Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/VBFqX5ImA16eUM9oUm94Hym5FIA.roa
File: VBFqX5ImA16eUM9oUm94Hym5FIA.roa (raw, json)
Hash identifier: QBmfqY/MBqonGRN+b2vKnMHlpf8kuWKSjAjG4Gkdexk=
Subject key identifier: 54:11:6A:5F:92:26:03:5E:9E:50:CF:68:52:6F:78:1F:29:B9:14:80
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 7A9CFF07
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/VBFqX5ImA16eUM9oUm94Hym5FIA.roa
Signing time: Tue 12 Apr 2022 06:11:47 +0000
ROA not before: Tue 12 Apr 2022 06:11:47 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:180:457:1e3f/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2057109255 (0x7a9cff07)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Apr 12 06:11:47 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=54116a5f9226035e9e50cf68526f781f29b91480
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:5e:ee:52:80:ec:33:ea:35:c9:6a:d0:69:9e:
88:57:e9:93:26:b4:b7:da:67:18:3a:4c:1b:02:5c:
ba:05:dd:c2:da:62:ae:8d:ee:b0:59:ef:be:b7:68:
22:c4:d7:80:e4:02:b7:bf:46:81:93:15:c6:f1:b0:
b6:3d:38:1e:8b:1b:5c:0f:b6:45:4d:46:94:90:29:
6c:d7:ad:fd:9c:1e:a3:21:b0:77:27:24:d5:15:91:
db:f8:8a:0d:59:d8:71:28:b3:25:a9:db:e1:7e:5d:
8e:fb:47:8f:b1:42:43:79:6c:7c:2e:ae:1d:f5:87:
07:f4:b9:5c:d0:22:6b:4a:9c:91:02:ed:04:05:be:
30:3d:2e:48:1b:57:98:bf:e5:5d:f6:bb:3e:2d:e9:
b2:73:76:e9:82:29:a2:94:b3:05:c0:ba:bc:6b:25:
54:1b:c9:ec:45:5f:81:60:7e:a3:e0:89:a4:ff:02:
c7:4e:d2:a3:4c:e6:6a:4f:66:74:50:ea:29:69:bc:
80:20:d2:7d:b3:83:52:f9:d0:b2:9a:87:cf:d2:58:
bb:64:99:bb:63:0c:b6:8f:1e:55:3e:40:f4:df:62:
19:b9:66:ef:e0:7a:f3:a0:23:8b:14:9e:16:61:15:
5f:05:a1:5c:8f:25:65:5b:24:8f:b8:0b:88:c0:2f:
36:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:11:6A:5F:92:26:03:5E:9E:50:CF:68:52:6F:78:1F:29:B9:14:80
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/VBFqX5ImA16eUM9oUm94Hym5FIA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
25:09:22:e5:b4:5c:e0:f4:a3:f2:5d:3c:bf:2e:39:f1:fc:f3:
97:69:70:16:4d:10:cb:f2:0b:0e:3d:a7:a3:fb:ee:a9:85:d1:
47:73:a6:d8:a8:bd:72:8e:dd:6c:8f:c5:fd:ed:2b:52:58:53:
df:c5:a4:8d:f4:62:e0:f1:1a:47:16:1e:03:81:d7:69:f9:34:
35:4e:eb:d5:1a:c9:27:1c:92:e1:63:a4:47:68:00:e1:a7:47:
18:b3:fe:5f:90:34:d7:9f:96:dd:a9:7a:a2:54:cf:83:49:68:
f3:15:3f:b3:41:67:be:a0:f7:92:0d:5c:27:8b:d1:98:5a:aa:
c1:f9:b0:5e:c6:a9:e6:72:69:bd:40:65:db:b0:2a:c5:f7:1b:
47:d3:c2:8d:be:f2:28:19:55:49:92:11:97:76:8c:6a:3b:c4:
e9:92:df:b3:25:0d:de:51:a6:d9:5d:96:15:9e:6a:71:21:77:
16:d5:0b:86:94:60:39:00:31:cb:78:6b:56:f0:33:c2:33:0a:
35:60:68:bf:e7:14:e0:c0:67:ff:c0:5e:0b:d5:f9:89:85:02:
7d:22:a7:ae:16:c9:b2:1e:c9:94:17:e1:44:c9:cc:07:43:d1:
eb:b4:bb:6b:b0:87:3d:9e:b1:a8:95:12:90:93:a3:7c:9b:4b:
fa:94:32:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 17:36:35 2025 by rpki-client