79:f9:
4d:94:68:93:30:f5:13:d0:25:ec:53:17:f0:75:5d:
66:10:c1:b8:6e:7e:85:99:c4:30:97:71:db:b3:30:
9c:80:8c:e0:52:e2:3d:f8:5b:44:ff:d3:97:ff:77:
75:1b:3d:e7:54:8e:5d:4b:fc:8f:32:2c:6e:00:fd:
b1:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:E7:8F:78:71:36:40:8F:29:DA:70:95:E5:76:A6:4B:B1:45:E2:E9
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/veePeHE2QI8p2nCV5XamS7FF4uk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
4e:1a:9f:16:05:02:21:df:f8:a4:5e:c0:75:4d:8b:d1:58:ad:
c6:21:48:c0:3c:b7:f1:2c:03:80:19:ff:00:44:57:06:65:bb:
4a:f3:00:c8:11:9f:62:08:40:3b:e2:64:68:29:b4:c5:98:a1:
62:44:29:8c:24:3b:08:0f:e1:f0:26:7a:e9:c7:63:e8:15:d3:
34:46:1e:a7:16:ee:83:51:8c:61:b7:ff:10:cd:7d:5e:e8:6e:
2f:85:9c:ff:e4:6a:ed:28:b4:08:d8:b6:39:6a:88:2f:e7:93:
5d:0a:aa:a3:97:d5:03:d6:ae:e7:28:37:c7:c9:75:46:2e:b8:
ec:cb:6d:58:2f:6f:97:9a:30:c9:78:f4:e7:1e:41:ed:5d:7a:
48:8e:19:fa:50:be:b9:11:66:9c:1b:e1:ef:bb:0d:c7:15:86:
0b:31:cc:2d:f9:0f:d1:dd:9d:e6:70:fd:92:78:a0:23:a7:6b:
af:19:41:14:d8:94:4f:56:c8:be:e5:2e:01:92:e3:5c:2d:55:
f5:17:83:39:38:79:78:84:e7:76:bd:b4:28:52:9a:e8:18:e0:
e0:ae:6b:89:cc:0c:30:74:25:20:a1:80:34:af:a9:61:1c:74:
f3:f1:19:07:60:88:f9:52:e3:a4:49:26:f1:20:ed:c0:b3:28:
b0:da:9b:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 17:34:02 2025 by rpki-client