Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/VO6exoQg2X8PO03H_YqPEvwWZ8w.roa
File: VO6exoQg2X8PO03H_YqPEvwWZ8w.roa (raw, json)
Hash identifier: vMw+CNuG2b2KEkigy2UfJEa9fawsdeOwVJ2dGJVo83U=
Subject key identifier: 54:EE:9E:C6:84:20:D9:7F:0F:3B:4D:C7:FD:8A:8F:12:FC:16:67:CC
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0185714BF64FE0FA772C9977C93D4A9297E0
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/VO6exoQg2X8PO03H_YqPEvwWZ8w.roa
Signing time: Mon 02 Jan 2023 07:04:41 +0000
ROA not before: Mon 02 Jan 2023 07:04:41 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:185:714b:86b6/128 maxlen: 128
2001:67c:64:ffff:0:185:3dcc:d8f/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:4b:f6:4f:e0:fa:77:2c:99:77:c9:3d:4a:92:97:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Jan 2 07:04:41 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=54ee9ec68420d97f0f3b4dc7fd8a8f12fc1667cc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:34:da:9d:99:be:52:e7:ae:2c:6a:f0:4e:ab:
e3:0b:6a:f1:47:9d:84:4d:e9:22:01:69:a3:c0:90:
bc:2b:f8:62:3a:53:da:ec:f7:91:c6:02:68:0c:de:
9f:8d:51:be:54:26:ef:81:82:62:1e:7e:a1:75:e2:
df:d2:13:0d:a2:45:3c:b6:f0:4d:38:76:a6:4b:09:
98:64:f3:78:51:15:fe:a4:e7:8e:67:48:55:20:67:
48:d9:e1:11:02:ed:eb:ca:ea:c6:1b:fc:50:fd:d2:
10:4d:58:9b:1f:a4:c6:28:52:36:6f:7e:22:fb:33:
44:2a:9a:8a:77:fc:38:cf:4d:6b:f4:db:17:19:23:
f6:ce:03:37:c5:fa:ce:2e:88:3f:1a:de:8e:33:1f:
0b:e5:91:5e:bd:7a:1b:a3:b8:ab:7e:1b:4c:89:f3:
3f:ba:2d:de:91:99:d4:5b:03:27:78:af:ce:30:b8:
8b:09:bf:1e:1e:82:e9:a1:b0:1a:5d:92:4e:7c:06:
64:a1:29:82:88:fd:8e:46:51:81:ce:30:54:48:f1:
50:b2:47:ca:5b:c7:87:66:59:8f:f9:72:c5:1f:4b:
d9:5e:54:54:73:d1:67:c5:f1:c9:df:c7:71:99:28:
c8:f7:65:39:02:4b:47:87:85:22:2e:d0:00:63:fd:
42:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:EE:9E:C6:84:20:D9:7F:0F:3B:4D:C7:FD:8A:8F:12:FC:16:67:CC
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/VO6exoQg2X8PO03H_YqPEvwWZ8w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
5e:71:06:7e:c2:4f:ac:3e:7a:41:db:be:95:ef:1e:30:4d:d1:
0d:8c:18:db:6c:b0:c2:6c:92:5c:3c:06:55:ff:98:97:af:50:
84:c5:b0:1b:9a:02:ea:4c:69:18:a2:a9:5e:63:d8:b9:33:5c:
d5:46:30:40:ec:8d:c9:da:0e:88:5c:c0:b9:80:13:77:67:d5:
9e:ea:9c:9d:ba:ab:2f:a2:cd:44:18:d4:47:d3:b3:4d:4c:3b:
c7:31:41:07:73:e0:c7:77:9f:e6:f3:fb:b0:d5:21:37:c8:2c:
6a:02:47:8d:e4:b6:6d:ab:bd:f0:ed:0e:02:6a:4a:40:d3:b3:
24:03:6c:40:7f:6c:a6:28:18:ac:73:9c:82:fe:83:e7:30:72:
1b:99:de:78:a0:83:16:85:cf:ef:e8:25:57:c1:fe:fa:81:23:
d4:3c:3b:c1:8d:0c:6f:44:1a:82:ba:b7:2d:3b:4a:9b:89:e4:
57:a1:ca:11:42:fb:63:c8:71:44:e4:a3:6e:c1:da:64:cb:65:
34:50:ef:84:ea:3e:9a:37:de:67:f6:a7:03:ab:87:4a:81:5c:
5b:5a:36:42:73:5d:f8:28:3b:6f:42:42:27:47:54:70:7b:05:
28:ec:16:18:dc:04:3b:14:e5:3c:b4:96:0b:51:08:da:ff:52:
68:7f:61:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 08:26:09 2025 by rpki-client