Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/VRv_yIWz22A0qZhZY07ks6--TjY.roa
File: VRv_yIWz22A0qZhZY07ks6--TjY.roa (raw, json)
Hash identifier: X54POO6+3DHHSQEvFadMBPlo1F2oOWUcap9md3He/gk=
Subject key identifier: 55:1B:FF:C8:85:B3:DB:60:34:A9:98:59:63:4E:E4:B3:AF:BE:4E:36
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0189EC3EFFA238E23414A8A522B4AE84029E
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/VRv_yIWz22A0qZhZY07ks6--TjY.roa
Signing time: Sun 13 Aug 2023 00:14:58 +0000
ROA not before: Sun 13 Aug 2023 00:14:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:188:7858:a003/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:189:a0e4:5c7d/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:ec:3e:ff:a2:38:e2:34:14:a8:a5:22:b4:ae:84:02:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Aug 13 00:14:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=551bffc885b3db6034a99859634ee4b3afbe4e36
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:72:1e:3a:cb:b6:47:60:e5:d9:01:dd:cd:9c:
bb:a0:f4:cb:b5:4a:82:e1:81:72:fa:4d:3d:95:59:
86:36:ce:a0:ec:1d:db:92:cd:d9:3d:26:f9:d3:9f:
e6:6f:41:d5:5d:75:c6:69:cb:08:11:26:4b:59:f2:
37:19:56:08:2f:85:b7:54:ef:6f:2a:36:6f:ad:79:
43:a8:98:eb:18:af:11:76:c3:89:18:70:71:21:bc:
44:8a:bf:33:2a:d4:83:8c:c2:0e:ab:2f:dd:1f:e8:
76:be:ea:9d:92:c7:a2:01:de:2c:3e:87:6a:4f:50:
d1:bb:2d:f0:90:85:00:51:c6:3d:87:17:fc:b6:ed:
4c:7e:22:45:4a:54:f7:8a:23:88:35:b7:04:6a:36:
ed:ac:a8:c2:c2:c8:2d:74:fe:0c:69:36:60:de:09:
a9:23:39:16:59:d4:39:2f:ee:90:6c:49:46:39:94:
60:29:07:72:f0:07:0c:28:a2:d0:88:85:68:bf:ed:
b4:5f:06:a1:9b:49:40:54:16:8b:94:2c:91:09:58:
2b:a0:9c:2b:03:39:28:b8:f6:f5:89:57:06:03:5b:
22:1d:6e:3f:b8:92:5d:53:9e:f0:b5:92:b1:1e:57:
f9:3a:9a:90:c1:26:79:a3:c7:d0:8f:71:92:b0:a8:
0a:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:1B:FF:C8:85:B3:DB:60:34:A9:98:59:63:4E:E4:B3:AF:BE:4E:36
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/VRv_yIWz22A0qZhZY07ks6--TjY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
41:e7:9a:c2:f0:bc:ae:1e:9a:34:be:41:c9:a2:48:a1:46:28:
56:87:f6:dc:db:1c:28:0a:82:7f:a3:b5:b3:92:ab:62:1d:7a:
e6:75:39:b8:0b:da:23:4a:01:f6:f0:17:2d:bb:17:fe:96:34:
73:be:cf:92:4a:d2:b4:d6:83:69:9b:e2:58:fe:26:98:72:b8:
51:6a:65:ff:68:63:0e:24:c2:dc:ec:d3:2a:84:ff:57:26:a2:
1e:1e:d7:d5:b9:a2:df:21:d6:7d:ac:d0:f8:8f:54:ef:1b:09:
74:08:26:73:fc:90:ea:f0:ea:95:73:dd:db:39:f4:15:68:4d:
0a:66:9c:1f:23:c9:15:3d:e4:0c:e2:77:40:40:f4:d5:68:67:
66:4d:7a:b8:89:c1:28:5d:7b:25:e5:6e:5c:0b:20:8d:ac:4d:
9f:db:88:c7:35:be:7c:22:fc:9f:ed:73:8a:63:37:49:ab:3d:
d7:1d:3b:f4:00:4c:16:dd:ff:6f:4c:09:c2:82:86:bf:17:42:
a3:01:fc:db:09:73:f1:c6:01:14:d7:dc:56:d7:5d:ba:b8:73:
1d:fc:d5:be:47:1d:dc:6f:7e:e3:27:de:41:9e:91:8e:27:0e:
3c:eb:38:06:71:1e:08:4c:34:6b:c2:22:46:40:c9:a3:77:24:
d9:99:12:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 03:24:20 2025 by rpki-client