Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/viP3J9MVkhOgz1oMN5yuAiEvRJQ.roa
File: viP3J9MVkhOgz1oMN5yuAiEvRJQ.roa (raw, json)
Hash identifier: 8iTMPcQwHSTyMFBlgIcd1i/SHda+sbc/moDXBQMs7kc=
Subject key identifier: BE:23:F7:27:D3:15:92:13:A0:CF:5A:0C:37:9C:AE:02:21:2F:44:94
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 018A2BB9EC93B4BEA9C52B544A7E461312F1
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/viP3J9MVkhOgz1oMN5yuAiEvRJQ.roa
Signing time: Fri 25 Aug 2023 08:05:19 +0000
ROA not before: Fri 25 Aug 2023 08:05:19 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:18a:2bb9:3ae4/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:2b:b9:ec:93:b4:be:a9:c5:2b:54:4a:7e:46:13:12:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Aug 25 08:05:19 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=be23f727d3159213a0cf5a0c379cae02212f4494
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:83:eb:db:67:76:a7:50:ac:00:50:43:c3:be:
c3:63:8d:7f:40:4b:45:6c:7a:65:c0:1e:c5:63:7b:
6b:16:ac:c0:2a:f9:12:e4:96:fc:bd:a8:ef:ba:d2:
63:86:a5:f3:46:e2:c5:d0:f1:85:24:76:26:99:3a:
b6:11:09:ec:49:f8:3b:7f:76:2e:da:25:4c:fa:a9:
ef:29:2d:a0:e7:b2:02:18:51:45:23:73:7f:d2:4e:
49:2d:f5:f1:88:f3:37:ab:40:3c:99:e9:7c:e9:3f:
23:4a:b6:31:df:5e:1a:c6:85:df:e7:a1:66:00:42:
37:01:92:4e:03:04:57:46:91:c1:ba:f1:eb:b1:10:
ef:45:81:7f:cf:fb:63:8c:24:18:05:ef:88:4a:98:
d5:45:a9:d8:c5:69:8d:85:a6:06:a2:e6:29:6d:26:
9c:08:01:e2:05:9e:d3:48:5d:56:0d:b4:1f:68:50:
af:ef:dd:13:e1:8c:0b:d9:de:93:d2:f9:75:66:6b:
60:92:b3:d0:38:9b:2b:b7:c9:8c:26:b4:52:ff:7b:
af:7c:56:e2:b5:f1:5a:1c:fa:5e:78:86:e5:87:93:
c0:ad:c0:c6:1d:f1:87:cc:41:de:76:11:66:9c:16:
04:70:29:44:7b:4d:a7:16:4c:f0:92:b4:e8:d4:f3:
4a:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:23:F7:27:D3:15:92:13:A0:CF:5A:0C:37:9C:AE:02:21:2F:44:94
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/viP3J9MVkhOgz1oMN5yuAiEvRJQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
95:68:8b:ab:bf:56:4a:fb:fe:f7:d1:44:c9:7c:df:3f:9a:48:
90:1d:5a:8e:b0:3b:92:b3:ca:f0:b1:e0:64:53:c1:32:34:99:
cc:63:b7:1e:17:88:d2:4b:fe:2f:52:3b:87:82:48:d0:23:9f:
38:0f:33:ce:3a:fe:5e:de:b2:c9:6f:a4:9f:bf:cf:2f:b2:f3:
01:15:34:91:3f:2d:7d:98:e6:79:49:82:a7:65:52:9a:f0:27:
d6:d6:66:14:90:fa:20:03:53:5e:2e:a4:c2:ac:07:30:53:74:
ae:4d:e5:4e:33:80:77:fd:f8:d7:c7:18:fe:0d:5f:ea:ab:bb:
c7:1c:e0:8a:04:c6:88:1d:de:08:42:8c:5c:fc:08:1d:82:65:
d8:be:4f:51:c5:39:ee:18:b2:19:40:56:35:e4:e3:52:5f:cd:
a0:71:78:bc:49:7a:a7:99:47:3c:6e:70:d4:00:4f:46:10:a2:
45:b9:c9:a8:a7:0b:88:e2:68:e9:67:69:a7:9e:e5:44:76:80:
eb:61:a6:5c:cc:31:f7:60:c6:90:46:80:81:31:ec:d1:95:9a:
87:1a:a5:45:8d:4a:81:af:0b:fb:73:1b:3f:66:db:85:4e:f6:
3e:17:30:ab:d0:d1:76:7c:c0:f9:1f:18:b8:88:37:14:4e:d1:
f2:f1:24:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 10 19:23:43 2025 by rpki-client