Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/VCf5s-bE7EWIh4MPYnHDecnBLZw.roa
File: VCf5s-bE7EWIh4MPYnHDecnBLZw.roa (raw, json)
Hash identifier: qyYWK26RT/CYjsmzRHf2uePyICHCdAwkbg8LEm30y9E=
Subject key identifier: 54:27:F9:B3:E6:C4:EC:45:88:87:83:0F:62:71:C3:79:C9:C1:2D:9C
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0189ECDAA09E6BFB095811AC04A22FB444BB
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/VCf5s-bE7EWIh4MPYnHDecnBLZw.roa
Signing time: Sun 13 Aug 2023 03:04:58 +0000
ROA not before: Sun 13 Aug 2023 03:04:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:188:7858:a003/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:189:ecda:27ff/128 maxlen: 128
2001:67c:64:ffff:0:189:a0e4:5c7d/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:ec:da:a0:9e:6b:fb:09:58:11:ac:04:a2:2f:b4:44:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Aug 13 03:04:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=5427f9b3e6c4ec458887830f6271c379c9c12d9c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:d0:f9:41:03:c4:ab:5a:d8:c2:08:e1:cd:8c:
2a:06:ad:74:59:32:a2:30:e9:78:fc:96:26:88:8e:
6f:20:a2:f8:2d:d7:b8:b6:86:17:98:bc:98:1d:b0:
59:03:64:f7:f4:97:ee:38:32:81:4e:cf:b7:03:a4:
7b:a8:07:ed:91:a9:af:92:ac:dc:10:7b:89:15:c7:
b0:d6:fc:c0:19:31:d6:70:72:cf:76:23:21:9b:da:
18:cf:a5:88:b0:5d:aa:b9:86:62:3a:e5:d8:81:97:
b9:c2:46:78:30:44:2c:26:be:34:b2:6f:66:a2:72:
3c:07:31:9e:d8:4f:3a:10:7a:25:68:12:b0:67:44:
3c:ce:39:a8:76:2f:1b:8b:cc:ff:9b:f0:85:7c:ef:
10:8e:a8:4e:e2:23:83:20:b0:99:5e:b6:dc:5b:61:
d0:1e:d9:b2:f6:0a:7b:2a:b0:d3:87:2f:06:1c:5f:
c4:98:76:23:dc:f0:45:80:92:05:b3:99:90:48:cb:
c7:8f:4a:1d:41:66:ac:6b:98:1f:f4:a2:ca:62:c4:
06:8b:cb:9c:a6:e6:17:ff:21:25:7b:46:2e:13:01:
28:f9:f0:19:32:94:dc:45:ee:37:ff:86:02:ef:3b:
bd:a9:a4:41:cd:e8:eb:5a:c3:d2:2a:0d:4e:c1:46:
03:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:27:F9:B3:E6:C4:EC:45:88:87:83:0F:62:71:C3:79:C9:C1:2D:9C
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/VCf5s-bE7EWIh4MPYnHDecnBLZw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
34:6f:41:51:5d:c0:eb:5a:cd:ba:8c:b5:e8:98:24:ba:e2:17:
a8:b6:a5:b2:fc:a4:1c:2f:e7:e0:ee:12:6b:98:e0:90:65:3f:
cf:92:5d:45:65:7b:90:14:29:1d:18:7a:ef:84:72:2f:7a:33:
bf:51:1d:65:aa:25:aa:da:f2:d5:4c:f4:10:9a:86:a8:8e:8d:
ae:67:0c:36:54:54:9b:01:fd:75:5f:11:25:fd:6d:94:cf:36:
48:27:f4:1d:99:b0:ce:34:f7:51:30:ac:d8:89:b2:31:71:62:
ee:47:23:a2:b3:e4:9e:20:a2:54:9d:7e:1d:96:b4:9b:fb:5d:
7a:e3:5a:47:66:f9:68:2c:1e:14:93:f6:f4:08:24:b5:bc:ca:
0b:4c:a2:6b:43:79:e2:bc:27:0a:14:a8:72:f6:c8:f4:e4:70:
24:1a:56:e6:12:01:ff:1f:e5:31:54:dc:76:d2:97:4c:39:74:
30:b9:cb:eb:59:a7:96:1b:5a:7f:56:80:54:82:9c:ae:61:10:
ad:fe:92:a4:d7:33:71:19:b0:c3:d3:6a:0c:4d:ae:19:1b:bb:
da:90:be:1d:c1:4b:8e:1d:bd:70:2e:22:d1:f3:65:52:25:ee:
29:e3:2a:db:d9:bc:aa:c9:82:d8:0d:40:a8:fb:a5:74:6e:a4:
15:85:65:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 18:18:57 2025 by rpki-client