Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/VXU2GS9vbzP7Xp8ekug5NgaVaYY.roa
File: VXU2GS9vbzP7Xp8ekug5NgaVaYY.roa (raw, json)
Hash identifier: bslEKQDT1noVJ1pihEywFEUbYTvbUTbA3IqanxLwtiE=
Subject key identifier: 55:75:36:19:2F:6F:6F:33:FB:5E:9F:1E:92:E8:39:36:06:95:69:86
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 6C6429CC
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/VXU2GS9vbzP7Xp8ekug5NgaVaYY.roa
Signing time: Mon 21 Feb 2022 00:21:36 +0000
ROA not before: Mon 21 Feb 2022 00:21:36 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1818503628 (0x6c6429cc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Feb 21 00:21:36 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=557536192f6f6f33fb5e9f1e92e8393606956986
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f6:76:1c:aa:3c:96:99:a1:03:51:70:19:2b:41:
58:7a:33:82:7d:60:35:9a:66:ed:89:54:36:40:9e:
aa:4a:1e:5f:15:7c:cd:fc:50:f4:b0:c8:97:c4:15:
48:05:18:d8:a3:01:c7:a2:ec:c4:29:42:10:07:d1:
15:63:1b:8d:28:71:f6:4d:cf:a5:8c:18:17:8d:89:
f6:bf:d4:83:5e:b7:a6:bb:87:ac:0b:e3:4b:73:43:
68:c4:5b:42:d6:c8:a9:e5:0c:99:ff:d2:02:4a:9a:
e3:f8:78:95:f4:69:65:65:ec:a1:74:e0:78:c5:24:
1d:97:2c:d8:af:a8:11:eb:c5:84:84:ab:96:2b:c2:
55:61:fd:cb:75:77:99:49:7f:aa:44:08:ed:c8:88:
7b:8d:e1:10:8e:73:af:07:25:fd:83:0c:7e:34:bb:
14:a9:89:e3:db:38:92:ad:a8:8a:06:c3:9a:b3:2a:
64:6c:05:4d:01:47:54:e8:65:54:1f:cc:66:83:73:
64:3b:75:01:b3:a2:6a:33:10:4d:57:06:a2:87:bf:
72:2c:04:72:7c:4d:cf:1d:f5:aa:54:08:8d:fb:ef:
89:77:71:cc:21:69:0a:72:35:92:d4:01:d3:a1:93:
e2:6e:42:cd:32:a0:59:8a:e8:04:a4:23:04:63:dd:
48:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:75:36:19:2F:6F:6F:33:FB:5E:9F:1E:92:E8:39:36:06:95:69:86
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/VXU2GS9vbzP7Xp8ekug5NgaVaYY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
39:c0:8b:00:d4:71:a3:86:46:4b:fa:75:73:34:b0:64:7c:42:
7a:c0:6c:88:65:a9:c8:fd:1b:6b:cc:c8:61:94:08:90:2e:17:
86:75:17:54:e7:15:82:35:51:74:f8:f9:69:a1:96:82:1f:9d:
52:6a:6a:7a:3b:91:af:f0:18:f3:d4:01:75:c7:08:b6:16:ce:
0e:d2:7b:03:11:c5:ec:f9:fc:05:58:d0:60:bc:16:d2:b1:67:
7c:b8:d9:f9:79:fb:79:5b:9d:2e:53:d1:41:ec:1b:b8:d7:a5:
4a:b0:ab:3d:9e:e4:18:a5:cd:14:b0:49:cb:a4:8b:73:86:e7:
32:33:cd:ab:6e:60:4b:51:a8:1f:43:5c:e1:31:c3:65:de:07:
38:d7:23:f6:a7:cb:7c:54:b0:ee:49:55:5b:b3:4b:e3:87:e0:
b5:71:32:15:45:f3:50:d4:2d:9e:ce:2d:06:83:69:35:f3:a5:
9a:f5:39:f4:ed:b4:46:a9:58:7c:f8:e7:67:4c:bf:a2:76:95:
5e:f0:7b:44:55:b0:ac:7e:21:2f:f1:17:5a:f7:5e:a3:00:c8:
55:0e:2f:ab:22:9c:59:a4:03:45:b9:3a:fa:63:06:a1:c7:de:
ee:b8:7d:47:32:62:91:3c:36:48:5c:81:92:6a:01:b3:60:8c:
69:c5:11:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 21:33:12 2025 by rpki-client