Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/vyEe2SDs0haBcDLDJqYOFX_APfI.roa
File: vyEe2SDs0haBcDLDJqYOFX_APfI.roa (raw, json)
Hash identifier: 3ZEISipjxUIAZIg6YKiYXbzolmpG05N/T6qBmyuS4i4=
Subject key identifier: BF:21:1E:D9:20:EC:D2:16:81:70:32:C3:26:A6:0E:15:7F:C0:3D:F2
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0183A38F605A29A4BC14AA90B33040C74E78
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/vyEe2SDs0haBcDLDJqYOFX_APfI.roa
Signing time: Tue 04 Oct 2022 15:13:45 +0000
ROA not before: Tue 04 Oct 2022 15:13:45 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:182:3f1d:a803/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:183:50b3:5643/128 maxlen: 128
2001:67c:64:ffff:0:183:5f81:ab13/128 maxlen: 128
2001:67c:64:ffff:0:182:7cb2:99d4/128 maxlen: 128
2001:67c:64:ffff:0:183:1279:659d/128 maxlen: 128
2001:67c:64:ffff:0:182:383f:6b78/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:a3:8f:60:5a:29:a4:bc:14:aa:90:b3:30:40:c7:4e:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Oct 4 15:13:45 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=bf211ed920ecd216817032c326a60e157fc03df2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:53:8d:f8:4e:5c:dd:ff:c2:85:11:14:aa:5e:
2d:3a:10:a5:13:ef:60:5f:ea:e7:e2:aa:b3:65:f8:
41:1d:95:f3:9e:27:16:72:61:cd:50:0f:c6:fb:85:
ca:4c:79:0b:d3:7a:2f:07:3b:c6:b3:f4:83:21:05:
25:21:a9:af:d6:25:03:8b:42:a4:e4:fa:4d:6b:34:
68:52:ae:fb:ff:66:fa:b2:e5:09:e9:f0:8c:00:b2:
39:06:37:19:35:96:fe:ee:71:20:ff:5d:50:52:4c:
29:81:5c:84:14:a4:6f:8d:b5:dc:db:93:fb:4c:94:
62:92:ee:f1:9a:5c:f2:49:d3:91:2d:79:b0:56:a4:
42:63:fd:d6:99:48:3c:20:06:51:5b:dd:d8:06:3e:
99:f3:5e:54:9d:51:05:61:93:5f:60:d9:94:3b:73:
a3:f9:e7:74:0d:14:8e:2d:18:98:9e:63:da:30:33:
40:ce:77:f6:a1:37:32:fe:84:f5:c3:29:74:ad:7a:
4f:b7:89:17:be:7a:0a:a7:dc:e0:1a:e3:bd:a1:37:
c4:b0:1a:6c:51:9b:cd:55:e7:51:06:f1:7f:b8:b4:
b2:ec:1c:42:f7:0f:d8:e7:01:b7:96:fd:27:5a:5a:
70:6a:22:b6:82:80:c1:fd:19:d1:54:70:cb:ec:d8:
6b:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:21:1E:D9:20:EC:D2:16:81:70:32:C3:26:A6:0E:15:7F:C0:3D:F2
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/vyEe2SDs0haBcDLDJqYOFX_APfI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
34:6c:fe:50:74:19:23:bb:73:59:2c:dd:a4:89:6f:a8:e8:1a:
4b:d8:cf:16:63:2b:fa:1e:23:54:b0:78:d4:d1:0a:e7:03:ca:
84:4a:21:93:bf:05:4c:cb:6d:f9:02:eb:51:a4:b5:2c:9f:1c:
1e:17:9a:92:a6:3a:ba:3b:fc:ed:81:a1:01:60:3d:e1:ae:25:
d1:cb:89:7b:08:2d:ab:09:eb:f6:14:fd:8c:1e:ea:c7:7f:fb:
2f:d4:83:a4:98:db:d5:2b:9a:d1:ec:fb:09:d3:55:ff:25:43:
d3:9d:3b:1b:6c:d4:ca:67:89:bc:6d:c6:53:4f:bc:0a:b7:62:
14:06:1e:13:12:6c:78:8f:a8:a3:4c:72:8f:82:43:70:a0:44:
4f:b7:34:ac:a4:38:75:dc:5f:bd:fb:6a:87:cc:a5:0a:47:e9:
8e:1f:6e:9f:20:ea:95:5f:bb:78:58:5b:e8:3c:a4:95:79:0e:
29:42:ab:21:84:7e:cc:e1:81:14:5c:56:fa:d3:63:14:22:0c:
f7:fd:2e:fc:e6:07:8e:b3:0b:2e:53:67:04:bc:26:e2:2f:f4:
f8:18:99:21:25:a2:b1:2a:32:64:8c:7a:b6:d8:f2:68:c0:65:
dd:e2:56:47:0b:e6:20:a9:d5:e5:2a:f5:3e:8b:69:f3:22:13:
69:9e:4d:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 17:34:50 2025 by rpki-client