Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/VDL4MsjtGlwFz98m7FZiwAFDnFg.roa
File: VDL4MsjtGlwFz98m7FZiwAFDnFg.roa (raw, json)
Hash identifier: C82KnwZPhfb/dsiqnyB1yGtX0x+1gjlmpPVYbaiLTsU=
Subject key identifier: 54:32:F8:32:C8:ED:1A:5C:05:CF:DF:26:EC:56:62:C0:01:43:9C:58
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0189CD8D0553A2DDAD0005840A5370DD1545
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/VDL4MsjtGlwFz98m7FZiwAFDnFg.roa
Signing time: Mon 07 Aug 2023 01:11:58 +0000
ROA not before: Mon 07 Aug 2023 01:11:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:188:7858:a003/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:189:a0e4:5c7d/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:cd:8d:05:53:a2:dd:ad:00:05:84:0a:53:70:dd:15:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Aug 7 01:11:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=5432f832c8ed1a5c05cfdf26ec5662c001439c58
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:c4:88:9d:0b:db:56:43:1a:3c:69:95:0b:f3:
65:e4:a0:b3:dd:08:e9:b8:9f:12:a7:98:1b:81:e2:
6a:70:dd:d2:51:d0:d3:3f:c0:4a:16:55:08:5f:6d:
32:dc:37:eb:2c:40:2d:1b:5b:14:1c:ed:7a:b3:78:
2e:b6:3f:66:8b:01:07:2e:ac:d4:88:c9:3f:f3:3d:
f0:b0:d0:b8:3b:3e:0b:c8:b9:f3:e9:f1:37:3b:6f:
47:e7:d9:0e:2b:9c:7b:b3:81:95:6f:48:59:10:3e:
b8:76:e1:71:b1:b4:50:cf:da:0d:50:55:aa:96:53:
6e:fd:2c:ff:9b:c3:43:f5:35:12:b3:45:9c:c3:6c:
ac:67:b5:ee:94:9d:36:0f:b1:29:d5:b2:6d:76:1d:
f2:38:42:dc:41:d2:f7:95:7c:8c:8e:8b:66:05:98:
11:4d:7f:88:71:0e:93:64:e5:37:8e:eb:78:a7:6d:
e4:75:89:2e:fa:c8:54:99:b8:d1:2c:92:22:2e:6b:
28:2d:da:43:0f:e8:7e:94:2a:75:d6:e4:ac:67:9e:
ff:28:18:df:8f:42:13:91:5f:46:32:ff:ce:3c:4b:
7e:fe:90:95:45:8b:53:f6:4d:46:2c:42:6c:07:c8:
c4:66:75:59:65:50:98:5e:99:fe:b6:87:4d:28:59:
dc:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:32:F8:32:C8:ED:1A:5C:05:CF:DF:26:EC:56:62:C0:01:43:9C:58
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/VDL4MsjtGlwFz98m7FZiwAFDnFg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
a4:fd:5a:49:b3:4f:5d:00:1a:76:6d:b8:a5:37:8d:9d:8f:d2:
be:01:fb:ea:e9:b1:4d:dc:5b:94:51:f9:9a:f5:dc:f8:20:95:
9d:2a:ca:2e:b5:ee:88:a9:60:9b:9b:30:1e:53:47:d3:d3:29:
28:af:cc:ec:19:27:99:b7:b9:65:bc:8a:8e:b8:fb:7a:23:bf:
c8:21:4b:04:80:ae:11:d2:fc:f1:42:6e:8a:77:67:9b:0f:63:
e0:ac:fc:eb:51:66:b6:18:87:3b:32:02:90:db:a2:de:0b:0e:
40:43:0a:24:32:51:ea:93:12:34:59:fc:ea:5a:9c:e8:65:8d:
7e:72:01:4a:1b:41:5c:ee:d8:45:00:44:45:90:52:7a:da:7a:
b0:aa:d0:31:6a:33:6f:96:a8:f0:9e:e3:7f:67:2c:ce:03:42:
c8:ba:0e:85:b3:f1:6a:29:a8:9b:b1:f3:50:f1:b4:de:59:ce:
32:76:14:4f:9a:65:77:14:b6:d2:47:f0:b2:cf:c0:67:f1:3d:
28:2a:95:83:ac:95:56:43:07:7e:68:5c:fd:e6:58:34:61:b8:
dc:79:c4:94:f7:92:ad:e6:05:b9:34:a0:68:20:83:27:b8:97:
c7:62:21:ec:a9:f7:49:18:6e:df:ec:13:89:a8:cf:97:52:67:
70:cc:d5:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 19:40:50 2025 by rpki-client