Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/Vy0_lqfGtqS45LP-3zq6H29kXNw.roa
File: Vy0_lqfGtqS45LP-3zq6H29kXNw.roa (raw, json)
Hash identifier: 7t0b66u7cD+dnsbjMBcICVt7f8AkPtZUV7Pecz8NpZ0=
Subject key identifier: 57:2D:3F:96:A7:C6:B6:A4:B8:E4:B3:FE:DF:3A:BA:1F:6F:64:5C:DC
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 7DACD900
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/Vy0_lqfGtqS45LP-3zq6H29kXNw.roa
Signing time: Sat 23 Apr 2022 00:10:36 +0000
ROA not before: Sat 23 Apr 2022 00:10:36 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:180:466e:42dd/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:180:457:1e3f/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2108479744 (0x7dacd900)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Apr 23 00:10:36 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=572d3f96a7c6b6a4b8e4b3fedf3aba1f6f645cdc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f1:45:48:18:71:b4:4e:9d:71:b6:60:11:1b:fc:
96:09:63:91:12:11:28:9f:18:b6:bd:c4:a9:c9:39:
8d:83:61:ae:cb:2c:6e:d4:b2:49:5e:6d:b6:e4:c2:
f2:53:bb:0b:54:fd:46:0b:a7:c2:02:88:df:d2:f9:
59:7f:78:ed:a7:dc:dd:2d:13:5d:0a:e2:4c:60:71:
b3:c6:69:88:05:70:d9:67:d6:91:b4:2f:3b:5c:5f:
34:02:61:94:b3:48:43:74:47:8d:30:b5:a1:cf:5d:
7c:18:2f:dc:72:64:41:00:1e:76:26:12:b9:6e:aa:
7f:a2:50:ec:db:77:0b:3a:87:02:2d:dc:c8:57:c7:
95:d8:fa:58:dd:86:7c:45:91:c9:85:01:9c:18:05:
ce:33:04:55:bd:3c:72:47:ee:39:91:5e:62:c5:ef:
89:bd:43:60:09:e9:7d:bc:1b:50:b5:78:2f:8f:22:
a1:14:d7:f2:16:df:c6:c8:91:85:63:9d:75:f3:5b:
40:55:94:bf:4c:10:d4:d8:9e:39:a9:de:0f:c0:92:
2a:9d:1e:4c:7c:4e:20:ca:b5:dd:b6:a2:06:3d:4b:
f3:71:c1:a3:80:ba:67:47:68:dd:99:0e:d6:2c:3a:
90:0b:75:ec:da:bd:d9:1f:13:09:88:eb:cf:5d:8c:
e3:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:2D:3F:96:A7:C6:B6:A4:B8:E4:B3:FE:DF:3A:BA:1F:6F:64:5C:DC
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/Vy0_lqfGtqS45LP-3zq6H29kXNw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
8f:41:91:35:d7:c6:67:ac:e4:1c:92:89:64:22:86:90:0d:78:
1e:b5:45:93:73:bb:ba:13:06:a0:db:44:22:e3:20:b2:c3:9b:
b9:97:01:9f:b9:a4:4e:29:95:af:a2:d3:5e:00:27:72:78:77:
ce:e0:53:f9:88:10:60:c0:24:44:a9:b6:fe:65:14:85:8a:fa:
e9:af:5a:0e:f5:8e:5f:39:b8:76:c3:ac:3e:de:a3:51:9c:5f:
26:08:60:d8:ad:3b:37:3b:43:a8:72:69:34:a1:1e:8c:00:11:
ff:6b:c5:2d:f0:0e:f6:60:f2:28:26:a5:16:15:76:ac:4d:8e:
69:95:a1:5d:4f:cb:a1:a8:55:08:58:e1:2c:c3:22:91:18:40:
49:9d:35:31:23:b8:be:53:d1:71:ab:a4:6f:32:64:b5:6c:02:
49:9e:ed:7d:68:a1:0b:64:82:60:d2:a0:9b:57:69:de:ad:7c:
38:7a:3b:21:ba:3f:3f:e5:a6:41:88:52:cf:6b:b2:d1:aa:04:
6d:7b:3d:f5:67:04:32:ae:4f:d6:68:5b:59:13:27:97:7c:f7:
fe:96:d9:a9:3b:5d:48:e7:5b:d7:e1:03:a6:52:8a:05:73:1d:
e6:01:3b:d0:4d:0b:4e:68:8a:ac:14:16:2d:2c:8d:33:bb:b9:
73:52:90:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 2 08:26:19 2025 by rpki-client