Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/vjrCvCKUDlBy6XLUn4bg0GL-QJg.roa
File: vjrCvCKUDlBy6XLUn4bg0GL-QJg.roa (raw, json)
Hash identifier: WqZGrtaR1pO1aqqEzwFTGOy1C07GkresWU8mhG1qiDo=
Subject key identifier: BE:3A:C2:BC:22:94:0E:50:72:E9:72:D4:9F:86:E0:D0:62:FE:40:98
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 01897DF1D2D2FAD173DD230E88A11DDC88D3
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/vjrCvCKUDlBy6XLUn4bg0GL-QJg.roa
Signing time: Sat 22 Jul 2023 14:12:27 +0000
ROA not before: Sat 22 Jul 2023 14:12:27 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:188:5fe2:b396/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:187:4695:a68a/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:188:7858:a003/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64:ffff:0:187:fa9a:b088/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:187:b2b8:a7dd/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:7d:f1:d2:d2:fa:d1:73:dd:23:0e:88:a1:1d:dc:88:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Jul 22 14:12:27 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=be3ac2bc22940e5072e972d49f86e0d062fe4098
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:25:10:ae:83:2b:07:5a:dc:bf:f6:17:3a:28:
72:59:d6:74:05:9a:76:32:0d:a3:92:d2:e7:7f:53:
6e:67:b6:d4:e0:f7:47:75:44:9a:f3:01:d2:35:b4:
63:18:94:b9:b9:09:41:5c:15:aa:2a:14:91:35:55:
c4:9d:c3:5d:11:41:9e:13:c4:ad:ea:6f:7b:ba:bf:
2e:77:d8:6c:55:74:c3:bd:56:7f:42:9a:3f:3e:17:
4a:bd:74:80:60:0b:6f:df:79:83:c9:be:d6:b8:70:
23:02:df:b6:90:12:ed:78:5a:a6:09:e0:df:aa:2f:
cf:5d:36:1a:50:0f:31:82:01:56:72:68:e4:a2:46:
51:49:d5:ba:41:31:f7:7a:cf:0b:b3:20:46:67:ec:
95:6b:e4:9c:c7:31:52:74:8f:3c:ee:c4:32:00:c1:
13:88:05:dd:07:54:fa:f6:fa:b2:25:90:f6:7a:c1:
15:52:ad:86:a9:4b:9d:91:6b:55:0f:0f:19:66:0f:
a7:0f:ee:0e:df:72:9a:e5:f0:bc:91:53:8e:0b:4a:
9e:5a:5b:43:87:13:d3:67:1a:7e:38:4e:d9:54:d9:
53:b5:29:35:32:2e:67:86:a0:0c:26:bc:21:b6:e5:
70:db:14:da:15:15:26:81:25:ad:9c:f5:36:2c:f3:
70:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:3A:C2:BC:22:94:0E:50:72:E9:72:D4:9F:86:E0:D0:62:FE:40:98
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/vjrCvCKUDlBy6XLUn4bg0GL-QJg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
1c:19:c3:55:14:dc:93:de:6a:58:5d:6d:8d:7e:3d:51:f5:8c:
29:45:f1:8a:aa:1e:4c:ad:9d:27:fb:79:c6:78:cb:80:b9:6d:
cb:bb:e5:fa:2b:31:1b:55:5e:21:c1:77:84:c7:a3:59:88:23:
96:4f:20:76:d2:45:2c:b7:f0:45:9c:88:a0:58:93:af:8c:ef:
38:0f:3b:4f:85:83:5f:4c:05:df:4d:9c:bb:d2:5d:d8:39:29:
6b:28:aa:03:2c:71:81:27:89:42:d9:8a:c6:73:9a:5e:e9:97:
6d:3b:66:32:8f:ce:2c:bd:d2:9d:a7:e6:a5:84:d6:da:c1:c4:
09:d9:41:91:f1:cc:d3:18:30:75:bc:f2:38:47:b3:33:13:c3:
dc:3a:d3:3c:21:5f:94:37:6f:e6:8c:c5:77:97:93:8a:70:ad:
4b:40:5b:9b:8b:55:7d:81:bb:b5:7f:bb:10:61:c2:6d:ae:74:
7c:ba:45:1d:4c:2b:c8:ef:b1:1d:e6:2e:40:dc:3a:76:a6:d5:
63:39:c5:82:18:7a:13:a6:64:90:f6:2f:c5:32:d5:c0:03:bf:
0b:91:01:e9:eb:54:9c:87:65:24:0d:b2:bf:9a:ea:3d:5e:2e:
6c:c2:8a:be:45:d6:b8:74:61:e2:ef:1e:b1:97:2a:5f:38:18:
c9:0c:b4:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 12 13:57:26 2025 by rpki-client