Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/VufrDvgSmhlSCccSYR-Uk84IplU.roa
File: VufrDvgSmhlSCccSYR-Uk84IplU.roa (raw, json)
Hash identifier: wW0YsTyf0kiUgJeSEOp8p/9Dj6bdRk0DACzen66SmiY=
Subject key identifier: 56:E7:EB:0E:F8:12:9A:19:52:09:C7:12:61:1F:94:93:CE:08:A6:55
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 69225AF1
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/VufrDvgSmhlSCccSYR-Uk84IplU.roa
Signing time: Wed 09 Feb 2022 12:15:15 +0000
ROA not before: Wed 09 Feb 2022 12:15:15 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:17e:d600:60b0/128 maxlen: 128
2001:67c:64:ffff:0:17e:d524:ead9/128 maxlen: 128
2001:67c:64:ffff:0:17e:d9a6:5e4a/128 maxlen: 128
2001:67c:64:ffff:0:17e:ddba:7b5e/128 maxlen: 128
2001:67c:64:ffff:0:17e:db26:e5c4/128 maxlen: 128
2001:67c:64:ffff:0:17e:dab9:26f6/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:17e:da82:41aa/128 maxlen: 128
2001:67c:64:ffff:0:17e:dd83:3b9e/128 maxlen: 128
2001:67c:64:ffff:0:17e:dcde:5809/128 maxlen: 128
2001:67c:64:ffff:0:17e:d938:ba2e/128 maxlen: 128
2001:67c:64:ffff:0:17e:d85c:d348/128 maxlen: 128
2001:67c:64:ffff:0:17e:daf0:4034/128 maxlen: 128
2001:67c:64:ffff:0:17e:dc02:dc22/128 maxlen: 128
2001:67c:64:ffff:0:17e:d592:92a4/128 maxlen: 128
2001:67c:64:ffff:0:17e:d7ee:e040/128 maxlen: 128
2001:67c:64:ffff:0:17e:d6a5:23ae/128 maxlen: 128
2001:67c:64:ffff:0:17e:d901:fecb/128 maxlen: 128
2001:67c:64:ffff:0:17e:d7b8:3101/128 maxlen: 128
2001:67c:64:ffff:0:17e:a0dd:2f5b/128 maxlen: 128
2001:67c:64:ffff:0:17e:d826:2565/128 maxlen: 128
2001:67c:64:ffff:0:17e:dc39:b603/128 maxlen: 128
2001:67c:64:ffff:0:17e:db5e:7e8/128 maxlen: 128
2001:67c:64:ffff:0:17e:d713:9aeb/128 maxlen: 128
2001:67c:64:ffff:0:17e:d55b:c264/128 maxlen: 128
2001:67c:64:ffff:0:17e:d66e:8559/128 maxlen: 128
2001:67c:64:ffff:0:17e:d96f:7a13/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1763859185 (0x69225af1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Feb 9 12:15:15 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=56e7eb0ef8129a195209c712611f9493ce08a655
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:2d:11:c6:fd:fb:38:7c:59:e3:af:03:f9:86:
ee:95:85:69:45:45:ed:1e:57:7a:cf:29:e9:52:37:
2c:48:37:84:d3:55:23:04:14:51:fb:a6:75:10:0b:
b2:e0:93:22:3d:be:49:de:2f:9d:1f:79:6f:10:26:
2e:7b:5a:5e:35:34:72:a4:0c:2f:51:e3:1c:0a:c8:
06:6f:2a:91:d2:bc:e1:78:4d:55:7c:01:87:6e:d6:
32:b2:e0:7b:05:9c:cf:5c:8d:9a:2a:2d:4f:be:a3:
f1:62:50:b1:40:ea:13:4e:c7:b1:69:db:03:f6:50:
4e:3c:b8:8e:a1:a0:62:4c:30:c7:16:f7:0c:7b:74:
1d:ce:53:83:a2:2d:b7:a9:a9:c0:64:2e:f9:e2:03:
76:2b:e6:86:ce:71:7b:da:4b:f6:d3:de:76:a2:8d:
ac:ae:c1:fe:af:c9:54:89:f7:d4:e9:e5:76:9c:cc:
8c:24:5a:8b:33:7a:05:33:94:f2:77:b4:cf:3c:99:
e3:bf:6b:20:44:7f:a2:b1:47:d9:8a:8e:38:5a:1b:
f5:a3:74:f3:27:fb:d3:9e:3f:fa:f0:a6:64:db:c5:
e3:c1:28:91:50:4c:4e:81:06:6e:c4:6f:99:e7:c2:
b3:d4:e2:ec:bc:f1:31:e4:1a:31:f2:4c:23:c9:07:
00:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:E7:EB:0E:F8:12:9A:19:52:09:C7:12:61:1F:94:93:CE:08:A6:55
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/VufrDvgSmhlSCccSYR-Uk84IplU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
8f:9d:0d:42:4b:a1:43:a0:21:8d:7b:b9:25:19:78:9a:fc:f8:
3d:c5:12:53:31:a8:64:a0:16:6e:bc:e9:1a:7c:8a:e6:0b:ee:
b4:fc:8e:5c:2a:4e:6b:2f:f8:18:78:17:08:53:c1:7f:8d:51:
57:e0:f5:f9:4e:e7:35:33:1f:f6:01:12:cb:7f:aa:c6:ff:0f:
51:6b:19:3b:21:a5:c9:d2:59:68:03:a0:d0:d5:f3:df:b1:71:
b7:72:ef:25:18:72:01:7d:82:23:b0:49:66:32:bb:68:1b:3d:
63:72:88:4b:a0:73:ff:ac:8f:2a:a2:5f:f7:0f:9b:dd:90:b7:
61:0a:d5:4f:06:5f:87:1a:eb:93:71:42:cb:c4:0a:96:be:0c:
b4:b2:e6:50:7e:ff:65:fa:b6:0a:2d:1a:db:32:d5:79:fe:fa:
7b:76:a1:65:25:c6:e5:c9:8f:ec:8a:77:ef:5c:34:c2:d2:14:
8d:0a:54:31:8b:be:3e:8a:f0:a9:e6:22:eb:57:3a:52:93:d0:
05:63:5b:75:1f:c5:f9:d1:29:ef:d1:fe:6f:71:2b:54:47:f9:
7c:a0:ee:27:14:12:5c:bb:bf:11:91:c7:5a:bf:e4:57:28:77:
ab:d7:66:df:a4:d7:e6:96:3d:44:ad:e8:a9:bf:38:4f:06:c4:
54:62:8a:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 21:59:38 2025 by rpki-client