Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/vtVS4MW0SbYCiOSmNwctJW9FtOI.roa
File: vtVS4MW0SbYCiOSmNwctJW9FtOI.roa (raw, json)
Hash identifier: nMO99GnZ7vLw7zgZODkmwINSohYJlMPzc8+JMxRBui0=
Subject key identifier: BE:D5:52:E0:C5:B4:49:B6:02:88:E4:A6:37:07:2D:25:6F:45:B4:E2
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 018A2D439945A148A6ED59837615113B101F
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/vtVS4MW0SbYCiOSmNwctJW9FtOI.roa
Signing time: Fri 25 Aug 2023 15:15:19 +0000
ROA not before: Fri 25 Aug 2023 15:15:19 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:2d:43:99:45:a1:48:a6:ed:59:83:76:15:11:3b:10:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Aug 25 15:15:19 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=bed552e0c5b449b60288e4a637072d256f45b4e2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:1d:da:3b:5d:ef:a8:66:b9:df:0b:fd:d7:2f:
14:61:6f:46:8b:7a:7c:cb:2d:03:81:e6:94:93:d2:
77:21:c8:76:d7:96:53:40:e0:5a:71:67:5d:6a:61:
5c:44:fa:a7:78:06:da:e7:26:a7:97:dc:9b:61:93:
3c:08:b9:a2:cb:36:79:5c:ac:21:cc:14:34:1e:8b:
95:6d:a0:80:f5:31:ed:6e:38:d8:8f:20:d0:54:3c:
e4:c9:90:49:3d:f1:3a:c0:5d:3a:3c:8e:f4:d9:74:
e5:f5:28:30:ae:fa:40:98:3e:72:ed:3a:aa:b1:ad:
24:43:e4:d8:8f:88:40:4d:9f:8d:8b:0a:73:4d:a0:
ac:a8:29:36:ac:09:2a:18:06:3b:d2:74:36:10:83:
ce:31:d5:10:b1:e3:bc:e8:ac:87:ce:0a:f0:32:96:
53:6d:c9:8b:45:fb:fd:ce:8a:42:55:46:92:97:54:
ce:ee:05:df:32:80:4f:2e:7d:19:cf:81:e0:8b:20:
d4:ee:4b:cf:14:0e:0f:49:7e:58:c7:ee:34:7c:b7:
55:bc:9e:d3:3f:41:38:a3:f0:74:51:a3:a0:d6:e3:
fa:b4:e7:f4:ad:f2:3d:da:44:0a:82:65:4a:8d:60:
ba:cf:57:18:95:81:69:1a:23:18:82:2f:1a:3a:35:
9c:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:D5:52:E0:C5:B4:49:B6:02:88:E4:A6:37:07:2D:25:6F:45:B4:E2
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/vtVS4MW0SbYCiOSmNwctJW9FtOI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
07:8c:a5:64:a0:b8:ad:3c:d2:21:54:17:f1:a7:58:a7:73:80:
a7:64:c1:ae:80:1d:2b:d7:77:50:eb:67:47:32:ba:29:e6:72:
78:57:b7:29:65:61:04:7e:16:47:1b:78:96:f9:5d:63:c4:34:
3e:89:5b:c4:97:14:15:d9:78:95:87:54:38:00:70:cc:3e:49:
ca:1c:67:3e:40:6b:3e:4a:e3:13:fb:b3:fb:19:4e:05:47:81:
4c:fe:75:33:8d:d4:af:27:72:3d:2d:63:fa:89:c7:bb:87:3c:
1b:ff:66:f0:7c:d0:15:67:22:19:1d:e3:f8:c2:34:e5:35:f5:
0a:44:66:8e:1a:96:2d:8c:0c:aa:3e:ce:5e:44:3d:95:da:da:
57:4d:34:45:d6:68:54:b8:8a:93:27:76:66:02:5b:5d:a9:55:
2c:bd:bd:72:a5:16:01:b3:53:64:ef:41:ab:f1:cb:74:0a:aa:
db:84:df:d3:ab:a8:11:65:26:9e:bb:dd:78:84:11:9d:63:7c:
3c:5c:92:3e:6a:67:d0:d3:bf:bd:88:a4:35:34:db:98:a9:76:
b2:0c:f1:f4:ed:1e:e3:72:3c:bf:fb:40:64:49:cf:1b:61:07:
98:48:2e:b1:ad:75:25:6d:99:e8:69:ea:54:c6:a9:a0:e2:e5:
2b:86:e1:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 00:05:50 2025 by rpki-client