Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/Vz7GBDekROFos2d3cKAm9boSmdw.roa
File: Vz7GBDekROFos2d3cKAm9boSmdw.roa (raw, json)
Hash identifier: 4mhKe4J+VHTcIL+9mpdtu/k30g8co7ptuxZ87UN9Cfo=
Subject key identifier: 57:3E:C6:04:37:A4:44:E1:68:B3:67:77:70:A0:26:F5:BA:12:99:DC
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 01842828770CB1FFFDF7BFB1F1DF8AB01D74
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/Vz7GBDekROFos2d3cKAm9boSmdw.roa
Signing time: Sun 30 Oct 2022 09:10:51 +0000
ROA not before: Sun 30 Oct 2022 09:10:51 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:28:28:77:0c:b1:ff:fd:f7:bf:b1:f1:df:8a:b0:1d:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Oct 30 09:10:51 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=573ec60437a444e168b3677770a026f5ba1299dc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:3a:5d:93:b3:2c:49:bc:fe:c2:d8:9b:13:89:
3d:ee:51:e0:6f:ad:b5:9d:3c:c4:71:2c:12:7e:f0:
15:49:b3:1b:99:06:38:47:d9:91:7d:3f:89:ad:1e:
a4:91:22:cc:78:81:d1:6a:3f:2f:49:85:3c:00:5f:
06:e5:d6:47:78:05:9a:d7:c9:3a:6b:09:a7:d6:8c:
49:59:01:a4:43:41:ec:27:fe:57:23:e2:f0:82:ee:
c9:1c:51:7e:80:b4:22:b9:10:83:4a:6a:54:b4:f1:
98:96:cc:bc:10:b4:f1:fa:11:e1:6c:ac:62:a2:5c:
23:c2:f6:b4:84:e9:65:66:8e:c1:50:9f:98:48:34:
2b:29:1c:44:24:ab:cf:45:31:ad:f5:81:76:3a:22:
f9:2e:b2:80:08:a2:95:18:b2:d7:08:1e:bc:20:52:
7e:65:40:91:f4:d6:22:23:6b:c1:c1:36:6c:af:99:
f7:f4:6f:5f:e7:84:8d:b7:f7:d7:18:3e:d1:d6:ca:
78:92:8d:6d:35:15:87:de:42:61:ba:52:d6:6d:d7:
9d:ae:9c:ce:14:fe:92:a2:50:c2:82:89:f9:07:34:
78:59:2b:6d:2c:7c:10:56:68:ba:eb:c5:38:9d:70:
23:47:87:77:70:88:c6:4c:3c:62:eb:d3:b2:50:9d:
06:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:3E:C6:04:37:A4:44:E1:68:B3:67:77:70:A0:26:F5:BA:12:99:DC
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/Vz7GBDekROFos2d3cKAm9boSmdw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
94:23:a6:a9:18:7c:87:8d:88:44:5c:a2:7c:68:8b:cd:7f:8c:
83:a6:3c:7f:b0:61:ab:ce:47:77:60:22:ff:41:ba:9b:d9:0c:
f6:5e:13:11:d7:81:7f:fd:94:59:51:42:14:9d:e4:e2:33:b3:
cf:0a:0c:a2:cd:52:dd:15:5b:3b:dd:00:fb:53:db:47:84:70:
81:c1:79:d4:2b:0e:e8:dc:04:1d:5d:97:c8:df:87:79:29:88:
26:f0:b9:77:53:35:a9:65:49:62:ad:eb:ab:fa:35:01:07:e6:
18:52:2f:d3:f0:25:76:84:c4:e5:78:13:bb:a2:42:dc:a4:b9:
56:d4:d9:f8:19:42:23:e7:74:9b:dd:61:a3:6d:d2:8c:07:ce:
5c:6d:60:88:0a:d7:26:38:75:41:06:ff:a6:4c:5b:33:e0:1f:
dc:42:ba:a5:01:e5:6d:06:3c:36:5e:22:cc:aa:b6:ac:c5:4a:
89:69:ea:fa:55:79:9d:4c:b0:85:d9:9f:43:b2:9d:49:d0:53:
10:ba:f1:b6:2d:7c:d3:0d:db:26:25:79:a6:d1:1a:23:0c:85:
30:e0:64:2f:82:36:1d:80:5b:0b:88:cb:d3:3b:5d:08:84:36:
94:84:35:b5:cd:d0:ea:6c:82:26:04:83:5f:26:c8:6b:28:5a:
89:97:13:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 00:12:28 2025 by rpki-client