Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/Vr8EHVNdEG8DomyUmfTotKnYOOk.roa
File: Vr8EHVNdEG8DomyUmfTotKnYOOk.roa (raw, json)
Hash identifier: EBB1vdcvm/3p375WVSVwLMnCf1g4PEIqsxKUBnkIAi0=
Subject key identifier: 56:BF:04:1D:53:5D:10:6F:03:A2:6C:94:99:F4:E8:B4:A9:D8:38:E9
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0187DE4C6C77072264227B9E9E7EB00F775E
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/Vr8EHVNdEG8DomyUmfTotKnYOOk.roa
Signing time: Tue 02 May 2023 21:09:23 +0000
ROA not before: Tue 02 May 2023 21:09:23 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:187:4695:a68a/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:187:b2b8:a7dd/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:de:4c:6c:77:07:22:64:22:7b:9e:9e:7e:b0:0f:77:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: May 2 21:09:23 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=56bf041d535d106f03a26c9499f4e8b4a9d838e9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:1a:4c:c0:de:c8:e6:c9:d1:08:fa:28:2e:38:
e9:ec:ac:f2:5d:4f:89:40:6c:6b:39:d9:46:02:a3:
4f:a2:78:d5:f9:77:62:e7:b8:26:80:dc:94:e7:a0:
4d:b4:28:9e:e9:36:c5:02:cb:88:90:8b:3c:01:b3:
79:dd:99:ec:b9:ee:0f:a2:14:2b:ad:19:86:60:c8:
f0:06:a7:70:bd:81:ca:af:bd:9a:91:3b:56:ca:64:
39:bb:b0:7d:8b:c7:ee:cb:3b:68:6d:4b:eb:d1:30:
e5:c3:0c:8f:b4:8b:1c:00:f6:70:02:fb:5e:d3:d5:
9e:63:cd:8c:74:30:5b:20:ef:52:95:4c:fb:71:1b:
6f:5b:aa:5a:88:9a:13:78:94:0f:aa:48:d9:53:53:
8c:6b:b4:fd:d9:c8:6f:f3:96:03:eb:8c:5e:74:be:
c7:fe:16:2c:12:99:d8:90:39:f4:ee:b0:89:82:51:
77:05:5d:c7:d5:13:2f:f4:fc:c9:4d:8f:3a:f9:4a:
f7:c6:f8:a6:21:96:a3:0e:5a:cb:79:87:c1:27:91:
17:e3:eb:c1:8f:57:35:b9:8e:f9:36:36:60:03:ea:
11:d4:45:d4:71:51:49:f9:bc:0e:f0:6f:22:da:c4:
a3:c5:ae:a9:96:a9:bd:2e:93:f0:c6:d7:8e:b5:00:
d0:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:BF:04:1D:53:5D:10:6F:03:A2:6C:94:99:F4:E8:B4:A9:D8:38:E9
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/Vr8EHVNdEG8DomyUmfTotKnYOOk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
a5:5a:3c:75:19:b3:e3:24:ce:dd:bf:7d:9a:91:26:5b:54:d6:
ce:23:c1:18:65:a1:0c:12:2b:66:ee:dc:aa:67:43:d6:23:b6:
9b:37:06:e0:a9:5b:11:88:ac:cb:c6:3c:b5:ba:24:17:13:aa:
d9:11:12:6f:62:00:9f:84:62:70:ec:ef:50:a1:9f:a6:6f:8f:
b6:b4:bd:d2:35:4e:1c:91:38:39:73:0c:b0:f2:cb:de:53:73:
0d:72:ec:f1:64:dd:ed:d5:f5:45:11:7c:1a:bc:de:92:83:08:
e6:1a:ff:1f:f0:37:84:7d:81:02:d5:14:29:82:69:b6:48:ec:
60:ca:71:95:2a:35:a9:05:5e:a1:17:29:bf:45:ea:ab:ed:11:
c9:38:21:b1:3c:30:12:fd:82:94:41:ae:1b:48:14:4c:a3:fd:
27:c8:04:5f:2b:63:6a:35:f8:f0:99:8a:5e:4f:7c:89:40:a7:
15:fc:0b:fb:45:44:b2:fc:71:b5:e8:2f:5c:10:09:ec:e7:93:
a3:66:1a:04:af:67:5b:07:e5:3c:06:ef:cd:50:5c:93:76:d2:
f3:7a:be:6c:52:58:57:e1:34:fd:30:db:1a:d5:93:be:bd:8b:
47:61:f4:d2:41:17:f7:23:3f:d4:98:d6:16:d6:6a:1a:f7:5b:
17:e6:f8:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 10:11:30 2025 by rpki-client