Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/VECLx73BtR4daAD-WoR1CqTWJi4.roa
File: VECLx73BtR4daAD-WoR1CqTWJi4.roa (raw, json)
Hash identifier: DZ6GEmrDfAhvRoHkm1/rWY65CmCmsRiuByd2jiwpPPA=
Subject key identifier: 54:40:8B:C7:BD:C1:B5:1E:1D:68:00:FE:5A:84:75:0A:A4:D6:26:2E
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0188BB82FCC2E079DFA09B28C4AABBE63C6C
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/VECLx73BtR4daAD-WoR1CqTWJi4.roa
Signing time: Wed 14 Jun 2023 20:05:03 +0000
ROA not before: Wed 14 Jun 2023 20:05:03 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:188:5fe2:b396/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:187:4695:a68a/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:188:7858:a003/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64:ffff:0:187:fa9a:b088/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:187:b2b8:a7dd/128 maxlen: 128
2001:67c:64:ffff:0:188:bb82:41e6/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:bb:82:fc:c2:e0:79:df:a0:9b:28:c4:aa:bb:e6:3c:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Jun 14 20:05:03 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=54408bc7bdc1b51e1d6800fe5a84750aa4d6262e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:91:a7:f6:7b:ae:63:92:10:dc:ef:08:00:bd:
b4:be:db:0d:44:43:0b:64:15:2d:e2:57:d9:9c:62:
50:ef:cd:45:bd:1c:8c:c8:67:b6:19:f8:c2:e1:1f:
cf:98:fe:5b:ab:17:9e:2e:70:f1:50:f3:24:0b:b6:
2d:96:cd:c9:18:64:ca:24:4c:e7:e5:bc:51:e5:1f:
82:4b:ec:7a:3a:e1:7f:04:19:c2:ac:2d:83:b0:fb:
98:99:7e:f2:65:72:24:15:b7:98:c9:3d:ef:59:a1:
46:83:f8:1e:e3:f3:c7:2d:d6:e5:4b:fb:75:d4:0f:
d8:72:1a:07:60:43:d2:7e:41:d3:2c:c8:92:d3:4f:
6e:5e:7f:40:fb:fb:95:94:c0:03:8d:a3:20:69:8a:
42:47:5e:4b:14:25:4b:ee:cf:10:d4:13:3b:31:c6:
89:c4:26:e3:86:c1:ae:74:25:21:72:b2:5e:3d:f6:
0a:d9:33:08:5e:5a:33:7e:9f:6d:2e:98:34:57:2b:
b8:0c:69:9b:83:26:41:29:2f:7b:9c:bc:e7:a9:0f:
25:1b:a1:fe:62:4d:94:e9:2d:08:87:b7:10:83:51:
8c:ba:30:ba:bf:b5:a8:fe:4b:ef:1d:1f:a1:f6:fe:
3f:db:af:3e:1f:1d:b9:77:29:4a:46:8b:7e:08:e9:
8a:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:40:8B:C7:BD:C1:B5:1E:1D:68:00:FE:5A:84:75:0A:A4:D6:26:2E
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/VECLx73BtR4daAD-WoR1CqTWJi4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
35:f2:49:31:14:4a:17:3f:c9:37:3f:06:c8:59:94:12:0a:54:
b1:82:c7:c5:3e:26:c4:00:18:5b:0b:66:02:0e:27:f4:67:05:
72:1b:e0:9a:72:92:02:c3:6a:bc:07:b7:d8:a1:d9:65:1e:48:
56:1a:4f:50:90:07:20:f6:0c:7a:6d:9c:2a:13:4f:ad:5a:eb:
59:4e:9e:37:dc:a4:61:0b:39:8b:6c:b8:f2:52:29:59:81:c6:
ba:e1:e9:78:5f:51:8e:ae:3e:23:73:c1:ed:db:95:ee:80:75:
6e:1f:bd:b9:a5:76:c8:bc:e7:cb:c3:b6:af:74:c8:ad:ca:2c:
a6:ee:3f:ce:62:35:ac:ee:8d:a3:25:4e:0c:c8:38:4d:ec:35:
7b:b8:fd:8d:bf:b3:ac:1f:eb:6d:a6:42:ee:74:1a:2b:68:94:
54:bc:b6:86:cc:57:ea:4f:29:ee:8a:0c:ad:ef:69:e8:cc:9c:
db:20:e0:8a:c3:6c:c2:9e:a7:5a:48:3f:5e:ae:8a:90:f4:fe:
64:d8:e2:a0:5d:45:cc:54:aa:7e:a4:98:a5:f9:81:ff:77:f1:
f1:b1:a5:9a:0b:d1:cd:79:b3:95:17:ae:df:02:24:ab:f5:8b:
93:08:e4:5e:c9:b3:73:c7:b6:7c:80:20:9d:a4:8c:8b:b6:bd:
a6:8b:1f:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 3 13:11:50 2025 by rpki-client