Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/_VMPJlQuEqnEWm1E8-8ZMx9WjLQ.roa
File: _VMPJlQuEqnEWm1E8-8ZMx9WjLQ.roa (raw, json)
Hash identifier: y8/eomCf0cTooZryOcYZYDD7TPbGf06xBS5D6vBmQRc=
Subject key identifier: FD:53:0F:26:54:2E:12:A9:C4:5A:6D:44:F3:EF:19:33:1F:56:8C:B4
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0184F6CD9BBD604AA8B59256CEF4D39853D7
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/_VMPJlQuEqnEWm1E8-8ZMx9WjLQ.roa
Signing time: Fri 09 Dec 2022 12:13:00 +0000
ROA not before: Fri 09 Dec 2022 12:13:00 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:f6:cd:9b:bd:60:4a:a8:b5:92:56:ce:f4:d3:98:53:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Dec 9 12:13:00 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=fd530f26542e12a9c45a6d44f3ef19331f568cb4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:8b:f2:9a:86:0e:7f:b3:44:2d:99:5c:94:13:
69:34:90:b8:72:a3:77:70:50:04:9c:d2:7e:69:03:
5a:34:4b:69:8b:8e:bc:a7:e7:50:27:95:04:72:b8:
bb:52:74:21:dd:67:49:33:52:87:18:66:4c:18:a0:
8c:38:88:6d:c1:0a:fa:09:50:b5:01:d7:a8:64:76:
22:c6:5f:2a:11:b9:84:08:3c:ec:76:d3:11:e5:61:
c6:99:f0:f9:b7:2d:02:cd:33:0e:c4:d2:42:db:88:
30:51:ef:48:48:2f:d4:ff:f3:45:96:21:f5:cb:ec:
5b:10:7a:45:c4:0b:55:a9:c3:c7:4e:2b:ca:dc:f0:
d1:9a:a3:31:ee:be:3f:5e:f6:34:6c:77:b1:ed:8a:
20:41:28:93:b6:3f:fd:60:bc:95:ad:0e:b0:cc:b1:
af:4b:e0:7b:54:b9:1b:50:f9:f4:5b:3d:c6:16:e2:
1f:b4:87:f3:c7:7a:00:f1:41:3a:e6:6b:65:07:33:
65:17:c7:5b:58:4f:fd:89:86:f5:00:fa:03:6a:80:
21:1c:29:9a:48:12:7b:53:85:07:36:69:4a:e3:f5:
ee:58:3b:50:52:b5:a6:5d:97:e1:fb:55:a8:24:a3:
16:da:55:b4:ff:39:3d:98:4a:ce:1d:cc:39:2d:ff:
f3:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:53:0F:26:54:2E:12:A9:C4:5A:6D:44:F3:EF:19:33:1F:56:8C:B4
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/_VMPJlQuEqnEWm1E8-8ZMx9WjLQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
7c:e5:c1:ae:a8:2c:d8:ef:05:a4:41:64:8c:8a:bb:19:1a:b0:
7d:e3:21:55:25:65:97:05:82:7a:ea:c2:fc:10:0d:cd:b8:60:
23:7b:53:c4:be:1a:f2:97:2f:3a:ad:43:51:9c:d7:ac:32:9b:
0f:5c:90:d5:ab:ec:b0:b9:a9:16:19:35:9a:a2:26:a2:89:21:
97:26:80:a4:69:b6:04:4b:5d:f0:85:f8:48:d3:56:a7:80:c0:
eb:63:b6:2f:a7:6f:82:56:7e:13:f2:11:e5:c3:ad:4b:8f:6f:
36:57:9d:b1:b2:1d:93:2d:54:ce:fd:fe:22:e6:f7:fb:e7:59:
86:a1:5d:78:2d:45:0e:bf:9d:92:3f:96:3b:c8:da:bb:d9:2d:
4f:07:a8:cd:06:42:0a:7c:5d:7f:83:57:58:97:9d:7e:09:75:
42:c0:59:da:7c:3a:15:3f:6b:2c:28:4a:bb:2e:11:1e:30:e4:
18:fb:f2:f3:00:13:29:ae:f4:c5:ed:cb:7e:a3:76:95:9f:b1:
d1:f4:48:5d:1d:54:ce:ca:c0:87:05:16:c0:e7:64:54:c3:29:
2f:04:76:49:cf:3f:7c:60:8c:0e:f2:a9:8b:e1:07:e6:0d:c3:
07:3b:17:9f:44:98:5c:75:fb:8c:2c:aa:b7:c3:e1:c4:fc:3a:
b0:d3:63:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 3 04:04:19 2025 by rpki-client