Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/vxgKCPM2GGIvbxengknQwBuHr0E.roa
File: vxgKCPM2GGIvbxengknQwBuHr0E.roa (raw, json)
Hash identifier: 8E/OYPw8tHYPzZAp47kuZs8GRQfLEcsa5yIWKVOESmc=
Subject key identifier: BF:18:0A:08:F3:36:18:62:2F:6F:17:A7:82:49:D0:C0:1B:87:AF:41
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 01855AC423C936636A1F86EB595A6BF29287
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/vxgKCPM2GGIvbxengknQwBuHr0E.roa
Signing time: Wed 28 Dec 2022 22:04:41 +0000
ROA not before: Wed 28 Dec 2022 22:04:41 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:185:5ac3:aff1/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:185:3dcc:d8f/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:5a:c4:23:c9:36:63:6a:1f:86:eb:59:5a:6b:f2:92:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Dec 28 22:04:41 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=bf180a08f33618622f6f17a78249d0c01b87af41
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:c0:e2:87:4d:b6:c5:cd:e4:2d:b1:1e:ac:83:
be:ee:87:81:2e:4b:47:c4:a8:29:f7:a0:80:ac:9c:
40:10:03:6a:be:2e:b5:65:55:38:3e:ff:9d:4d:72:
66:48:bc:4c:1e:7c:3c:0a:f8:34:8f:08:c7:2d:0e:
b3:89:33:cd:ad:0a:66:ee:3e:3d:c4:01:eb:71:cd:
bf:5a:a9:01:5e:62:6e:a6:76:8d:6f:74:56:82:b8:
00:dc:fe:7f:19:69:52:00:d4:02:e0:96:c1:e4:a9:
ba:10:ea:54:5f:62:32:60:da:64:2d:c1:bf:e7:16:
a9:7b:27:9e:e8:3e:a1:d9:44:a4:ab:1a:d0:2f:3f:
0e:0f:97:31:49:cd:6f:a1:0d:8a:c8:10:5c:02:65:
74:6e:58:0b:a9:1e:42:a3:b4:81:cd:31:de:47:30:
97:63:34:e3:c7:6c:17:ea:cd:5a:7d:1b:84:8d:7d:
4f:5e:e8:c9:11:a2:43:e8:e3:c9:b6:48:3a:5e:a6:
3d:c7:13:48:16:c1:0d:22:80:0c:7d:c1:ef:0a:46:
e3:6b:eb:b7:c6:3f:9a:11:a2:07:00:d4:62:d2:c2:
5e:1a:b8:83:b0:53:70:09:af:2f:c3:d1:ba:ff:ab:
4c:7b:38:da:07:d7:15:5b:78:27:af:42:59:f3:19:
c0:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:18:0A:08:F3:36:18:62:2F:6F:17:A7:82:49:D0:C0:1B:87:AF:41
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/vxgKCPM2GGIvbxengknQwBuHr0E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
5c:1f:a0:49:b4:f1:87:7d:fa:2b:7c:56:05:90:7c:93:0d:e7:
80:cb:c2:fe:aa:b4:a2:d6:4f:5a:28:01:04:76:8d:b7:1f:ed:
29:80:db:fc:5e:c2:39:60:c1:0d:f2:97:0b:3e:f8:6e:6e:05:
70:85:03:d2:7b:fa:47:33:89:98:05:1a:17:13:8c:d6:1a:78:
b9:4a:e1:1b:13:a5:ec:20:3d:16:e2:3b:87:c9:83:1e:dc:b9:
ff:7f:05:71:ae:6b:87:3c:10:91:17:d8:2a:10:5d:90:6e:d9:
9a:12:48:2f:e5:73:79:51:3f:b9:37:aa:e8:99:3e:77:ff:78:
fc:0a:54:95:66:76:9a:15:cf:d2:02:01:3f:ba:c5:c0:94:db:
27:76:6a:52:77:2e:a3:d3:aa:3e:cc:f1:30:ec:86:22:5e:f7:
15:b5:2d:5a:ee:8a:e2:07:af:53:fe:37:64:6c:d0:fb:ee:7f:
7f:17:44:f3:2d:40:b5:21:2b:2f:86:ab:32:b4:4d:f5:41:81:
04:13:1e:12:dc:9e:69:52:26:f8:0c:75:d7:f8:49:41:6c:33:
7a:0e:6b:81:e8:62:9a:fb:e5:f5:a0:4d:d1:11:f8:56:d9:8a:
b7:ac:65:7a:f0:4c:eb:ae:46:b4:f3:be:5d:d5:f9:f9:b7:70:
22:96:e4:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 11 06:51:46 2025 by rpki-client