Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/VlmcR0im0BY3eg251KZ5ayMTvaY.roa
File: VlmcR0im0BY3eg251KZ5ayMTvaY.roa (raw, json)
Hash identifier: uVNzUfIWCYR+PT8qWWWHnduAvK5AbRuGOHsXYLYbrc0=
Subject key identifier: 56:59:9C:47:48:A6:D0:16:37:7A:0D:B9:D4:A6:79:6B:23:13:BD:A6
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 01884A06E086948A4C065FFB7094FC7CB34A
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/VlmcR0im0BY3eg251KZ5ayMTvaY.roa
Signing time: Tue 23 May 2023 19:12:24 +0000
ROA not before: Tue 23 May 2023 19:12:24 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:187:4695:a68a/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64:ffff:0:187:fa9a:b088/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:187:b2b8:a7dd/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:4a:06:e0:86:94:8a:4c:06:5f:fb:70:94:fc:7c:b3:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: May 23 19:12:24 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=56599c4748a6d016377a0db9d4a6796b2313bda6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:87:71:da:36:4c:73:22:a8:67:41:4b:5c:70:
35:4b:68:76:20:6f:f6:9d:c9:20:29:1e:32:9e:06:
83:a4:0b:66:c2:1c:2e:e5:6e:d0:c1:de:ae:5c:06:
99:ec:1d:e8:99:64:e3:f9:ee:5b:ad:04:7a:66:14:
0e:12:4c:c2:35:6b:d6:61:f7:ca:80:9b:fc:95:c3:
dd:e7:b9:6e:94:b3:ed:3f:57:fa:5a:c1:d1:68:bc:
75:b5:2c:61:27:70:1b:08:c4:4d:55:5e:85:1e:80:
fa:5a:eb:5b:d7:3d:03:39:50:f4:08:c8:53:e7:aa:
09:a3:9e:d6:35:67:1c:08:42:bf:dd:88:9d:a7:b8:
c2:5d:ac:c7:26:9c:22:bc:e9:26:5a:9e:3f:17:89:
e8:88:3a:40:ff:10:ab:ca:7d:e5:06:f9:a0:8b:c1:
a4:14:74:91:84:64:15:1a:e0:1c:c6:32:ce:24:17:
44:53:96:62:92:43:92:b7:70:79:d6:5b:fe:89:64:
3b:27:9d:68:a8:8e:46:3c:b5:b3:17:7f:66:ab:a6:
df:07:8e:35:e9:b1:51:9d:b7:d3:27:f7:da:20:35:
2a:c0:26:5e:4a:ed:34:b4:6e:ab:45:2a:f9:ad:13:
28:a9:ec:74:b0:45:04:f5:5f:13:88:00:03:0d:fa:
56:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:59:9C:47:48:A6:D0:16:37:7A:0D:B9:D4:A6:79:6B:23:13:BD:A6
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/VlmcR0im0BY3eg251KZ5ayMTvaY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
12:28:42:9f:9b:40:e3:2b:e9:08:8c:17:30:a3:8d:05:c7:3b:
55:1c:4d:bc:e2:4e:4d:b7:9e:74:e4:2c:e4:fd:43:a4:a8:1e:
4c:bc:95:d8:40:1f:29:80:84:e3:39:ed:83:6a:12:7a:c2:e2:
da:67:5b:76:06:b2:1a:24:36:a6:d6:16:0b:ce:8f:75:08:f1:
bf:0e:dc:60:bf:95:08:d0:27:2b:4f:a2:e6:12:c5:48:89:76:
b6:df:5d:d2:b1:e0:14:1a:28:4b:e5:d8:51:63:71:62:95:db:
65:16:b9:53:3c:16:09:72:37:08:6a:a1:16:b6:a7:43:00:e5:
61:2a:d8:d6:28:31:39:a6:0e:f3:64:f1:8a:ca:55:ce:6f:8f:
fe:ac:78:3f:52:27:ab:cb:6c:82:44:29:d6:37:db:b8:06:eb:
f2:4a:a1:e5:e9:37:18:3c:76:54:f0:9d:52:e2:d8:08:70:ed:
a6:69:10:7a:79:9f:31:5e:16:3f:06:d6:b2:3b:a6:37:13:9e:
69:3d:74:6f:c5:fa:7f:3a:59:07:4f:6f:6d:01:7c:c6:be:37:
92:41:43:54:57:96:69:f6:55:b3:49:29:ec:1b:3e:46:10:e8:
f4:12:b9:23:f7:f5:d8:4f:23:e6:90:2b:ab:ff:a7:cb:41:5e:
85:84:8c:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 23:32:49 2025 by rpki-client