Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/VS6034s9OIg9LcoPcdRSPeSuavg.roa
File: VS6034s9OIg9LcoPcdRSPeSuavg.roa (raw, json)
Hash identifier: jZQ7yZXoa1yVRH8LyP88rouZr5nuxgpWos7a3NFPxTo=
Subject key identifier: 55:2E:B4:DF:8B:3D:38:88:3D:2D:CA:0F:71:D4:52:3D:E4:AE:6A:F8
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 018A03D80A7801F99A0D76BE087C03D55966
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/VS6034s9OIg9LcoPcdRSPeSuavg.roa
Signing time: Thu 17 Aug 2023 14:13:24 +0000
ROA not before: Thu 17 Aug 2023 14:13:24 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:188:7858:a003/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:189:a0e4:5c7d/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:03:d8:0a:78:01:f9:9a:0d:76:be:08:7c:03:d5:59:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Aug 17 14:13:24 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=552eb4df8b3d38883d2dca0f71d4523de4ae6af8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:13:9b:ef:cb:33:77:c4:78:06:70:04:11:24:
de:48:86:95:1a:6c:62:70:dc:8c:c8:31:6b:3a:79:
52:14:f6:e6:11:62:c0:02:41:38:3a:38:6c:c8:f1:
04:95:0a:61:7f:e6:35:16:2f:8c:76:79:04:3b:ce:
5c:48:da:c2:a8:a3:1d:64:f9:ad:a3:b0:a1:49:38:
2e:2c:77:cd:6f:86:d7:56:7b:08:b8:fd:a8:9d:73:
a0:5f:a8:87:3f:17:c5:f0:0d:71:25:f0:ee:6f:5d:
50:71:83:f8:8f:fc:9d:d3:e2:bd:27:2d:57:ad:b9:
75:df:29:13:0e:7f:3f:8b:b4:29:7f:92:79:23:f8:
66:86:ed:01:1c:fb:d5:a5:ca:a1:28:27:a7:fd:7c:
1f:f5:1c:b5:f2:54:0e:d9:d3:51:81:c0:ca:2e:a9:
c8:a3:25:19:ae:b0:aa:76:24:f1:09:ae:2c:1d:5f:
50:1b:e1:85:57:e5:e7:83:41:4a:aa:6f:d8:51:0a:
8e:c5:9c:17:5c:fe:ec:b5:83:bb:68:64:cf:6c:38:
21:47:f2:2d:51:78:fd:1d:17:19:2c:ef:33:f6:e5:
8c:4b:d7:4b:78:af:16:59:9a:c3:fb:9d:93:90:7e:
d5:b2:68:a5:c6:1d:ab:39:be:27:f8:8b:a5:b3:c4:
e4:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:2E:B4:DF:8B:3D:38:88:3D:2D:CA:0F:71:D4:52:3D:E4:AE:6A:F8
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/VS6034s9OIg9LcoPcdRSPeSuavg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
a8:a7:1b:ee:8b:f8:42:d0:95:47:6f:d3:ff:be:68:fd:ee:3a:
35:c4:b8:67:98:63:dc:88:d9:0b:7b:0d:e3:77:d0:72:dc:d7:
15:f7:02:b1:4e:a3:d9:de:23:9e:e2:d8:aa:5c:c7:64:e4:a2:
f0:d4:d9:5d:56:57:a2:a4:54:e9:fd:0d:af:75:70:07:31:c5:
9f:7a:aa:fd:e7:41:7c:6f:86:60:0a:e3:0f:8c:b8:b0:4d:bb:
d3:39:3a:6f:3e:84:ba:6c:48:ac:67:88:0c:e4:c5:fb:a5:3a:
fe:01:4c:78:df:32:7c:c8:74:ce:ce:26:dc:83:83:a0:68:bb:
96:7c:e2:34:bc:94:ae:59:fa:63:dd:1b:03:fe:18:f0:00:dc:
65:6d:a9:bb:2f:c5:15:a8:8b:be:5b:75:97:cd:84:11:2f:f5:
b2:1c:1f:89:a2:ae:da:52:cf:ab:c3:de:5b:05:8d:f6:83:67:
68:75:3f:f6:fc:a4:ac:4a:cd:36:93:a7:5b:9b:c8:00:76:a7:
c4:24:95:44:d0:65:d9:6f:e4:8e:68:3d:28:52:66:43:f5:e1:
bf:43:02:dc:f3:a0:f5:71:89:1f:42:dd:0b:1a:fd:59:a9:74:
75:36:ed:79:65:64:2e:1c:2c:3c:91:84:26:a5:b4:36:b3:e1:
d3:a4:2b:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 21:43:14 2025 by rpki-client