Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/VSVUyDpPyUcWKdxvfzAuWkhRZmk.roa
File: VSVUyDpPyUcWKdxvfzAuWkhRZmk.roa (raw, json)
Hash identifier: W4uoMcJputtr8Wh8HK99Fyx4D6Y+KnnVuQjJSozQU9A=
Subject key identifier: 55:25:54:C8:3A:4F:C9:47:16:29:DC:6F:7F:30:2E:5A:48:51:66:69
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0182E00C28FC7EB8472F0B439954905F1074
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/VSVUyDpPyUcWKdxvfzAuWkhRZmk.roa
Signing time: Sat 27 Aug 2022 16:04:29 +0000
ROA not before: Sat 27 Aug 2022 16:04:29 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:182:3f1d:a803/128 maxlen: 128
2001:67c:64:ffff:0:182:e00b:ea96/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:182:7cb2:99d4/128 maxlen: 128
2001:67c:64:ffff:0:182:383f:6b78/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:e0:0c:28:fc:7e:b8:47:2f:0b:43:99:54:90:5f:10:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Aug 27 16:04:29 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=552554c83a4fc9471629dc6f7f302e5a48516669
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:60:1e:d7:56:0e:0e:09:74:2c:5f:17:b3:4a:
57:1e:25:d8:ce:68:c4:7e:44:d0:df:c6:1d:df:17:
e2:d4:0a:0f:83:a2:0c:3f:8d:8f:4d:b3:3a:4f:1e:
fd:0d:45:5c:1c:43:be:ba:34:b0:9b:42:0c:06:08:
3d:66:de:fb:e4:09:12:d0:dd:2b:f3:49:70:2e:a7:
46:74:76:e4:ed:05:95:8b:8e:b4:e2:97:ce:8c:10:
9d:6d:4b:12:bb:9d:82:c6:43:77:b0:61:03:77:09:
a5:5c:db:53:f8:b3:13:e0:20:1c:fc:92:8b:89:29:
bc:98:68:50:bd:23:36:4d:06:ff:54:fa:a4:66:a0:
97:14:dd:ff:8e:f1:9d:c0:10:86:19:14:e0:3e:24:
2a:32:85:7b:4d:b4:57:72:37:8b:97:ea:d4:8c:bd:
b6:ad:c2:8e:76:e0:25:36:7c:80:65:da:0e:95:7f:
73:77:d6:41:e7:14:f6:da:c8:08:b2:a0:db:6d:ff:
4b:c3:9b:4c:a9:4b:43:ea:bc:58:6a:21:f5:4b:c8:
c2:77:7a:8f:61:5a:c5:db:21:b3:ac:72:45:24:68:
e5:c2:63:86:dd:9f:8d:57:2e:66:ad:67:51:65:fb:
8e:67:8f:8a:8d:45:82:c2:48:11:f7:34:78:4e:4c:
81:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:25:54:C8:3A:4F:C9:47:16:29:DC:6F:7F:30:2E:5A:48:51:66:69
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/VSVUyDpPyUcWKdxvfzAuWkhRZmk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
38:be:a0:27:0c:50:e6:70:5c:19:1b:46:85:2e:45:65:39:4d:
12:64:f2:1c:a6:37:97:f3:37:db:f8:84:58:4a:95:cb:65:3a:
0a:bb:63:16:d2:e5:b5:1f:db:c5:5b:a1:be:ef:7d:85:61:ad:
d8:9b:2e:5d:53:aa:90:cb:82:85:c1:65:92:76:43:1e:7b:e9:
1a:7d:f8:da:fd:e4:d9:27:2f:dc:c9:86:36:fb:40:66:6c:8d:
31:a8:ca:24:b7:a5:23:91:69:0b:7d:07:cb:a7:25:bb:8c:29:
40:79:74:86:1f:46:c1:a2:4b:ef:ea:98:20:6a:6e:07:2a:d9:
58:9f:02:f7:00:b6:04:07:a3:5b:ec:98:16:a3:23:2d:52:27:
fb:0d:5a:40:6f:e7:39:64:ae:c4:21:c5:64:48:80:07:ab:f7:
0b:8e:d4:5f:d4:24:40:34:b8:e4:32:f9:f8:99:45:f8:b4:cc:
9d:b7:df:09:72:83:cc:5c:68:17:97:40:ad:34:c0:57:95:b4:
78:a8:35:dd:52:f0:0a:ec:5f:f3:96:d8:31:4e:97:07:f2:b2:
b1:34:24:06:73:83:4a:01:dc:ea:0b:22:1d:f7:03:6a:b4:1f:
e6:ba:f7:72:78:68:83:95:2f:e5:79:5a:9f:a7:d5:74:3b:fb:
fc:1e:9b:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 20:20:45 2025 by rpki-client