Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/V_nUHQf2OJdokikdcwouSaC5TA0.roa
File: V_nUHQf2OJdokikdcwouSaC5TA0.roa (raw, json)
Hash identifier: w3FGrYKjI/2VAyC3Ga8j8uNVs+iA7oh3+kAPNjB+ORs=
Subject key identifier: 57:F9:D4:1D:07:F6:38:97:68:92:29:1D:73:0A:2E:49:A0:B9:4C:0D
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 018264E98AEC749DB84EEDD0719FA0338957
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/V_nUHQf2OJdokikdcwouSaC5TA0.roa
Signing time: Wed 03 Aug 2022 18:13:23 +0000
ROA not before: Wed 03 Aug 2022 18:13:23 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:182:3f1d:a803/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:182:383f:6b78/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:64:e9:8a:ec:74:9d:b8:4e:ed:d0:71:9f:a0:33:89:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Aug 3 18:13:23 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=57f9d41d07f638976892291d730a2e49a0b94c0d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:0e:fc:01:a0:25:55:0a:81:2a:e9:db:37:8c:
e1:0e:02:b8:f4:53:d9:c9:89:8e:99:1b:2b:ea:4d:
0b:2f:5e:b6:b8:5d:9e:cc:f1:d0:b6:d2:a1:54:5f:
2b:07:94:3d:44:3c:de:98:86:24:17:0e:17:48:26:
5c:fc:9f:97:7c:52:bf:40:4e:c2:4f:08:c1:49:4c:
98:02:41:37:07:af:ec:1a:cc:70:20:df:b8:96:9a:
6d:5e:3a:66:b7:f6:ff:65:a0:d6:00:4a:a9:24:b5:
9f:e7:44:59:b8:aa:fb:f7:14:be:4d:b5:0a:31:ec:
02:33:ac:84:fe:12:07:25:1f:c9:70:48:e8:c4:cf:
e9:17:15:b1:20:55:82:42:2e:38:48:6d:63:e5:5a:
7b:bd:f0:59:f6:0f:3e:93:e7:65:a0:72:3b:c2:eb:
68:0d:2b:94:73:f7:41:c3:ab:48:c0:6a:18:ed:ae:
8b:08:7f:d8:c1:23:7a:56:f2:e8:0d:74:c1:9e:25:
08:3b:bb:4c:e0:0b:49:29:aa:c4:a1:b0:74:2f:4f:
1a:b7:ee:5b:38:bc:26:c6:ad:fe:54:97:74:c8:95:
d2:54:14:35:e7:45:0a:54:4c:08:94:5e:dc:67:c4:
8d:4d:d6:b9:2d:c1:06:3d:33:56:31:79:ae:ab:e8:
7d:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:F9:D4:1D:07:F6:38:97:68:92:29:1D:73:0A:2E:49:A0:B9:4C:0D
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/V_nUHQf2OJdokikdcwouSaC5TA0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
34:bc:f3:44:83:44:48:bb:ff:ba:7f:a3:6f:35:0a:aa:64:c5:
40:bd:c1:70:ba:4e:59:6e:2d:06:c4:b6:ac:c8:9c:f9:4b:e8:
2d:96:73:27:97:17:69:81:61:9d:e3:f0:36:f2:cc:d9:2b:8c:
5b:a0:e5:71:3c:7f:a6:78:b6:21:b6:2e:7a:c3:6c:cf:f2:d3:
90:5a:89:28:94:64:b2:56:01:52:3b:d7:73:59:36:26:c4:f6:
b0:a5:4e:0b:ec:b6:de:7e:f0:6a:91:74:83:51:ff:05:6b:c5:
06:cc:41:71:d0:20:d3:af:3b:74:d8:3a:5c:92:ae:55:85:a1:
af:45:ae:1f:40:c7:e0:b3:ba:c6:42:2f:15:4a:11:58:d1:f0:
0d:4d:fb:08:e1:3d:15:05:f2:80:2c:bc:d0:10:9c:d7:0c:ca:
87:08:4c:58:12:63:4b:6a:93:6f:b7:af:82:4d:4a:05:60:c8:
3b:8c:dd:fd:41:5e:2d:ef:b6:88:95:9c:9b:03:b9:88:70:47:
6b:f1:e5:e0:8d:2c:81:a1:75:97:41:95:25:6f:3c:0e:5f:f8:
ae:bc:75:a9:ea:98:13:76:6a:32:19:f7:11:8a:92:4c:df:8b:
16:9b:82:3b:2b:3d:bc:dd:fc:47:a2:68:66:c8:b7:4f:e4:61:
d0:c9:97:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 05:02:09 2025 by rpki-client