Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/VOgZWFcR_p6K4XqN_OkjaY40btY.roa
File: VOgZWFcR_p6K4XqN_OkjaY40btY.roa (raw, json)
Hash identifier: Ym3nZXRzqRX4BxrB9Ys17UXkEIr9G9ki82udlbd3Tfg=
Subject key identifier: 54:E8:19:58:57:11:FE:9E:8A:E1:7A:8D:FC:E9:23:69:8E:34:6E:D6
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0189883BC9EF047E883198C3E79BFDFEC880
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/VOgZWFcR_p6K4XqN_OkjaY40btY.roa
Signing time: Mon 24 Jul 2023 14:09:26 +0000
ROA not before: Mon 24 Jul 2023 14:09:26 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:188:5fe2:b396/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:187:4695:a68a/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:188:7858:a003/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64:ffff:0:187:fa9a:b088/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:187:b2b8:a7dd/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:88:3b:c9:ef:04:7e:88:31:98:c3:e7:9b:fd:fe:c8:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Jul 24 14:09:26 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=54e819585711fe9e8ae17a8dfce923698e346ed6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:a6:74:c6:26:48:d5:62:98:89:b6:b0:34:80:
ab:d5:c3:44:0b:8c:a1:fe:24:14:c2:ad:d2:d5:39:
62:ce:b2:2f:9a:60:7e:6b:a2:08:6a:11:f9:4b:10:
f4:f9:3e:6f:fe:b8:c1:fe:65:31:5e:98:d7:73:15:
0f:af:96:84:28:7e:9d:7f:f7:30:52:f7:e2:33:98:
9c:6f:5c:6c:bb:40:97:38:2d:9f:2b:38:83:9d:69:
01:ae:5a:83:f7:37:7d:11:c1:3c:ed:25:4f:99:c1:
0e:19:65:f5:7f:95:28:bb:4d:c9:49:d8:d0:3f:eb:
f2:6a:8d:ea:8e:69:8e:39:b3:b5:93:c3:31:74:26:
eb:ff:b0:76:ef:6e:98:54:74:45:d6:a7:72:37:ab:
fd:c2:89:1c:31:de:c8:4e:04:b9:53:6d:52:41:38:
91:c7:05:4d:48:c4:6b:fc:dc:f2:8f:8c:6c:92:1d:
92:97:ef:d4:53:64:ac:bf:e7:b7:68:e9:10:1b:37:
83:32:8f:d9:61:78:4e:d7:21:af:e2:ba:67:dd:29:
21:df:74:18:95:6f:4f:8c:45:ce:ee:d9:58:e7:8f:
49:ae:f5:7a:35:66:91:ff:21:0b:59:4f:e5:5e:19:
8b:4d:87:ef:96:43:62:2b:f6:07:be:f1:63:bb:a0:
54:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:E8:19:58:57:11:FE:9E:8A:E1:7A:8D:FC:E9:23:69:8E:34:6E:D6
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/VOgZWFcR_p6K4XqN_OkjaY40btY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
77:c5:bd:6c:cf:58:21:73:1f:1b:8f:65:22:1f:37:01:11:36:
7a:10:c8:96:4f:8c:0a:ce:9c:ae:cc:19:c1:3a:2f:d6:8f:71:
40:ea:f8:fc:50:f4:62:7f:1d:ad:e2:5c:40:11:2f:1b:65:7c:
15:54:0b:1f:18:f0:a0:2f:b7:7c:7d:2e:05:38:5e:67:df:93:
e7:97:9e:13:43:eb:7a:ad:ff:4f:6b:af:76:f5:58:98:dc:c5:
a3:c6:2b:27:cb:a5:f8:83:31:f0:94:79:cc:cd:ff:3e:a3:fb:
e6:2a:20:4c:e6:a9:21:03:3d:9b:ed:1f:d8:e2:4f:61:57:67:
8f:68:79:57:c9:31:31:3b:86:2b:4a:07:6d:d1:d8:4d:34:48:
be:4a:9a:33:51:07:36:9f:7e:ad:77:81:ad:6d:5f:66:b8:5f:
f3:7c:ee:fd:26:c6:e7:79:e2:be:71:d6:a1:17:90:4e:fa:b7:
4c:52:45:36:07:97:2f:fc:ff:a9:b8:14:48:c8:fd:b2:8e:3d:
01:93:1b:d1:11:92:23:0b:35:0e:8c:7e:09:d6:29:cc:16:7a:
87:c2:b9:68:88:70:00:f5:1e:71:b2:99:3e:7e:c1:d6:65:cb:
3c:af:bc:bb:9d:fc:d3:c0:95:87:09:f5:75:07:1c:39:27:bb:
43:ae:9e:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 03:56:52 2025 by rpki-client