Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/vwSvPB46NA6zH4fx65goDUCekVM.roa
File: vwSvPB46NA6zH4fx65goDUCekVM.roa (raw, json)
Hash identifier: IzrnoWj2cns84TwKQTYRYJ2qnseXx4K5rhKlwQQ4igo=
Subject key identifier: BF:04:AF:3C:1E:3A:34:0E:B3:1F:87:F1:EB:98:28:0D:40:9E:91:53
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0189B43AC2076A9844224BE46DB9C59A65B6
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/vwSvPB46NA6zH4fx65goDUCekVM.roa
Signing time: Wed 02 Aug 2023 03:11:36 +0000
ROA not before: Wed 02 Aug 2023 03:11:36 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:188:7858:a003/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:189:a0e4:5c7d/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:b4:3a:c2:07:6a:98:44:22:4b:e4:6d:b9:c5:9a:65:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Aug 2 03:11:36 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=bf04af3c1e3a340eb31f87f1eb98280d409e9153
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:b0:cf:66:b0:db:44:81:30:1d:4c:2e:5d:36:
8b:1c:ce:f2:64:ca:8e:91:7e:cd:8c:5e:aa:55:d4:
7f:06:3e:9a:15:34:32:36:7b:c3:71:f4:4a:49:90:
bd:c2:4f:25:e9:35:59:60:2c:11:5e:16:77:21:3c:
67:7b:ec:95:9b:49:fd:9a:34:6b:0c:64:88:46:5b:
e9:f8:28:48:85:ac:b9:50:2c:99:d7:12:93:37:ca:
dd:9c:5a:7f:b9:ec:bd:9e:c6:22:e0:b5:21:43:a2:
bd:81:99:3b:b7:8f:39:cf:d4:1d:27:e7:0b:d8:36:
ca:23:c9:2c:91:95:52:98:1d:1a:2b:0b:24:b6:f0:
7f:9f:b6:66:87:3c:7a:2f:f0:f8:cd:78:51:f4:f1:
7d:c8:74:87:65:d7:cb:c9:07:0b:8e:74:cd:b3:d8:
dc:22:0d:c4:40:f1:c5:ba:f5:fb:05:5a:09:9d:2c:
41:cb:eb:8b:ad:4b:ce:41:a6:1f:be:43:ca:80:06:
6e:4a:0d:91:01:e0:f0:44:b3:98:c6:d1:73:e3:d6:
65:8b:cf:fe:1c:e6:78:45:dd:cc:8d:6d:e8:70:35:
79:6e:8c:84:b2:f8:dc:6c:97:50:23:ff:aa:59:65:
4b:ee:18:6f:da:b8:c2:a4:7f:a1:64:c8:f3:c1:92:
a6:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:04:AF:3C:1E:3A:34:0E:B3:1F:87:F1:EB:98:28:0D:40:9E:91:53
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/vwSvPB46NA6zH4fx65goDUCekVM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
9b:6d:b4:80:25:77:08:8a:bc:28:aa:7f:be:21:b7:ee:73:94:
de:de:1d:54:7e:78:e3:79:51:cc:8f:c4:22:16:63:f8:12:91:
05:48:9c:d7:fe:18:82:1e:36:5a:40:21:e4:fe:23:b6:ad:47:
9d:cb:3b:6c:68:d7:dc:fa:a9:85:20:20:7d:c0:7d:53:f1:ff:
e7:9b:d4:55:17:59:3a:4f:60:ba:e8:3a:7a:fb:9a:8a:0f:b7:
50:b7:e3:a1:93:6f:f8:e7:4a:86:e1:ce:a4:a8:68:44:d6:75:
5c:2b:e8:8a:c1:72:96:91:f7:8c:d6:4f:22:db:e1:ff:5e:3d:
6e:e4:ee:01:d6:85:e4:ea:f3:1b:c2:65:42:7e:2c:2f:44:42:
72:06:a0:ca:7a:3d:bb:96:6a:fd:84:b5:4a:0e:63:6b:b0:78:
63:d3:cc:8e:dd:e3:c5:1f:e4:91:0f:7f:f8:ad:61:5d:83:4f:
4c:af:70:77:ce:76:20:bc:cf:65:53:6e:ca:f9:d0:c9:3c:19:
f4:d5:7a:38:57:1e:2b:c4:0d:4b:9c:85:50:14:38:89:dc:9a:
b1:a7:71:3c:e6:cb:7a:26:8f:f3:97:48:9b:aa:8f:0b:90:fb:
e4:04:0e:5b:9a:da:30:3a:1e:d0:b8:69:18:cb:4a:ef:7e:81:
d9:60:bf:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 12:52:51 2025 by rpki-client