Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/VUqRd3MKQl9Rtrq6ShVGVXlf8Mk.roa
File: VUqRd3MKQl9Rtrq6ShVGVXlf8Mk.roa (raw, json)
Hash identifier: 0qy9uySLpfw3CvAx94V9CLtIzXxbSjdwrMXTyh6/rwI=
Subject key identifier: 55:4A:91:77:73:0A:42:5F:51:B6:BA:BA:4A:15:46:55:79:5F:F0:C9
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0182A324D08A75C533DBDAA7AAFCC7739E5A
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/VUqRd3MKQl9Rtrq6ShVGVXlf8Mk.roa
Signing time: Mon 15 Aug 2022 20:14:35 +0000
ROA not before: Mon 15 Aug 2022 20:14:35 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:182:3f1d:a803/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:182:7cb2:99d4/128 maxlen: 128
2001:67c:64:ffff:0:182:383f:6b78/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:a3:24:d0:8a:75:c5:33:db:da:a7:aa:fc:c7:73:9e:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Aug 15 20:14:35 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=554a9177730a425f51b6baba4a154655795ff0c9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:f8:2e:a2:6a:5b:17:70:d2:4b:80:49:e1:8b:
fa:1e:b1:e1:de:ed:ab:2d:b5:23:0f:19:a2:da:c7:
93:5d:9b:b2:80:7e:9e:83:d3:00:b7:8d:51:17:a3:
39:ac:86:1e:eb:d4:8b:bc:70:df:fa:05:8b:d3:57:
88:e2:aa:54:4d:c1:9a:ab:e1:27:c3:1c:57:3a:a7:
64:f9:3d:8f:6e:5c:94:e7:70:36:08:f5:53:90:c6:
88:a0:a7:4f:ab:b6:64:08:8b:fc:7c:9c:91:46:d1:
ac:f3:31:59:b6:60:1b:a9:56:2c:d0:e7:c0:36:df:
1b:58:71:09:72:8a:41:aa:43:1b:ec:1b:23:8d:c3:
8e:fa:6d:03:c8:68:3c:2e:56:9c:f7:05:57:79:2e:
32:d5:1e:b8:e2:60:a5:0c:a4:4e:89:46:dc:a0:b9:
b0:85:45:b9:5c:9c:03:a8:d9:d4:5c:e3:b3:54:5b:
fc:c9:37:23:36:86:23:14:f6:6d:87:58:fc:b7:0e:
94:81:0b:82:4a:fb:c3:b8:b8:15:95:65:f2:c7:71:
cd:e3:d0:69:1b:41:4e:0c:c9:d6:f7:18:f6:b1:15:
9d:f5:25:75:af:59:e4:57:58:0b:60:fb:1d:68:05:
51:4f:42:11:da:a6:e6:77:a2:12:9e:47:7c:e1:fc:
e1:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:4A:91:77:73:0A:42:5F:51:B6:BA:BA:4A:15:46:55:79:5F:F0:C9
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/VUqRd3MKQl9Rtrq6ShVGVXlf8Mk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
55:39:60:f2:09:40:ad:60:84:fe:36:d1:ab:0b:70:0e:f9:e5:
45:b6:70:2a:82:ad:79:a5:e9:b9:26:cd:b4:ae:01:56:0b:52:
40:4c:6a:26:34:ec:18:a9:fc:30:d8:cf:b5:d5:16:c8:0c:6b:
40:08:dd:70:fd:a1:af:5f:2b:d2:ed:ef:b4:b9:c2:ba:c1:c4:
08:f1:3c:7d:d8:23:6c:9b:ce:16:66:0a:cd:d5:69:e6:62:b0:
88:13:25:23:60:44:c6:b7:07:4c:50:1f:c6:e0:af:d4:e6:75:
19:71:15:42:fd:f6:04:70:69:fb:97:4b:67:f1:5d:d0:89:c7:
de:5e:ba:d0:ef:01:37:7f:f3:f2:b4:32:3d:6c:97:2b:02:be:
34:7f:9f:7e:bc:f5:85:37:98:a8:72:1d:d7:1c:9f:a5:b6:4d:
0b:15:59:da:1f:39:59:14:4c:0f:49:ae:56:43:bb:b7:8b:86:
8d:44:3a:62:d6:97:90:42:78:f1:c2:fd:81:12:b4:9f:03:a5:
2a:0f:11:0d:0b:27:d6:6a:2d:10:9f:26:71:2d:33:27:cc:af:
63:55:92:b4:c9:70:94:f2:00:7a:0d:23:14:e4:ba:5c:cd:a6:
1b:ab:3f:4f:ec:0c:bb:cc:f0:90:cc:63:1d:5f:2a:8a:66:23:
00:ef:e3:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 2 12:38:08 2025 by rpki-client