Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/vs667TXk1WX2CceY7JoycXVeAXQ.roa
File: vs667TXk1WX2CceY7JoycXVeAXQ.roa (raw, json)
Hash identifier: 6xXxu8NHkg2wiiFU2uz5caGXRSxgmAvCLhNhRmnVYiQ=
Subject key identifier: BE:CE:BA:ED:35:E4:D5:65:F6:09:C7:98:EC:9A:32:71:75:5E:01:74
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 01868CF81A5AC775634102D16734CE90A23D
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/vs667TXk1WX2CceY7JoycXVeAXQ.roa
Signing time: Sun 26 Feb 2023 09:05:15 +0000
ROA not before: Sun 26 Feb 2023 09:05:15 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:8cf7:4779/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:8c:f8:1a:5a:c7:75:63:41:02:d1:67:34:ce:90:a2:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Feb 26 09:05:15 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=becebaed35e4d565f609c798ec9a3271755e0174
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:bb:41:3e:12:83:57:83:88:75:d9:59:48:c8:
5f:3f:44:02:38:49:90:1f:b1:fd:d5:d6:ac:9b:57:
b8:f1:91:4d:e0:c5:a5:25:cc:84:2e:3b:0a:17:75:
3d:b0:d7:c3:1e:e9:d9:fb:37:10:cc:b2:4e:b2:57:
80:31:c8:b4:cf:e9:71:27:7c:e0:66:f1:ec:f2:56:
f4:33:e4:4f:9f:dd:d0:2a:9c:0e:16:e8:6f:90:62:
9e:78:a4:ed:6c:6c:1c:4a:19:23:cb:23:12:ca:d1:
c3:c1:69:15:88:1a:c6:f9:e5:31:29:98:9d:87:fd:
63:48:d7:ee:1f:4f:a0:6c:74:43:cd:8e:f9:63:e9:
02:c6:99:88:b4:cf:ac:67:c8:35:64:f7:d1:73:9c:
0d:31:dc:b2:b8:d1:25:3d:8f:dc:d9:55:b8:8e:01:
7b:18:90:06:e5:5c:2a:c2:1a:7e:0d:8a:db:83:2c:
14:05:bb:a6:f0:aa:8f:64:b9:f0:3a:85:d7:df:ff:
e4:e5:05:94:f9:79:9b:38:8d:77:db:ac:a3:ab:d1:
c7:e7:61:6e:0b:87:d3:97:f1:46:52:d1:02:6c:e0:
6e:53:9a:e0:2f:84:4b:14:95:ba:b5:19:f4:bd:d5:
ae:0b:5d:c4:94:d7:89:6e:bc:6d:32:43:a7:a0:46:
2c:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:CE:BA:ED:35:E4:D5:65:F6:09:C7:98:EC:9A:32:71:75:5E:01:74
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/vs667TXk1WX2CceY7JoycXVeAXQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
31:86:11:93:fd:da:a6:ea:a0:fd:6f:33:87:56:70:11:4c:8d:
cb:b3:33:aa:e5:5b:17:06:4e:ab:3a:0a:75:52:eb:6b:56:36:
15:25:27:dc:80:1c:88:d1:07:7b:94:8e:22:2c:c2:5a:97:89:
38:30:bb:e1:5a:78:41:e2:1a:d2:c1:f2:ab:51:6e:7e:33:2a:
8b:87:8a:68:04:4c:ba:a3:34:b0:d4:ae:ef:2f:09:73:d5:02:
d6:97:b8:ff:81:21:f4:64:35:fe:fc:0b:9f:79:8e:02:a3:8b:
84:87:3d:bd:b1:b2:b5:46:52:1f:6c:46:31:04:39:88:02:2c:
26:a8:31:09:67:38:c8:e5:ce:dc:59:dd:33:a0:5b:24:26:1b:
2c:08:46:ce:9e:09:d4:88:9f:37:ff:8f:8e:ac:20:5a:17:ca:
60:fb:56:b9:26:13:b2:0f:9a:47:27:3e:61:1b:71:9f:e2:23:
f0:91:d7:22:9b:61:33:c3:f4:6d:40:3e:0d:6a:84:bb:4a:f3:
cd:ff:b8:c8:4b:c7:89:81:21:ef:cc:2d:bb:f7:b6:83:ec:6e:
f6:e0:7e:f5:48:79:2b:c9:80:0f:08:45:2e:67:ea:6f:52:78:
2f:01:96:84:fd:20:c2:18:47:f6:65:01:ba:f7:05:45:c2:19:
02:bc:50:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 3 23:41:26 2025 by rpki-client