Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/VVj5x3zeo1n2Zj0RyhuLtSxlCpc.roa
File: VVj5x3zeo1n2Zj0RyhuLtSxlCpc.roa (raw, json)
Hash identifier: T1hxi38eQGuxt/OLhlOWJvE+H76wQTPIlDhPd9LhyIQ=
Subject key identifier: 55:58:F9:C7:7C:DE:A3:59:F6:66:3D:11:CA:1B:8B:B5:2C:65:0A:97
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 01870F4056234238F934928B599E4255C419
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/VVj5x3zeo1n2Zj0RyhuLtSxlCpc.roa
Signing time: Thu 23 Mar 2023 16:14:47 +0000
ROA not before: Thu 23 Mar 2023 16:14:47 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:0f:40:56:23:42:38:f9:34:92:8b:59:9e:42:55:c4:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Mar 23 16:14:47 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=5558f9c77cdea359f6663d11ca1b8bb52c650a97
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:f5:b1:25:ff:36:db:b3:bc:6c:8b:d5:17:e6:
3c:11:fb:e0:71:43:c8:e2:2c:1b:0d:db:47:52:6b:
81:63:f3:fb:ed:8e:dd:9e:9c:c0:42:21:f0:5d:d0:
f1:02:43:2e:3b:1e:ae:b7:66:0f:ca:e9:dd:50:0d:
f9:00:a2:a0:b9:fc:d6:bf:cf:1b:0b:06:cf:14:1c:
e0:f7:26:a6:15:d3:07:97:71:44:02:d4:a3:b1:8e:
5d:56:67:b7:a8:11:45:ba:8d:bf:bf:a4:fb:7a:59:
16:9d:8c:91:18:8b:f5:ad:8d:45:4b:ee:de:48:c3:
40:4d:69:0e:5f:85:55:65:68:be:bf:c2:eb:2c:3f:
3f:28:fd:bf:e6:3d:95:6f:61:95:84:ad:ba:5c:00:
b8:26:6a:66:74:cc:69:ae:5d:b6:ef:f9:dc:c5:35:
83:15:d0:c3:cf:2b:ae:05:ff:e4:0c:f9:52:92:0b:
53:db:77:ec:e1:24:66:f4:02:24:9f:bf:1a:2d:89:
38:11:15:46:d0:44:de:82:95:47:98:c2:f4:16:ce:
29:7e:61:cf:47:72:e5:d9:f4:f4:50:65:33:73:30:
e5:cf:9c:25:9c:50:c3:ef:e4:22:95:3c:d7:8c:7c:
36:6a:a5:52:9e:82:c4:b9:66:da:dc:f4:21:88:ca:
93:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:58:F9:C7:7C:DE:A3:59:F6:66:3D:11:CA:1B:8B:B5:2C:65:0A:97
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/VVj5x3zeo1n2Zj0RyhuLtSxlCpc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
17:e6:fd:02:34:06:e9:ea:46:bd:7c:c3:58:c7:5c:9e:1f:85:
fc:20:d9:e3:06:26:e1:e7:58:fb:1b:a4:41:b1:c9:ae:f8:63:
cb:0e:4e:09:ce:63:42:61:59:70:d8:c7:f7:22:3c:82:79:aa:
2d:55:4a:40:e4:f1:53:70:92:fc:db:03:e3:64:4b:1a:35:69:
a8:07:b7:65:92:06:78:b3:a9:79:4d:14:ff:83:d3:b9:52:c9:
5e:87:12:e4:4f:14:34:b8:0c:3b:fb:93:3c:07:71:74:06:1a:
83:79:01:0f:13:78:28:e0:37:9d:11:31:0c:0f:b0:e5:1e:6d:
b3:e4:a3:e4:f2:96:c7:df:fd:ad:f5:74:90:03:64:50:20:72:
57:9f:2a:75:98:9f:85:1d:33:25:d0:4e:99:23:a5:cd:34:0a:
83:ce:2c:50:92:62:43:b7:c1:3b:d4:07:d4:b4:b3:f7:22:a4:
40:69:70:af:57:53:35:0f:77:74:b5:79:d6:13:07:11:6f:cd:
13:2f:aa:71:30:75:72:3d:d7:8d:7d:5f:79:4c:e3:93:57:ce:
2a:d4:97:97:ce:d2:ab:96:bd:28:91:f8:76:b8:8f:c5:21:ec:
df:d6:c1:af:d2:e7:4a:b5:77:fd:8b:dc:c1:13:f1:20:90:fb:
58:93:1d:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 06:54:44 2025 by rpki-client