Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/VN-YelBCEsmUjEd5ud6_Rcr-K84.roa
File: VN-YelBCEsmUjEd5ud6_Rcr-K84.roa (raw, json)
Hash identifier: uW1qoaev1c4Hu7PWTbkdF0oCSw/2wfN3lcPRBN8T8Bw=
Subject key identifier: 54:DF:98:7A:50:42:12:C9:94:8C:47:79:B9:DE:BF:45:CA:FE:2B:CE
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0181E2DF244F43BCD72E8DEE603E8D07837C
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/VN-YelBCEsmUjEd5ud6_Rcr-K84.roa
Signing time: Sat 09 Jul 2022 12:11:23 +0000
ROA not before: Sat 09 Jul 2022 12:11:23 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:81:e2:df:24:4f:43:bc:d7:2e:8d:ee:60:3e:8d:07:83:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Jul 9 12:11:23 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=54df987a504212c9948c4779b9debf45cafe2bce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:b2:32:4e:79:c8:4b:63:1a:a5:1a:c1:e9:c3:
08:d4:3e:77:ba:22:7f:40:31:12:a5:41:2c:9a:77:
84:c1:c4:f8:01:1f:e4:ca:fb:96:eb:c1:7b:d4:d7:
32:88:12:a4:96:68:04:07:65:0f:8c:b4:96:49:aa:
10:38:b8:ac:b9:79:df:de:af:42:78:e7:00:bf:30:
0a:8f:55:c2:24:81:3c:de:19:4b:78:1c:02:21:a1:
b8:93:77:49:4b:e6:64:1b:50:ad:14:fe:5a:2e:d6:
1a:53:14:29:e6:a3:7c:9f:83:bf:38:dc:aa:1a:00:
3e:64:b1:a6:ad:d4:4e:8f:9d:c3:2b:b9:d9:77:04:
ed:68:71:81:de:a1:76:24:41:f3:35:1a:25:39:99:
01:c6:07:9d:df:3e:1a:ff:d6:81:1e:0b:31:86:79:
54:5a:ac:02:c9:0a:ef:6a:a5:ce:b1:0f:33:f0:3e:
16:25:10:b9:03:a2:57:6c:da:cb:bb:10:ea:52:25:
af:36:f3:1a:51:68:2d:ec:21:40:23:c4:9b:94:b1:
61:1a:49:b3:c0:0c:0e:fa:34:d6:6b:97:e7:4b:87:
2e:8e:9e:43:02:f0:d1:7a:65:18:b6:91:da:fd:04:
1f:a5:16:cd:bb:12:18:21:74:74:57:c8:1b:a1:50:
6d:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:DF:98:7A:50:42:12:C9:94:8C:47:79:B9:DE:BF:45:CA:FE:2B:CE
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/VN-YelBCEsmUjEd5ud6_Rcr-K84.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
26:fd:9f:ed:8f:33:64:59:32:38:71:01:0a:c2:b2:8d:ad:7b:
7d:24:a2:2f:b2:93:19:0f:6d:f9:67:09:33:5d:ac:6d:a5:8c:
25:e3:b9:ec:c6:e0:4b:28:d0:f7:4f:c5:84:a7:54:3a:0d:b3:
00:9e:cc:db:3a:70:6a:1f:d9:40:4f:61:4e:52:d6:8a:06:d1:
5f:39:bb:7b:da:17:5f:9e:6a:b7:99:db:38:59:08:93:db:8a:
5f:bd:db:a3:b5:23:3c:8b:bf:f2:23:44:03:8e:e9:f0:48:75:
33:86:20:c3:e4:4c:fa:4d:22:96:b0:0d:35:cd:83:f6:45:80:
b4:af:5a:f8:ab:58:8b:78:16:5f:75:ac:9d:e2:00:55:ad:8d:
f6:06:99:c7:23:ab:98:94:ba:03:79:c0:9c:d1:29:92:e6:94:
cb:0a:7e:b4:6a:39:e1:c9:5a:8e:64:c8:4b:6d:ef:d0:56:20:
63:c7:7d:af:36:15:c5:fb:4e:18:b5:d9:40:3e:b8:1c:3c:cd:
2b:da:da:1e:44:da:69:7b:03:5e:71:59:be:00:c4:5b:f3:c3:
e8:a8:01:bd:f4:a3:a9:05:c6:f5:a1:ed:7d:2e:c9:3c:42:3a:
fc:df:47:2f:3d:66:f1:79:f6:a2:9e:82:b2:f4:2b:ec:2b:a5:
5b:5d:49:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 2 20:25:42 2025 by rpki-client