Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/vwS48SRAUERqb-DAa-zogQpBEeI.roa
File: vwS48SRAUERqb-DAa-zogQpBEeI.roa (raw, json)
Hash identifier: T267kuff/VZFhnwKiaWpWJ1RDgnfVSKZD0O3ZDKOZyo=
Subject key identifier: BF:04:B8:F1:24:40:50:44:6A:6F:E0:C0:6B:EC:E8:81:0A:41:11:E2
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 01867866F04AC5A9F6909D7DFD4FD669584F
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/vwS48SRAUERqb-DAa-zogQpBEeI.roa
Signing time: Wed 22 Feb 2023 09:14:17 +0000
ROA not before: Wed 22 Feb 2023 09:14:17 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:78:66:f0:4a:c5:a9:f6:90:9d:7d:fd:4f:d6:69:58:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Feb 22 09:14:17 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=bf04b8f1244050446a6fe0c06bece8810a4111e2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:95:56:f9:14:03:82:1d:86:a1:ab:b6:86:75:
85:4b:40:f4:0d:2e:47:87:13:b9:40:18:74:c1:34:
6b:39:f2:48:09:e5:e7:3d:fd:19:08:4e:b0:68:39:
66:07:3c:62:ce:f2:5e:06:82:67:19:25:50:62:b5:
26:7f:e8:20:32:44:60:b4:ca:51:99:a3:b1:5a:c1:
f9:cb:1b:9c:03:a5:36:08:6f:b4:48:9a:35:c7:f9:
88:9a:9e:45:d0:a8:64:bb:18:a9:6f:2a:fb:0d:e4:
87:d2:24:95:57:6b:e8:b8:6d:85:cd:43:3a:a4:72:
94:92:3e:13:19:00:66:58:c9:4e:be:31:c6:cd:d8:
b5:6f:de:77:25:ab:42:3b:60:47:9d:f0:89:a7:fe:
32:0f:f3:c4:34:a8:4f:92:ca:33:c9:be:02:90:a7:
cb:37:37:0b:8a:04:d1:40:cc:92:5e:5e:73:ad:66:
5f:0b:49:93:c0:ee:c7:f3:37:f6:94:93:8f:a3:ba:
db:54:da:87:88:b8:c5:cf:72:a8:00:81:37:16:d3:
27:ea:ee:da:45:6e:73:87:b3:a6:4f:1d:66:8b:48:
85:69:ce:d1:9a:2e:3a:12:7b:0f:8d:8b:7b:43:99:
0b:0c:38:2c:61:02:97:d6:8a:09:93:49:37:95:d4:
39:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:04:B8:F1:24:40:50:44:6A:6F:E0:C0:6B:EC:E8:81:0A:41:11:E2
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/vwS48SRAUERqb-DAa-zogQpBEeI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
1e:8b:66:0a:b9:3e:0b:2b:40:cc:b9:16:2c:85:15:67:ff:da:
b3:ea:bb:98:58:87:5e:48:11:36:0a:8f:09:78:c4:3e:e0:23:
fb:3c:f4:48:06:29:1b:f8:a7:a7:54:71:d6:a9:07:ad:08:6c:
b6:c1:72:8f:45:56:89:fd:d9:81:95:e7:f3:ff:c0:57:fb:f2:
bf:b1:01:35:a5:2e:b5:3b:86:f8:5b:04:4c:04:4b:c7:f1:e4:
d0:0a:da:7e:0e:82:06:d6:d0:3b:63:a5:a9:66:7a:b2:bf:13:
95:1d:95:33:4d:fd:8c:81:69:a8:c2:2a:80:e3:ff:43:0c:6b:
74:4c:df:7c:36:82:b0:22:77:c7:b5:d3:3e:13:1f:4f:e0:ac:
83:e5:2c:d7:8e:03:96:3d:52:58:05:40:f1:08:23:32:6d:d1:
82:44:ce:7c:df:6f:55:99:6a:8a:1c:3a:67:48:27:0a:7e:75:
25:f0:0d:71:0b:f1:2b:b8:f6:b4:18:ef:b4:5e:97:1c:b2:bd:
10:63:06:32:06:9e:6a:49:5c:16:25:64:4b:ac:fc:9d:fe:e8:
89:38:0d:0f:88:b4:1e:4f:91:ca:3b:40:9a:9d:03:19:5e:a1:
0b:a6:aa:26:e1:9e:59:bd:af:cf:c0:3d:4e:cc:e8:06:6b:36:
de:01:ad:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 17:42:36 2025 by rpki-client