Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/VNa8rv-wvaz8R_YAMwE58UJqSI4.roa
File: VNa8rv-wvaz8R_YAMwE58UJqSI4.roa (raw, json)
Hash identifier: inTpYobO6VEc+1GOIfEtrLEnmzOsH/4ov5zvSj0wdUY=
Subject key identifier: 54:D6:BC:AE:FF:B0:BD:AC:FC:47:F6:00:33:01:39:F1:42:6A:48:8E
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 01889AEA14F14DA3EEC2E881E3D87D1C6DC2
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/VNa8rv-wvaz8R_YAMwE58UJqSI4.roa
Signing time: Thu 08 Jun 2023 12:10:12 +0000
ROA not before: Thu 08 Jun 2023 12:10:12 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:188:5fe2:b396/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:187:4695:a68a/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:188:7858:a003/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64:ffff:0:187:fa9a:b088/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:187:b2b8:a7dd/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:9a:ea:14:f1:4d:a3:ee:c2:e8:81:e3:d8:7d:1c:6d:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Jun 8 12:10:12 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=54d6bcaeffb0bdacfc47f600330139f1426a488e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:f2:4f:b2:55:77:20:00:d5:95:95:8e:07:84:
52:f5:ce:54:d4:b6:8d:92:d5:0a:bc:e0:80:91:6d:
cf:9a:98:f3:52:e9:ed:3f:fd:58:a7:02:13:25:65:
89:44:f9:e3:5d:b2:76:f3:c2:66:c3:9c:53:fe:87:
7b:3c:48:4a:76:fc:4e:50:a8:37:a4:67:e1:88:0a:
f6:13:15:4a:f6:fe:c2:fe:19:8d:75:01:3a:6d:74:
9c:50:66:3e:79:f0:95:dc:0d:97:f6:f5:29:d7:2c:
bd:1b:cc:ce:87:be:a0:5d:fa:f1:d9:9d:52:59:20:
5e:c8:3c:0a:39:b8:33:c1:fc:43:19:53:2a:b2:28:
92:f5:62:48:21:0d:1c:8a:ea:c0:06:9b:99:da:70:
55:5b:c6:f9:59:05:62:0e:a8:23:95:0a:69:62:6c:
65:f6:19:27:e4:b5:34:0a:68:ed:88:5f:09:07:89:
da:5d:21:ec:b3:f3:7a:ce:12:59:9d:0b:4d:e9:89:
bc:70:0a:f4:27:74:bc:8b:8a:4f:d4:ea:af:41:32:
10:9b:2f:3b:df:25:7a:d1:2d:e5:56:fb:3c:e8:36:
60:f0:fe:2d:2e:25:e2:84:1f:4e:01:f7:81:03:d2:
80:41:9a:a4:d7:a9:36:6d:96:08:b3:82:2f:a5:e3:
4d:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:D6:BC:AE:FF:B0:BD:AC:FC:47:F6:00:33:01:39:F1:42:6A:48:8E
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/VNa8rv-wvaz8R_YAMwE58UJqSI4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
b1:9b:fc:ea:80:77:ae:50:91:a5:26:b2:75:32:21:25:f0:2c:
16:c4:25:0a:0a:0c:17:dc:ef:7e:c6:41:34:4a:48:2d:71:a6:
c6:01:85:0b:30:98:ca:43:de:92:f6:9d:86:23:1c:05:46:a6:
5a:81:b9:4c:aa:14:75:81:60:53:cf:79:b4:f7:a8:57:c6:4d:
c5:69:34:4a:da:52:6c:d9:66:a0:2e:a6:29:3a:e4:97:eb:73:
18:a6:b3:35:bf:96:ae:04:cc:e4:e3:fc:5b:ae:95:61:51:86:
d9:a1:a2:db:04:a4:02:1c:97:7d:a4:7f:e4:c8:ec:bd:64:eb:
0e:ac:f9:0d:ae:d2:ec:f5:16:ae:a7:59:7c:45:17:a9:29:fd:
2c:59:0d:22:63:c6:75:65:7a:3c:a8:75:f7:96:77:1c:42:65:
ce:67:bf:20:6f:a7:6d:e7:8a:0b:05:fd:78:9e:e1:f6:06:37:
60:28:45:f5:8f:1c:b2:16:48:fe:68:fe:40:2c:68:51:b4:1b:
6d:94:8a:80:96:54:9b:bc:03:20:c0:f9:0c:67:5c:6b:e7:b7:
08:fa:e6:ab:a5:8d:91:c2:ee:63:f5:02:17:bf:19:d3:40:1d:
d7:5d:c9:64:33:c5:34:0c:2c:e7:1f:ad:97:10:ef:86:c8:95:
be:c3:82:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 17:53:16 2025 by rpki-client