Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/vrEXqGU1s1qN9qWMEtyQvfN6Ff4.roa
File: vrEXqGU1s1qN9qWMEtyQvfN6Ff4.roa (raw, json)
Hash identifier: n1lUhiHBMeZVWdyVO4G09gDeeGZCj6rpD41dZQJsifk=
Subject key identifier: BE:B1:17:A8:65:35:B3:5A:8D:F6:A5:8C:12:DC:90:BD:F3:7A:15:FE
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0189E5C5E53C034E66F72547B3CCE14495EA
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/vrEXqGU1s1qN9qWMEtyQvfN6Ff4.roa
Signing time: Fri 11 Aug 2023 18:04:58 +0000
ROA not before: Fri 11 Aug 2023 18:04:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:188:7858:a003/128 maxlen: 128
2001:67c:64:ffff:0:189:e5c5:5ac4/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:189:a0e4:5c7d/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:e5:c5:e5:3c:03:4e:66:f7:25:47:b3:cc:e1:44:95:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Aug 11 18:04:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=beb117a86535b35a8df6a58c12dc90bdf37a15fe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:16:8a:24:1f:62:5b:e0:f7:48:21:b2:d2:74:
c8:55:a3:ab:4f:8b:ce:56:73:9e:63:1c:0d:f2:8a:
09:67:cf:47:02:d7:f5:00:d0:5a:e1:ea:49:ef:29:
e3:1c:58:8c:2f:0c:27:95:51:f7:cf:b4:3a:93:78:
12:d5:a0:84:1a:26:59:2a:f5:ac:7b:fb:c4:7b:ce:
0d:a7:b2:4f:c0:21:38:08:61:b1:e8:33:e6:27:2d:
8f:61:d2:ae:c0:94:10:90:57:fe:b1:1c:d8:04:98:
ce:66:04:be:05:25:99:e6:4c:e9:81:43:26:87:3d:
05:ec:94:45:1b:f9:c0:50:39:d8:02:38:32:c5:c1:
ec:e0:5d:90:ab:bd:b3:a1:9c:3d:4a:13:c8:fc:4b:
d5:9f:8a:f5:19:bf:03:8a:49:ac:68:e4:24:60:dd:
7d:d8:45:cb:72:8a:e8:f2:d7:f4:6e:25:8e:f9:e1:
e0:61:a1:66:87:4f:10:ab:28:35:07:20:95:ae:46:
70:f4:f1:dc:b5:c5:98:37:60:8e:9c:06:62:7d:e1:
9e:ac:c3:84:24:08:1a:c0:7a:ec:34:1d:62:cd:8f:
b1:5c:3c:f5:8c:ee:23:23:cf:7b:54:5f:cf:68:1b:
2d:1d:c5:de:e6:27:5a:15:f2:de:23:55:f8:18:8f:
18:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:B1:17:A8:65:35:B3:5A:8D:F6:A5:8C:12:DC:90:BD:F3:7A:15:FE
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/vrEXqGU1s1qN9qWMEtyQvfN6Ff4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
4a:e6:98:7b:d0:1f:73:b5:d2:1b:44:84:6e:00:4e:35:37:db:
70:2c:38:a6:48:0d:c1:6d:5e:d5:ea:01:e1:5b:3b:d9:fe:0d:
21:a6:2e:79:8a:bc:8a:6f:2d:97:2b:33:d4:0c:67:4c:f5:7d:
85:71:12:5e:a7:a1:56:02:97:4f:06:74:8e:17:6b:2d:96:ce:
e0:1c:17:8a:fa:86:05:83:73:47:a8:c5:f4:a5:c5:64:6a:65:
60:f8:c4:e9:d0:04:17:a1:40:03:4d:05:43:c6:c4:be:3b:55:
9a:31:75:62:4f:5c:52:fd:5d:f4:db:83:3f:0d:61:da:00:aa:
ef:59:bb:d1:cc:00:99:9a:6a:67:96:18:b1:b5:d6:25:eb:6f:
0d:aa:dc:e0:89:e7:13:e2:d5:9d:a6:63:0e:80:e7:db:47:15:
09:ce:81:55:ac:a3:ea:5d:45:75:07:7a:a2:7a:f0:ca:87:fb:
4d:26:c5:a3:c4:fa:c9:44:03:71:2f:cc:85:d7:83:5a:35:5a:
17:52:fb:50:4f:aa:1c:6a:97:cf:2c:2d:f1:e8:0d:c1:65:1c:
9a:c4:8d:8b:ce:1b:32:55:b9:08:d4:78:55:34:c2:a7:83:5e:
d1:ae:39:4b:bf:7d:17:22:ad:bf:34:b2:6f:6e:a1:92:2d:60:
6f:ee:aa:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 21:56:36 2025 by rpki-client