Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/VKRGM5NQvjOidRu5rpoa90cf6HY.roa
File: VKRGM5NQvjOidRu5rpoa90cf6HY.roa (raw, json)
Hash identifier: OxkXmHErE4h4L2waUxKtVVF20X1o+MXG5UdFpsagOG8=
Subject key identifier: 54:A4:46:33:93:50:BE:33:A2:75:1B:B9:AE:9A:1A:F7:47:1F:E8:76
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 018A05F60967DACD4E7A565FDFD6D635018C
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/VKRGM5NQvjOidRu5rpoa90cf6HY.roa
Signing time: Fri 18 Aug 2023 00:05:24 +0000
ROA not before: Fri 18 Aug 2023 00:05:24 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:188:7858:a003/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:189:a0e4:5c7d/128 maxlen: 128
2001:67c:64:ffff:0:18a:5f5:28ed/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:05:f6:09:67:da:cd:4e:7a:56:5f:df:d6:d6:35:01:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Aug 18 00:05:24 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=54a446339350be33a2751bb9ae9a1af7471fe876
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:42:2f:92:08:d8:8a:80:fe:94:78:a1:ae:4f:
af:93:2c:0e:92:ed:e5:56:d3:83:3a:d6:1e:26:4c:
d3:83:5f:ce:3d:9b:0d:f4:8f:24:68:44:bc:ee:1a:
a6:1e:cc:34:13:0d:00:4e:ad:89:ed:f1:e8:a1:f5:
04:3f:81:b2:4e:7d:99:78:69:73:3c:d0:60:52:93:
c9:d8:d8:85:b8:bd:a7:1a:0d:2c:e9:e3:ef:89:bd:
e8:0f:7c:cc:70:9d:01:30:d2:c3:bd:a3:76:97:28:
3a:d2:2a:9a:06:38:78:55:99:55:70:b9:33:89:c4:
b2:90:f9:d3:fa:af:88:c8:3a:60:97:ec:91:de:de:
ff:ad:74:79:80:6b:f8:55:f0:fe:25:6a:8b:f9:e4:
2c:7d:72:97:7b:b9:9d:32:f5:6e:f4:b6:80:50:95:
06:85:ee:ed:ce:60:35:41:fd:e4:43:18:8c:c3:fa:
7d:0f:9e:95:d9:fc:a8:3c:e3:cf:fb:75:c9:9a:c0:
ee:94:19:d6:4f:1a:cb:89:15:71:08:0d:90:45:72:
aa:bb:5d:38:ce:29:5a:4f:04:8f:3a:34:cc:b3:c1:
8e:f3:0f:8b:09:10:f3:08:a3:4c:23:fa:57:4f:b3:
5a:c1:77:b5:dc:c2:9b:41:08:e9:cc:f5:bf:73:20:
46:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:A4:46:33:93:50:BE:33:A2:75:1B:B9:AE:9A:1A:F7:47:1F:E8:76
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/VKRGM5NQvjOidRu5rpoa90cf6HY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
1e:b8:50:61:5c:ba:2e:13:e2:39:94:8d:6f:ce:c8:d5:2e:a8:
39:ff:06:cf:0f:a2:0c:98:39:30:b1:ef:7b:04:5d:0d:cb:21:
e5:49:21:20:87:64:a6:5a:7f:a9:4c:28:e9:8c:2d:00:8c:2b:
5d:24:d3:ac:1f:a6:ee:53:b9:67:16:6d:0e:60:94:f3:5a:46:
9b:6e:30:c8:85:30:ec:49:78:72:7a:15:2f:81:4b:b2:fc:3f:
f2:5b:1d:a5:d0:97:12:db:8c:d3:59:c8:4e:4c:33:7c:ba:7e:
fb:05:a4:f6:72:7c:83:65:f6:da:54:d2:ac:b4:a2:04:27:88:
50:93:63:a6:9d:5d:8d:5b:56:ce:06:75:36:64:c1:2a:6d:10:
90:36:3a:75:94:6c:f5:1b:9f:e2:9a:81:23:aa:91:7c:aa:ba:
cb:c8:78:f1:4e:ea:96:88:40:24:67:3d:5e:f6:23:75:56:85:
b9:71:4f:78:c2:4f:aa:69:21:68:a7:0d:d8:d3:1f:3e:e8:bf:
87:d6:77:a4:81:b2:d8:c6:05:9d:ab:19:8a:8b:bd:b8:1f:d8:
5f:71:17:7d:fe:1a:57:84:c2:8c:3e:d7:db:64:81:71:a9:36:
b6:d5:a7:eb:41:59:f5:c1:5c:c4:1f:ca:1a:84:82:83:b3:3c:
64:8e:8a:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 19:47:26 2025 by rpki-client