Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/VW2JPwl6KQ34HZIfyZpLID_P8E0.roa
File: VW2JPwl6KQ34HZIfyZpLID_P8E0.roa (raw, json)
Hash identifier: jR2Mt43t7ZpKFNlvpaCzQvs1tPHGF+8d5BxI/s0vTDU=
Subject key identifier: 55:6D:89:3F:09:7A:29:0D:F8:1D:92:1F:C9:9A:4B:20:3F:CF:F0:4D
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0188E110D516948ED10DC8B363079E72CC1F
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/VW2JPwl6KQ34HZIfyZpLID_P8E0.roa
Signing time: Thu 22 Jun 2023 03:05:56 +0000
ROA not before: Thu 22 Jun 2023 03:05:56 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:188:5fe2:b396/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:187:4695:a68a/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:188:7858:a003/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64:ffff:0:187:fa9a:b088/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:187:b2b8:a7dd/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
2001:67c:64:ffff:0:188:e110:59fd/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:e1:10:d5:16:94:8e:d1:0d:c8:b3:63:07:9e:72:cc:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Jun 22 03:05:56 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=556d893f097a290df81d921fc99a4b203fcff04d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:9d:ad:bd:38:0e:c7:0b:66:c2:05:43:b8:30:
c6:ce:4e:63:86:1a:75:9c:1f:35:72:b0:4a:6b:f7:
70:91:46:0c:3c:67:e0:7f:a7:7e:9b:cd:3b:fd:d9:
2a:db:f0:30:31:43:e1:65:ef:f9:9d:f7:7d:56:61:
02:26:27:58:aa:7c:f6:96:98:83:f3:30:0e:3a:2b:
45:30:a2:6c:89:f2:17:f0:8c:75:e9:0c:23:20:ca:
9b:d1:1d:de:7b:8c:00:bb:25:5c:ba:b2:b5:86:1e:
69:10:73:6e:40:0d:fa:ce:43:e9:c0:a2:09:21:fe:
e2:d4:43:24:ab:0f:1c:0c:14:60:35:22:fd:eb:9a:
df:00:92:01:c4:aa:3e:b8:c1:57:2f:2a:d3:a7:9d:
27:9d:ab:7b:f4:d6:bf:00:dc:8d:7d:3d:50:09:bd:
44:1b:ad:66:dc:5a:bf:4a:dc:a9:a8:e5:4e:9a:ed:
53:a5:47:5b:68:01:e9:61:6f:c9:81:36:13:ff:2e:
54:2a:65:16:d2:71:6e:9e:a5:98:21:2f:71:37:7a:
d9:41:16:84:4c:11:36:0e:77:31:c6:d0:64:9e:7a:
24:61:5c:c8:96:1a:20:1b:d8:d9:d5:8f:2e:91:7c:
15:01:c8:bb:69:34:25:06:ea:ba:cd:4c:3f:72:bb:
8c:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:6D:89:3F:09:7A:29:0D:F8:1D:92:1F:C9:9A:4B:20:3F:CF:F0:4D
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/VW2JPwl6KQ34HZIfyZpLID_P8E0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
75:c9:d6:68:0d:94:17:f5:9b:84:5d:6f:36:2d:a1:09:8e:4c:
66:9f:8c:aa:b6:75:92:6f:0a:e2:75:b3:44:3a:7d:79:4b:43:
90:73:d2:34:fe:bd:b6:e5:2b:89:ea:08:4d:51:47:7a:e7:19:
42:64:6c:3c:13:e1:98:13:6a:c4:41:01:16:ab:3b:ce:ab:a3:
6c:2c:7a:cc:ee:f1:c2:d8:a6:9f:8b:2f:17:47:1e:1a:f2:b9:
52:88:a9:a6:49:3e:25:8d:44:bf:01:72:27:f5:00:4c:26:f5:
cb:5c:6c:8b:71:90:3e:83:fc:30:65:23:fa:18:7a:6f:aa:42:
6c:6c:00:ad:75:2b:b2:14:6b:4c:a4:8e:cb:a7:7d:7b:71:c1:
bf:f0:51:02:5b:4c:66:5b:ea:61:fd:8a:bb:0c:39:cc:41:8d:
78:f6:c5:8f:af:78:0c:6e:e6:02:af:8e:e2:de:e8:a6:16:f0:
28:67:0e:70:b7:79:90:9e:42:12:a7:d1:b1:af:b1:f4:6c:d9:
30:e5:2d:89:0a:2d:93:41:a4:10:91:c3:7c:c2:9b:25:98:01:
5d:64:58:69:5b:85:5e:43:65:a7:d6:72:32:b3:f7:87:d5:95:
3e:60:05:9e:f7:fe:f9:be:ef:13:28:e0:53:ca:5c:d0:54:71:
dc:92:55:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 3 02:25:36 2025 by rpki-client