Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/VUdtrVLeo_eBhC1_X-PCVo2xTqA.roa
File: VUdtrVLeo_eBhC1_X-PCVo2xTqA.roa (raw, json)
Hash identifier: QuS1BvGoNmBUa2YYKRuZe1EIi5zMFLElLiUNvAzv7Fo=
Subject key identifier: 55:47:6D:AD:52:DE:A3:F7:81:84:2D:7F:5F:E3:C2:56:8D:B1:4E:A0
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 018541E0118262C8AFFE36F0D3B496E617BE
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/VUdtrVLeo_eBhC1_X-PCVo2xTqA.roa
Signing time: Sat 24 Dec 2022 02:04:41 +0000
ROA not before: Sat 24 Dec 2022 02:04:41 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:185:41df:9d67/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:185:3dcc:d8f/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:41:e0:11:82:62:c8:af:fe:36:f0:d3:b4:96:e6:17:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Dec 24 02:04:41 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=55476dad52dea3f781842d7f5fe3c2568db14ea0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:3b:b6:85:cf:b3:28:6d:fb:a3:e5:5a:ee:b8:
85:5d:8c:70:30:e0:7d:57:6f:69:0e:92:81:07:58:
e1:11:dc:e4:22:ec:91:34:b3:48:26:a8:91:2f:21:
0b:5e:4e:4e:c7:78:63:d9:38:2d:59:f6:56:54:25:
f3:ee:db:df:56:03:a7:2d:bf:b6:e4:d1:91:50:94:
72:00:b4:fd:8d:b1:90:eb:42:a4:ba:77:ec:04:0d:
6c:88:9e:44:d9:34:ab:52:34:29:b8:b7:98:24:62:
81:a1:fc:75:e7:23:2f:a0:b7:63:24:e9:c4:9a:91:
37:31:ed:af:e8:51:15:aa:4f:97:78:76:fb:48:6d:
5a:6e:a2:98:cf:1b:3e:f1:c4:fb:d4:81:26:e5:39:
8e:44:18:84:9d:0c:78:c8:38:8a:b5:37:da:37:14:
19:01:bb:dd:2e:e2:b7:0e:91:81:c2:1a:7a:2e:d0:
b8:9d:cb:10:17:f2:53:9e:8d:25:22:76:21:54:73:
12:da:92:23:f6:98:6b:69:a8:ca:07:71:8a:37:96:
be:df:2c:22:eb:14:78:07:3c:27:56:a7:18:16:3c:
59:c1:89:e4:a2:b7:66:f5:d9:09:66:c3:1f:6f:fe:
d8:cd:d9:56:7b:21:76:cf:17:73:df:b1:e1:5e:f4:
fc:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:47:6D:AD:52:DE:A3:F7:81:84:2D:7F:5F:E3:C2:56:8D:B1:4E:A0
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/VUdtrVLeo_eBhC1_X-PCVo2xTqA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
a0:6d:91:a4:35:f8:ba:2d:1a:f3:a8:04:9d:cb:ab:47:c7:05:
2d:b3:5d:18:54:47:0d:b3:7d:5b:f6:cf:c4:c3:7f:58:8b:65:
7b:d4:b6:2b:f1:75:f8:5e:3b:10:d8:0f:d4:fa:3b:e9:96:71:
48:ef:9d:16:14:72:5a:b7:60:b3:60:25:94:43:5e:a0:9a:01:
e7:94:54:fc:87:b8:82:9a:34:29:13:a5:97:24:5a:5e:df:2a:
af:41:31:54:3f:41:d0:6d:52:7e:52:0e:0d:c1:29:b2:e0:ce:
ff:d3:39:14:fc:e2:08:22:94:c3:1e:38:da:ce:b2:f4:8a:86:
6c:04:c5:1f:da:50:35:73:5b:82:6f:59:19:de:6e:0d:7c:cc:
10:78:bc:5d:b1:dc:9b:34:5c:ce:a6:a5:56:fc:d0:71:5d:84:
33:15:cf:e9:14:57:2c:ae:b3:4d:92:25:4d:7c:ca:bb:90:45:
b6:e4:61:8d:c3:ae:c7:d6:f8:c1:8e:8c:d1:41:d6:f7:2c:83:
1b:1a:ff:a5:a6:a9:06:f4:f3:04:e1:2b:c0:28:f0:e8:c6:e2:
63:db:b9:47:72:9b:80:24:25:f4:04:21:cb:5b:11:1c:17:38:
4b:bf:40:1d:88:aa:87:f8:e0:31:c0:db:4d:06:8e:c7:54:aa:
b6:ea:17:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 18:41:35 2025 by rpki-client