Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/VVW-AXFP7wg--qTopSQg6pmkvIU.roa
File: VVW-AXFP7wg--qTopSQg6pmkvIU.roa (raw, json)
Hash identifier: kNrnimpM2Ujq+0yvn654zSmhiP/z2SDtBGx5tlGWzi8=
Subject key identifier: 55:55:BE:01:71:4F:EF:08:3E:FA:A4:E8:A5:24:20:EA:99:A4:BC:85
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 018856402743EB2F56626BF87495BEFD09E8
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/VVW-AXFP7wg--qTopSQg6pmkvIU.roa
Signing time: Fri 26 May 2023 04:10:24 +0000
ROA not before: Fri 26 May 2023 04:10:24 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:187:4695:a68a/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64:ffff:0:187:fa9a:b088/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:187:b2b8:a7dd/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:56:40:27:43:eb:2f:56:62:6b:f8:74:95:be:fd:09:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: May 26 04:10:24 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=5555be01714fef083efaa4e8a52420ea99a4bc85
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:4d:3c:5a:a0:5d:3c:de:f1:7c:af:02:ea:5e:
c9:36:14:69:19:d3:5b:92:a8:b3:0b:de:33:ea:e9:
b8:46:dc:88:78:f4:4a:f1:1b:44:96:b2:5b:88:5d:
4d:75:e0:a5:6e:71:15:0f:90:c4:bd:d9:05:74:d7:
3f:5a:ac:ac:ff:02:53:05:fb:30:2c:82:6a:8d:3e:
88:bd:8a:1b:43:40:84:17:76:14:64:00:89:05:bf:
26:af:eb:67:f0:55:63:50:e7:29:0e:77:e4:99:4d:
2c:6a:66:3a:21:b4:d8:42:0a:71:85:3a:c2:41:be:
59:5e:b6:71:da:74:e7:ef:86:9b:7f:c5:ea:f8:51:
2a:ca:fc:eb:e5:e2:ab:ac:48:16:3f:ca:81:2a:db:
42:98:35:98:54:83:4a:7b:7d:f4:9d:bd:b8:5e:51:
3e:8f:c0:7e:92:c5:49:61:48:70:99:81:4c:83:a9:
75:96:aa:c5:61:6e:86:49:6d:1a:76:72:6a:0f:3c:
e3:39:f3:3e:a1:9a:95:eb:b6:da:40:25:7a:a0:11:
c5:6f:5e:dd:f4:af:ec:bf:da:af:a1:d6:e8:f2:71:
c2:15:c7:26:86:93:fa:85:e0:12:31:7c:4b:46:ba:
f4:f9:12:d1:d9:ad:b6:59:78:e4:c5:a2:25:be:05:
aa:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:55:BE:01:71:4F:EF:08:3E:FA:A4:E8:A5:24:20:EA:99:A4:BC:85
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/VVW-AXFP7wg--qTopSQg6pmkvIU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
39:a7:ec:8d:a7:83:3e:95:53:71:e4:13:fe:0e:03:eb:2b:62:
d4:c3:5a:c7:13:0b:f1:db:f6:a0:43:1f:62:38:d0:50:b4:85:
c7:63:4e:b8:3b:02:de:17:fd:8f:61:fa:cd:f7:1c:08:25:8e:
e3:7c:83:65:a9:80:36:65:e9:66:f6:02:7c:f8:ab:1c:e1:4b:
cc:5d:a5:e7:5f:d7:58:86:d9:12:8d:7f:dd:4d:79:a6:b5:fa:
12:55:06:3d:15:0c:6a:9f:a8:1c:b7:e0:9d:6c:7a:a8:2a:da:
b5:0d:11:7c:35:08:f8:dc:f8:c6:c8:14:6c:30:62:de:80:b7:
9f:d7:86:53:f4:df:08:60:f1:8b:ef:b3:b0:df:4d:26:30:fc:
5d:86:23:44:90:f1:9c:af:11:38:f8:20:b1:d8:b8:80:d4:d1:
65:84:d4:a5:ed:c0:9d:46:c3:4b:b1:a9:70:6e:a8:17:9c:36:
2d:97:7e:83:8a:ae:0e:df:57:f8:74:3f:eb:00:f7:70:d8:37:
38:70:98:34:30:72:40:c2:3c:97:6d:70:a5:c8:67:23:78:00:
26:a7:9f:8f:be:90:17:7a:60:11:fe:05:70:08:85:1e:41:94:
5c:9a:e5:07:7d:c6:23:48:43:30:e8:81:58:48:e6:6d:98:32:
80:b7:51:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 18:05:27 2025 by rpki-client