Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/VjOasuk9Bh2nJNtCxrq-kF8rSQk.roa
File: VjOasuk9Bh2nJNtCxrq-kF8rSQk.roa (raw, json)
Hash identifier: eNsMw7I2GYmLDP7qzhpXyWA5fsGVTF/o4bKdwtUcwOs=
Subject key identifier: 56:33:9A:B2:E9:3D:06:1D:A7:24:DB:42:C6:BA:BE:90:5F:2B:49:09
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 01820C148EB8CAAD15520C52911AB0ACC597
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/VjOasuk9Bh2nJNtCxrq-kF8rSQk.roa
Signing time: Sun 17 Jul 2022 12:14:09 +0000
ROA not before: Sun 17 Jul 2022 12:14:09 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:0c:14:8e:b8:ca:ad:15:52:0c:52:91:1a:b0:ac:c5:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Jul 17 12:14:09 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=56339ab2e93d061da724db42c6babe905f2b4909
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:4a:2f:fb:7c:f8:48:54:86:7b:5d:f4:f3:2d:
1f:1b:02:3e:d2:7e:b9:9a:dd:e1:38:5c:39:2e:51:
c6:f8:1b:a0:22:e4:92:41:b0:42:05:93:8a:ff:c3:
b5:bd:fb:73:b2:33:75:40:26:e1:ba:4c:fe:70:14:
65:0a:71:dd:53:57:2d:48:e8:65:d9:26:e7:4f:a9:
57:8c:f3:ca:42:f7:68:14:e9:fb:8d:8f:9d:b0:c1:
5e:0f:ab:4e:b4:67:3f:42:36:f4:94:68:fa:db:1c:
97:cb:27:75:80:9a:a4:8a:2c:bc:dd:8a:3c:04:bb:
db:d2:20:fa:a4:fd:f3:64:e8:dd:2b:d7:a9:06:17:
60:d3:26:f9:44:37:8f:5b:fc:c4:dd:f3:73:41:c3:
8a:97:46:8e:d4:eb:23:cf:c1:be:6d:b0:99:33:db:
b6:e3:31:14:a6:11:2b:ba:88:46:50:ed:57:84:89:
cf:9c:a1:9c:ab:a8:70:96:74:70:9f:21:57:47:0b:
07:24:37:47:e1:5c:b0:68:94:c4:4f:99:42:df:17:
0f:dd:f3:bf:23:1f:3e:ce:be:1f:0b:6d:f2:39:1d:
ed:bd:cf:ba:20:79:cd:35:ab:a8:38:07:7a:e9:ed:
40:db:b7:a9:59:32:2e:a4:2a:34:86:54:22:7b:b2:
ac:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:33:9A:B2:E9:3D:06:1D:A7:24:DB:42:C6:BA:BE:90:5F:2B:49:09
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/VjOasuk9Bh2nJNtCxrq-kF8rSQk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
57:c0:3b:44:38:90:4d:60:bb:c8:ea:3e:e6:b0:bb:65:5a:25:
9a:03:cc:51:87:5c:f9:6a:38:d9:13:00:48:67:95:4d:cb:c2:
40:f9:20:fc:ac:1c:25:2a:98:56:14:93:38:4e:d8:53:14:cd:
d5:76:c0:81:76:68:6c:90:6b:2e:d5:b2:83:5f:65:67:23:4c:
dc:26:04:8d:90:7e:f6:ef:0f:37:bc:23:d2:91:85:51:9b:a4:
5b:c0:e0:d1:bf:7e:c2:9c:6d:f6:4a:3d:4a:61:3f:91:78:6b:
d6:1e:fb:a7:39:92:f9:17:e8:08:79:f1:49:9c:76:2a:63:35:
a5:cb:53:43:3a:df:a1:1a:7d:d1:7a:64:76:cb:28:15:58:0b:
84:d0:65:4a:09:1d:fd:66:44:f7:35:79:99:2e:8d:fa:0b:ca:
84:7c:f4:24:f3:08:23:93:47:94:49:84:7b:b9:45:12:47:49:
9a:66:a4:9c:18:eb:ce:af:f2:32:b2:7e:0c:34:b2:47:c1:9c:
a5:51:a3:26:07:65:36:02:8d:ad:6c:7f:c0:58:0a:42:f9:8f:
83:94:9e:b0:a4:8c:22:d4:3d:f2:f0:79:da:49:f4:4e:e2:89:
7c:34:4c:bf:c4:4a:fc:ad:b3:a0:0b:a5:51:d8:e9:d2:ba:cd:
16:6b:32:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 2 17:04:31 2025 by rpki-client