Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/VOwDX7ytTg36xFG_S6wkBq08ZIw.roa
File: VOwDX7ytTg36xFG_S6wkBq08ZIw.roa (raw, json)
Hash identifier: 05x2qmtw1ffL45kJjcbV3lH6caw09e4GV3FBBOllvSM=
Subject key identifier: 54:EC:03:5F:BC:AD:4E:0D:FA:C4:51:BF:4B:AC:24:06:AD:3C:64:8C
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 01898799BE5E43BD1768620E72742B3E1B4E
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/VOwDX7ytTg36xFG_S6wkBq08ZIw.roa
Signing time: Mon 24 Jul 2023 11:12:26 +0000
ROA not before: Mon 24 Jul 2023 11:12:26 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:188:5fe2:b396/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:187:4695:a68a/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:188:7858:a003/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64:ffff:0:187:fa9a:b088/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:187:b2b8:a7dd/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:87:99:be:5e:43:bd:17:68:62:0e:72:74:2b:3e:1b:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Jul 24 11:12:26 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=54ec035fbcad4e0dfac451bf4bac2406ad3c648c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:eb:0c:be:34:52:09:a1:36:bd:85:3e:3e:24:
1a:61:70:de:e9:a7:27:67:1f:54:8e:f3:83:9c:2c:
7a:41:2c:09:3a:a1:65:b6:fc:a0:ce:c2:56:cd:50:
dc:cf:b4:82:55:c4:e5:cb:63:43:50:18:c8:7b:23:
2d:9a:83:d9:40:14:d9:a3:50:ae:c8:07:2f:b9:2f:
63:4e:c8:32:11:03:de:af:e7:4d:40:25:eb:21:2b:
97:16:7f:f8:2e:24:0a:43:38:d3:13:50:eb:83:8d:
77:f0:68:d1:04:b1:fe:76:3d:52:b3:57:f7:d5:ea:
43:b7:d7:f2:d5:de:33:c2:79:fa:d4:4f:50:17:09:
c2:d4:64:c9:6f:7f:1d:35:c5:af:0c:da:d9:a5:e6:
a6:e4:26:c8:3c:e5:4e:cd:b8:60:ad:e9:1e:0f:bc:
0c:3f:06:06:5a:fe:3f:c3:0f:c8:66:64:c0:3a:dc:
59:8f:01:f0:0c:ba:d5:ca:91:e2:f0:e5:ea:4d:40:
c8:cd:93:c8:0c:ea:52:37:de:2e:29:5a:0d:c8:29:
06:2a:86:51:28:3d:2c:0f:90:34:d2:3a:7e:64:4f:
5b:b1:77:af:6d:02:a1:20:67:ac:e9:b0:f2:af:6d:
69:3b:17:0b:02:e9:6c:43:03:eb:a5:5b:71:b1:03:
68:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:EC:03:5F:BC:AD:4E:0D:FA:C4:51:BF:4B:AC:24:06:AD:3C:64:8C
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/VOwDX7ytTg36xFG_S6wkBq08ZIw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
09:6b:06:a2:0d:a9:63:f4:fd:3b:18:c0:25:c8:6c:84:09:47:
d2:21:fd:7f:f7:9b:68:6a:0a:1d:03:ee:fc:4b:1a:4a:6c:ad:
ad:77:96:8d:28:c7:db:45:46:d4:96:93:98:9a:f6:a1:16:eb:
93:ef:d5:70:f0:e3:66:5a:b4:43:b0:0e:19:03:65:d3:22:55:
57:e1:35:80:f3:b7:f6:c3:2e:32:91:33:38:21:0e:09:7e:21:
4a:90:1c:f3:dd:64:83:8d:02:a4:69:21:7e:13:ae:ac:10:eb:
13:d5:e4:f8:f2:3c:ed:3c:21:24:83:29:e7:10:ee:6a:d1:82:
62:a4:de:05:8d:60:fb:7e:44:b1:ce:c7:a6:e1:d1:b7:66:65:
52:76:37:20:4a:f6:10:37:1f:8f:fb:3a:5e:4c:cf:79:e7:0d:
7b:91:de:b1:1e:8a:30:7b:50:dd:6a:cb:af:20:d5:3a:5d:3a:
b9:1b:bb:b6:2b:ee:36:1b:32:0a:23:dd:7c:77:88:8e:62:9b:
59:0f:4d:bf:e1:c1:30:04:47:50:62:29:bf:bc:ae:28:29:ae:
bb:d8:ca:58:78:a2:67:7a:94:7f:45:9e:99:79:d1:b2:07:1c:
50:72:f4:c5:a9:11:d4:9d:d5:9d:40:c1:95:2f:1b:50:9e:26:
00:55:0d:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 13 14:51:41 2025 by rpki-client