Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/VEqsCMriGLOQf3iFQ121zbczxGY.roa
File: VEqsCMriGLOQf3iFQ121zbczxGY.roa (raw, json)
Hash identifier: 5W4TFDAIv4K2nb5yCa9iVcOglvzilFpngpI3ZbGhjKw=
Subject key identifier: 54:4A:AC:08:CA:E2:18:B3:90:7F:78:85:43:5D:B5:CD:B7:33:C4:66
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0186BEC842653353C8A91628BB1D69036873
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/VEqsCMriGLOQf3iFQ121zbczxGY.roa
Signing time: Wed 08 Mar 2023 01:14:00 +0000
ROA not before: Wed 08 Mar 2023 01:14:00 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:be:c8:42:65:33:53:c8:a9:16:28:bb:1d:69:03:68:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Mar 8 01:14:00 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=544aac08cae218b3907f7885435db5cdb733c466
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:77:a0:98:93:00:d3:48:4c:1f:73:63:f1:48:
90:56:0a:96:00:42:f6:35:03:cc:07:cc:27:67:e1:
ba:2b:79:e1:40:c4:58:46:ba:97:7e:0d:22:5d:89:
fe:ff:d1:a4:bf:bf:a6:bb:61:49:8f:62:51:bd:62:
c7:3f:56:a7:93:c4:e8:3e:22:47:ae:07:a2:01:95:
ea:49:e1:cd:fe:0e:cb:ae:66:8f:37:bd:cd:36:e7:
55:de:15:e3:4e:66:bb:10:ae:c1:f9:30:94:e5:d7:
bc:a5:77:6b:2f:02:f7:cb:9d:77:8d:19:ff:cd:17:
47:a4:bf:70:d0:a4:f7:a5:0b:c2:28:f8:7d:56:e0:
21:7b:55:b4:f7:41:a7:2f:3f:9d:8b:78:a0:15:5e:
c3:a9:40:19:dc:36:0e:6c:18:79:6e:49:3b:9b:d5:
55:fb:29:6b:cf:75:02:5f:f0:60:47:f6:b4:0c:d2:
9c:3e:42:82:16:90:24:8b:91:ff:3b:7d:19:f4:60:
73:78:8a:f9:0d:30:c9:23:2c:92:83:43:11:88:54:
31:31:9e:80:40:77:3d:62:89:29:21:6b:92:24:2b:
ab:e7:ea:ec:a5:f8:df:3f:c5:f1:21:e1:41:0f:ff:
63:72:48:b1:13:2e:31:c3:67:b5:1a:a7:fc:28:03:
c2:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:4A:AC:08:CA:E2:18:B3:90:7F:78:85:43:5D:B5:CD:B7:33:C4:66
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/VEqsCMriGLOQf3iFQ121zbczxGY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
45:dd:a7:cc:16:bc:56:33:ee:67:05:1f:bc:33:29:5c:5d:29:
62:67:a8:ab:7e:b0:af:d9:8d:99:91:66:bc:cb:d5:4b:70:67:
72:66:41:93:0e:0a:0a:62:79:65:2c:68:d3:c1:82:fb:4b:a5:
95:3d:64:8a:f6:98:d1:37:de:84:cc:a7:7c:4a:d1:ce:97:19:
6f:ec:36:57:77:00:db:99:12:65:17:c7:0b:ea:96:e0:5b:98:
57:fc:49:f2:8d:78:c7:34:18:00:49:14:f1:7d:5b:ca:62:8d:
4e:dd:b8:e8:b0:a9:db:5a:c1:e4:77:2e:7b:1a:68:fb:99:c8:
65:c9:e3:5e:48:b1:ee:06:4d:59:3b:54:a1:86:a7:3a:55:14:
a4:be:1a:9c:a5:2a:e1:b3:c0:aa:94:72:e8:7b:86:13:74:16:
85:e3:58:8a:71:10:de:bc:7a:62:c1:91:b1:b5:28:63:c2:6f:
33:dd:ac:98:9b:8e:6c:fd:cc:d4:05:28:3b:7b:4a:bd:09:32:
b8:b3:ad:c5:05:73:a0:90:48:37:95:76:58:61:28:9c:07:35:
45:7b:4b:00:06:29:3b:8c:76:21:d2:0f:fa:eb:1a:7b:ef:75:
34:34:99:40:7b:c6:f1:d7:f9:65:b1:a5:be:d8:a5:1f:7f:b7:
e3:4f:d8:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 2 08:54:05 2025 by rpki-client