Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/VVaaDzoo0JlshDh8l7Ih8JF_TRs.roa
File: VVaaDzoo0JlshDh8l7Ih8JF_TRs.roa (raw, json)
Hash identifier: Ge6TpisDMKkJ9HfDw3diU6MMNJGRMtKeASNPy3fm6bk=
Subject key identifier: 55:56:9A:0F:3A:28:D0:99:6C:84:38:7C:97:B2:21:F0:91:7F:4D:1B
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 018818739AF94A3D6A944C24A425A7DCFFE7
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/VVaaDzoo0JlshDh8l7Ih8JF_TRs.roa
Signing time: Sun 14 May 2023 04:10:09 +0000
ROA not before: Sun 14 May 2023 04:10:09 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:187:4695:a68a/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64:ffff:0:187:fa9a:b088/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:187:b2b8:a7dd/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:18:73:9a:f9:4a:3d:6a:94:4c:24:a4:25:a7:dc:ff:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: May 14 04:10:09 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=55569a0f3a28d0996c84387c97b221f0917f4d1b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:6c:67:16:d2:d7:58:e0:26:68:1a:08:6b:96:
88:e3:dd:2b:b7:d8:b6:9b:a2:e1:c3:fe:86:85:40:
67:15:10:e2:91:0f:a6:ce:25:b1:de:63:46:8d:98:
4e:3d:2d:b4:2e:d6:51:a7:ff:1f:51:f3:49:1e:56:
e3:3b:c1:9a:c3:ef:e8:9b:5d:7d:9a:43:30:af:d8:
e9:73:80:5a:a4:ff:19:f1:07:fb:d8:bc:0a:80:b8:
0e:c6:5f:55:45:1f:39:22:d1:e4:07:c2:3b:7a:e5:
2d:1b:12:af:ca:19:a6:fd:47:cb:f8:25:c1:89:90:
08:3c:a6:cf:2e:bd:8f:83:42:93:88:bf:8c:1f:2f:
d7:45:92:2b:b3:45:66:0d:2e:2d:6d:60:dd:35:36:
e3:21:82:33:45:5a:b4:42:43:11:6a:b9:74:6a:72:
ea:1a:d8:fa:61:bf:2d:0c:7f:b6:60:bf:c4:1f:9b:
c2:af:18:8e:6e:c6:2c:f7:96:25:29:de:60:a0:f8:
ee:12:b7:4c:2e:44:01:70:b0:9b:9c:7d:38:40:37:
e1:6a:4d:a9:01:a8:18:06:65:34:97:10:1c:35:62:
9a:96:51:38:2f:9b:bc:d0:1c:74:46:29:91:9e:6b:
4d:f3:aa:c1:05:70:d4:de:9c:2b:5b:ea:43:5b:48:
73:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:56:9A:0F:3A:28:D0:99:6C:84:38:7C:97:B2:21:F0:91:7F:4D:1B
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/VVaaDzoo0JlshDh8l7Ih8JF_TRs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
61:84:04:4e:4b:9c:e9:7b:80:8f:72:8d:31:37:05:db:52:cc:
50:5e:aa:3b:f0:40:dd:40:f3:b8:7c:f5:8e:d4:8e:91:6b:5b:
49:02:4b:b5:1e:e5:c7:e9:a9:b0:32:f4:f2:35:b7:50:7c:5a:
72:5f:b5:23:eb:80:96:f6:38:b8:5b:0e:87:be:26:b7:59:a5:
14:f2:91:b0:6d:d1:8c:bb:dd:88:16:06:7e:47:40:07:0f:01:
32:0a:b9:25:7a:37:a5:c1:98:88:9d:0e:7b:18:1c:c6:35:21:
98:df:94:cf:df:35:5b:ca:4e:a7:18:dd:f0:c6:75:58:db:22:
ce:c5:30:89:91:27:6d:e3:32:c0:70:2e:5e:67:5e:c0:40:00:
80:5f:cf:13:2f:51:39:d0:15:96:5c:13:24:a0:d4:7b:8f:a3:
09:dc:6b:a5:67:a9:db:51:62:ec:dc:60:55:29:9d:a7:db:5c:
4d:c4:1d:9a:9e:fb:54:19:23:be:f6:6c:b1:6a:00:c6:48:67:
ab:b5:3f:71:9c:6e:57:24:c8:2e:37:fb:c9:bf:46:b3:a7:e2:
0c:33:0f:05:10:a1:44:cf:94:53:5d:3b:06:81:6c:d8:f4:9c:
57:45:4d:53:25:33:ac:ce:a0:4d:c8:ad:52:d8:3f:64:1e:a9:
8f:f6:d3:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 23:28:11 2025 by rpki-client