Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/Vj2htbXoWf7zwXB9zQ0myEIv-34.roa
File: Vj2htbXoWf7zwXB9zQ0myEIv-34.roa (raw, json)
Hash identifier: VJso1G9jX8hfn4C9Wv9wrWFzTppLX6sf7G2l+jy2Rks=
Subject key identifier: 56:3D:A1:B5:B5:E8:59:FE:F3:C1:70:7D:CD:0D:26:C8:42:2F:FB:7E
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 713133AA
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/Vj2htbXoWf7zwXB9zQ0myEIv-34.roa
Signing time: Thu 10 Mar 2022 02:09:52 +0000
ROA not before: Thu 10 Mar 2022 02:09:52 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:17f:1bf4:40b5/128 maxlen: 128
2001:67c:64:ffff:0:17f:20ac:a2bd/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1899049898 (0x713133aa)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Mar 10 02:09:52 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=563da1b5b5e859fef3c1707dcd0d26c8422ffb7e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:81:c2:d4:a0:d8:67:4b:1a:af:f3:f4:c0:b2:
cf:e5:0e:68:e3:c2:a9:20:d6:a9:ba:30:60:86:8d:
7f:fc:2a:92:9d:30:ee:96:fe:b4:fa:71:88:50:51:
45:29:55:c6:90:5c:87:e7:63:65:f7:4a:94:a9:9c:
c1:71:79:32:41:7f:58:fc:ad:5f:21:a6:d3:b1:b7:
a0:e9:00:72:67:84:c8:b4:81:89:cb:40:eb:61:ee:
2b:2d:54:ec:0c:b4:d8:bc:dd:97:ee:5a:df:5d:e3:
a6:d3:14:65:f5:5c:7b:fc:54:b4:b8:71:43:7b:4a:
5c:dc:a5:ba:0d:96:df:0b:78:f0:cf:f5:97:05:01:
1f:4d:25:b7:38:a1:4d:1a:2a:65:bc:63:22:7b:44:
a5:7f:41:73:83:38:4a:05:86:fe:21:33:28:eb:40:
ab:72:88:52:12:80:92:14:55:8d:4b:a7:82:62:23:
d7:6f:15:18:3f:50:61:76:f5:01:83:d7:b1:62:17:
19:a8:21:1f:7a:03:26:cf:09:33:ce:a1:b7:4d:b8:
1c:19:88:ff:bd:02:35:89:46:d8:65:97:f4:42:f1:
06:f0:be:47:d4:68:24:34:cd:99:40:73:da:e5:29:
09:00:bd:c3:63:e2:90:29:70:1d:fb:6b:93:58:d4:
32:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:3D:A1:B5:B5:E8:59:FE:F3:C1:70:7D:CD:0D:26:C8:42:2F:FB:7E
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/Vj2htbXoWf7zwXB9zQ0myEIv-34.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
0e:2a:a4:1a:81:a4:aa:3d:45:d5:76:80:6a:e6:1d:b4:ca:97:
7e:9b:d8:88:bb:1e:a1:ed:53:81:59:49:70:71:1e:42:4e:e6:
11:84:56:21:d4:53:4b:73:cf:9b:27:19:1e:11:b4:ba:f0:2e:
ef:38:7d:bb:2e:f2:e8:0b:d8:be:c1:56:ea:99:d7:55:3b:1b:
1e:cf:c9:c5:00:ab:df:f1:5f:ea:bb:ee:92:8a:4d:f5:7e:52:
f7:c6:34:17:e5:6e:2e:64:64:b1:a9:90:69:85:2d:69:d3:4f:
13:20:d5:f2:9b:77:37:c9:48:89:6d:a6:c1:8c:39:a5:14:49:
11:07:6f:6e:6d:50:3c:fa:90:e3:db:06:78:e8:6a:2e:7f:10:
cf:9c:2d:d7:72:71:95:71:1f:f4:05:88:19:cf:bb:29:3a:e1:
31:1d:0f:51:00:fc:8c:c3:e0:6f:4a:fd:0e:1c:2a:4e:f6:c6:
cf:fd:b6:06:18:18:60:c8:14:ca:35:06:c3:12:b6:e9:bc:da:
56:42:17:c2:50:02:c4:7e:14:53:e1:50:97:3d:a8:e3:f0:5a:
2e:2c:8b:a7:b7:3a:ee:61:d8:27:27:77:86:09:a7:20:bf:77:
d2:bc:f4:43:55:b5:87:80:77:6c:e2:dc:11:4b:66:39:5c:37:
0d:f3:45:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 17:47:06 2025 by rpki-client