Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/veL2CAmO2XFjc7ipNcc9Ex8ueEE.roa
File: veL2CAmO2XFjc7ipNcc9Ex8ueEE.roa (raw, json)
Hash identifier: RVQGRbvCw3v3YRz83ChN8Z8f95txGdOXhOJBu7FCB0E=
Subject key identifier: BD:E2:F6:08:09:8E:D9:71:63:73:B8:A9:35:C7:3D:13:1F:2E:78:41
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 01878F95AE6983ACCAA63F8889BEF702406B
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/veL2CAmO2XFjc7ipNcc9Ex8ueEE.roa
Signing time: Mon 17 Apr 2023 14:19:24 +0000
ROA not before: Mon 17 Apr 2023 14:19:24 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:187:4695:a68a/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:8f:95:ae:69:83:ac:ca:a6:3f:88:89:be:f7:02:40:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Apr 17 14:19:24 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=bde2f608098ed9716373b8a935c73d131f2e7841
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:20:2c:44:51:1f:00:a7:71:42:74:2f:d9:d7:
0d:2f:5d:bb:35:3f:ca:47:b3:fc:c6:c5:eb:3c:f7:
5c:8c:71:77:2f:3b:54:6b:a8:f9:d1:24:8d:14:9c:
b5:67:9a:8b:cd:46:1e:64:f2:8a:9b:b4:f0:c1:24:
6b:ea:18:92:21:d0:55:4e:64:29:d1:3a:a6:9c:72:
6f:d5:80:59:c3:14:15:fb:1b:8c:e9:c3:fd:07:b8:
ad:c0:1c:67:61:03:61:aa:97:54:2f:6e:d3:0c:13:
71:fc:48:ad:8d:83:dc:10:1c:3d:80:2b:30:a1:f0:
f8:5c:18:a9:3d:b5:0a:a0:ac:72:b5:cc:f1:60:3e:
ce:aa:6c:e6:fd:a2:07:84:99:ae:8c:d5:dc:18:9c:
ea:fa:e4:ec:0d:d3:05:ba:e0:d5:86:a5:ad:44:9c:
71:02:6c:52:94:a1:0a:b1:be:7b:64:d6:b5:e4:4c:
50:b0:3b:87:de:31:e3:7a:4d:24:8a:18:42:96:6e:
df:fa:82:a3:fe:74:a3:13:10:91:06:f6:ab:f4:c3:
a2:c9:4c:82:dc:9c:e5:77:61:b7:b2:96:2d:f3:18:
7f:74:22:f9:7f:28:80:c4:1e:22:6c:0c:11:d3:a2:
51:00:5f:20:f7:49:c0:ab:e8:55:84:43:83:53:73:
a9:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:E2:F6:08:09:8E:D9:71:63:73:B8:A9:35:C7:3D:13:1F:2E:78:41
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/veL2CAmO2XFjc7ipNcc9Ex8ueEE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
0e:0a:97:bf:fe:8e:5f:ce:98:3d:fd:d1:77:7d:07:21:ef:63:
2e:97:37:40:11:b9:25:01:c7:2c:aa:7f:d1:4c:69:6c:36:d4:
66:7a:57:93:93:d8:4f:ae:d2:79:ab:25:2c:f5:d1:95:d9:f8:
d4:e3:88:5b:2f:b5:66:3d:4e:36:be:28:da:e3:43:ee:11:15:
d5:98:bf:64:a5:43:93:e1:91:b0:d1:22:f5:34:de:b9:9a:56:
f2:3d:47:73:c3:5d:c2:ea:c9:3e:b4:17:25:0c:5e:8e:6f:e6:
37:c6:35:78:76:d2:6f:12:0a:c2:ac:6a:b7:9d:fa:fb:9a:e7:
eb:4a:f1:bc:a3:59:cf:c1:0c:06:80:f4:e9:77:c4:9b:93:9c:
6e:e1:10:13:45:4d:dc:29:e4:31:68:67:74:79:7a:01:09:e6:
80:8e:5b:e7:4c:12:ce:51:92:f8:2b:c9:62:50:8f:ce:95:08:
9e:b4:60:d2:16:60:c6:8c:1f:5c:71:70:15:94:e3:71:1d:2d:
a7:f6:f0:ce:45:fd:1b:4f:54:03:83:72:50:8e:5f:a2:c0:c3:
cd:d0:18:e3:7b:50:b1:5e:99:6e:60:6b:a7:bb:40:38:f1:36:
ed:e5:47:d7:d0:da:72:13:90:8c:de:70:1f:63:03:0d:b1:31:
fe:ce:d0:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 02:42:45 2025 by rpki-client