Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/VUMepAROQKUG2LUvMxcVE2ly-zQ.roa
File: VUMepAROQKUG2LUvMxcVE2ly-zQ.roa (raw, json)
Hash identifier: +qZj3q4Nt3474UZSlLxYyt4tsP3s84HvY7JoAjXB2tU=
Subject key identifier: 55:43:1E:A4:04:4E:40:A5:06:D8:B5:2F:33:17:15:13:69:72:FB:34
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 01899F63D541D53EBDD2ED1BBD6017B2FA66
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/VUMepAROQKUG2LUvMxcVE2ly-zQ.roa
Signing time: Sat 29 Jul 2023 02:04:27 +0000
ROA not before: Sat 29 Jul 2023 02:04:27 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:188:7858:a003/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:189:9f63:af3a/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:9f:63:d5:41:d5:3e:bd:d2:ed:1b:bd:60:17:b2:fa:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Jul 29 02:04:27 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=55431ea4044e40a506d8b52f331715136972fb34
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:b6:d9:55:4f:5c:51:a5:70:ec:a5:87:38:c3:
69:a9:81:e3:e2:59:4c:76:97:89:f3:63:3c:2f:24:
51:74:e5:21:54:c3:22:a6:f7:c0:28:65:c3:b6:13:
32:e1:35:33:fe:1c:b8:fd:1a:2a:31:b3:53:42:7a:
ff:ff:7d:f4:c8:64:63:f4:d2:72:b0:8b:cc:4c:a8:
bf:a3:b1:c2:72:92:18:40:1a:9c:76:f9:7f:c2:0c:
3c:e2:a7:b1:e5:79:c8:65:24:29:b8:78:5c:ca:cc:
52:05:77:bc:72:18:10:37:ec:4c:91:00:fb:28:d7:
cc:c3:e0:bb:30:ce:11:3c:13:a1:0f:49:2d:de:70:
60:43:06:3e:19:f6:95:bb:0d:ca:66:3e:cf:c0:53:
73:13:5b:66:7c:eb:4f:f6:f1:a8:46:6a:26:3b:bd:
37:13:46:35:b1:d1:c6:fe:53:23:3d:45:bf:5d:7c:
7a:0b:d3:35:2a:b1:a4:0c:c3:ad:c7:59:bb:37:a2:
4f:c8:a6:e7:45:ad:c8:28:52:6a:3f:66:c4:7f:ab:
5a:cf:ce:bf:6f:da:1b:75:b9:6b:25:89:57:d7:67:
b3:5e:84:41:47:42:0f:01:64:55:f6:b6:4b:36:50:
bf:8d:cd:67:0e:76:cd:31:d6:fd:8e:80:d9:51:df:
ed:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:43:1E:A4:04:4E:40:A5:06:D8:B5:2F:33:17:15:13:69:72:FB:34
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/VUMepAROQKUG2LUvMxcVE2ly-zQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
60:0c:f9:e1:94:6e:e7:53:e4:01:4c:fd:a0:0f:c3:c9:5a:40:
30:d6:f8:e9:a4:ed:d3:4a:14:9f:b6:8a:96:1e:a8:68:41:26:
aa:5c:c5:88:d8:82:af:be:b7:bc:66:50:56:17:35:9a:56:8a:
4b:48:61:c3:b9:c0:67:39:93:01:e4:98:71:c2:f5:4a:45:c4:
0c:a9:f7:b2:88:79:b1:3e:24:75:e5:df:ef:11:78:54:90:42:
60:6a:75:ce:bd:7e:82:6e:09:08:c4:8f:b9:21:9d:5b:e0:8b:
ca:fa:d5:81:e2:7d:c6:e0:8b:27:b9:eb:64:fe:b5:53:1d:c8:
93:9b:c5:f1:91:bb:96:96:81:f1:df:56:f7:56:63:7e:47:b8:
a6:c6:6d:28:72:87:b8:04:f6:6d:8c:17:49:7d:ee:b3:20:7c:
68:e5:17:2e:c1:4d:f3:7e:91:1b:f9:da:a6:c4:36:5b:fd:ba:
07:4a:c8:5c:60:47:45:21:94:90:ab:25:34:ad:d5:55:b7:ef:
0d:d7:97:f6:b4:9a:77:39:10:d6:53:71:66:09:54:e9:6a:8f:
5d:75:ba:d6:ba:16:e8:cb:a6:02:3f:a4:f4:bf:1e:dc:fb:99:
9a:df:76:a7:e7:b5:14:b5:c4:da:ca:ff:63:1f:ee:02:05:e0:
55:6f:c9:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 17:41:21 2025 by rpki-client