Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/VX1rceNKtmASIuSNjglA1_ax6uY.roa
File: VX1rceNKtmASIuSNjglA1_ax6uY.roa (raw, json)
Hash identifier: l61Z0ZkLWqgldD1z4qhQmri1ty4bdExY22xzPlKug/o=
Subject key identifier: 55:7D:6B:71:E3:4A:B6:60:12:22:E4:8D:8E:09:40:D7:F6:B1:EA:E6
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0188CD1E246D53A61868D4C759AC0DDC1F41
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/VX1rceNKtmASIuSNjglA1_ax6uY.roa
Signing time: Sun 18 Jun 2023 06:08:04 +0000
ROA not before: Sun 18 Jun 2023 06:08:04 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:188:5fe2:b396/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:187:4695:a68a/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:188:7858:a003/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64:ffff:0:187:fa9a:b088/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:187:b2b8:a7dd/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:cd:1e:24:6d:53:a6:18:68:d4:c7:59:ac:0d:dc:1f:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Jun 18 06:08:04 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=557d6b71e34ab6601222e48d8e0940d7f6b1eae6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:d6:c9:86:65:44:89:9d:2e:2a:25:57:ad:6c:
03:40:20:b5:dd:eb:35:dc:76:6b:07:bd:a5:0f:22:
b9:e9:27:da:57:0f:1a:1a:fa:4d:ac:ee:a0:ec:e9:
08:f2:18:d6:fa:21:6e:bc:db:6f:77:a0:0c:08:47:
04:50:96:1f:af:5f:ed:f0:58:c7:81:26:e7:6e:92:
5c:e2:54:78:ea:4f:bd:bf:7c:55:46:83:ed:a8:67:
82:f6:58:2c:fe:cc:05:6d:d8:b2:45:d0:48:35:ce:
29:73:82:c8:16:6d:df:df:f0:dd:16:08:bf:52:f0:
9c:69:e6:d2:80:f2:d6:3c:e9:f9:58:57:c4:33:5a:
a3:d3:d0:e0:8e:3c:3c:57:2b:bb:ed:1d:ce:d4:9e:
d1:6b:bd:be:19:2c:75:ff:a7:80:20:27:b2:7e:b1:
2e:63:32:4f:33:3f:75:d2:5a:b1:10:8f:3a:3b:ed:
06:c6:73:fb:cb:94:94:f2:7f:07:09:91:c0:5c:7a:
ef:d9:fa:8d:3b:ba:ed:d0:f7:a0:f3:ab:53:42:0b:
48:e1:7f:10:b6:93:aa:41:16:bd:a6:f7:90:b9:0c:
53:46:8d:cb:9a:51:c2:fc:0d:bd:17:cb:58:df:3f:
ba:8e:e7:88:a3:f3:53:4e:98:3a:c9:6e:2f:59:2f:
27:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:7D:6B:71:E3:4A:B6:60:12:22:E4:8D:8E:09:40:D7:F6:B1:EA:E6
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/VX1rceNKtmASIuSNjglA1_ax6uY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
72:c7:12:95:c2:33:78:b5:53:0b:a9:ef:a3:5e:47:b6:cd:2b:
46:39:47:97:52:c5:72:bb:d6:19:55:47:4f:89:e0:89:3c:2c:
5c:eb:2c:f8:30:42:dd:1f:27:68:2e:57:6b:aa:f0:f0:a3:be:
94:ff:e7:3c:7e:9e:5f:2a:ef:75:66:cd:5e:21:a6:48:05:9b:
c1:e7:1b:6c:8c:ce:c2:96:87:15:84:5e:84:17:a4:f4:f8:80:
55:bc:8c:c9:15:15:ac:6e:77:b2:71:37:e3:83:49:73:b1:38:
24:93:3f:bb:cd:79:8e:eb:ed:11:7b:42:a9:c0:bb:0c:1a:ce:
38:bb:16:6d:99:3f:6f:0c:65:b3:d8:4c:2e:de:e3:9d:6c:0f:
97:b2:00:fc:ac:b6:75:28:ca:ee:19:b7:93:48:5e:66:b5:b9:
15:4d:a6:51:92:de:05:24:36:0a:ae:17:f0:ef:f9:25:c2:38:
2b:ce:d0:71:65:ee:c0:49:46:d8:dc:ba:39:f6:68:2e:c4:35:
d1:b6:51:cf:de:1a:65:0d:91:ac:bb:e9:32:0d:2b:ce:50:ab:
2c:7d:79:55:16:d0:1a:63:82:85:5e:33:fc:db:6c:c1:0f:86:
c9:cc:aa:98:bd:9f:af:e6:0c:10:5d:34:b9:f2:cb:79:ae:1f:
98:d4:a5:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 21:27:32 2025 by rpki-client