Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/vGP4ptk7POIh8l5k5WM9WMuuvnY.roa
File: vGP4ptk7POIh8l5k5WM9WMuuvnY.roa (raw, json)
Hash identifier: c2f/lPn3vApZSodonj9iLU0ix9h9xe1jC0m5ljwGUAE=
Subject key identifier: BC:63:F8:A6:D9:3B:3C:E2:21:F2:5E:64:E5:63:3D:58:CB:AE:BE:76
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0182E4C4A77F0A5CE04913BBC1F22D525161
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/vGP4ptk7POIh8l5k5WM9WMuuvnY.roa
Signing time: Sun 28 Aug 2022 14:04:29 +0000
ROA not before: Sun 28 Aug 2022 14:04:29 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:182:3f1d:a803/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:182:e4c4:857c/128 maxlen: 128
2001:67c:64:ffff:0:182:7cb2:99d4/128 maxlen: 128
2001:67c:64:ffff:0:182:383f:6b78/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:e4:c4:a7:7f:0a:5c:e0:49:13:bb:c1:f2:2d:52:51:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Aug 28 14:04:29 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=bc63f8a6d93b3ce221f25e64e5633d58cbaebe76
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:48:53:a0:7e:0a:07:6b:a3:0b:70:65:18:70:
9a:f2:74:22:93:23:bb:1f:18:33:29:c3:6e:63:c8:
d2:d6:5a:ac:88:79:7d:da:d3:cb:2f:6e:69:30:77:
ae:bb:9a:c7:4b:5a:7c:b4:12:53:64:27:fa:13:6b:
83:7c:f4:fc:2a:c0:8a:d2:2b:a4:6d:4f:ea:5e:4f:
23:b1:d1:13:0f:94:07:73:09:86:e5:5d:79:33:8f:
1b:6d:71:70:bf:f9:31:cd:99:81:6e:65:8d:12:c3:
42:d9:9b:6d:b8:f4:39:52:c7:c1:9d:74:d7:21:d1:
74:aa:d6:b7:94:9f:b7:aa:fa:5f:bd:9a:7c:48:d6:
61:a1:c0:77:a9:27:89:23:68:32:9e:65:ef:69:56:
11:14:e0:aa:3a:76:23:7e:21:00:2c:8d:82:2c:52:
c2:17:bd:b9:09:56:de:05:b2:ab:bd:ae:40:b8:2d:
8b:0d:77:0d:b3:d6:8f:50:4f:85:42:37:4a:07:3c:
bc:bb:18:9c:55:47:e6:13:b6:74:b3:cc:1f:44:3b:
2e:9e:d4:cd:f3:6b:59:40:af:d2:b5:bb:e0:8a:3d:
cb:e1:26:4f:89:92:5a:bd:6a:17:e6:22:96:c1:25:
5e:1d:23:52:54:54:2e:f5:9e:ac:0b:47:51:5e:f8:
c1:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:63:F8:A6:D9:3B:3C:E2:21:F2:5E:64:E5:63:3D:58:CB:AE:BE:76
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/vGP4ptk7POIh8l5k5WM9WMuuvnY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
65:e7:44:c6:7e:4c:3d:2e:19:e9:0a:26:fd:b1:27:69:6e:d9:
67:05:44:4a:81:ec:59:1d:aa:b8:b3:a8:23:3a:7a:66:98:57:
cc:e1:39:e0:a1:da:72:4f:b4:b7:c2:4e:82:e3:c2:de:a4:22:
e6:24:f8:68:37:ff:b4:ef:70:e1:b8:01:94:36:88:e3:28:f0:
54:40:c8:3b:45:ce:8d:85:b0:c9:a8:3d:cc:b3:d7:00:6e:c7:
28:88:7d:4b:0a:1d:68:d3:84:40:08:3f:d6:ff:2b:d2:9c:54:
ba:32:a9:84:74:f4:f5:36:3d:b4:a8:21:b8:1f:0d:b9:f2:b1:
42:05:96:91:89:8e:3f:ac:cc:ac:b2:59:b4:b3:d9:44:9b:a7:
b3:78:ba:c1:ee:c3:ef:1b:3c:64:5c:4d:5f:cf:28:bc:37:00:
ec:32:a4:27:23:af:75:ee:82:85:1a:6f:2d:d7:26:7f:79:7f:
94:dc:ee:12:ba:ac:89:ab:50:4d:e2:00:93:07:9e:bb:78:b0:
fc:ab:5e:32:d8:4f:4c:ac:92:d9:b5:c3:55:fb:e7:fe:39:de:
5b:1d:3c:02:fc:1e:90:fe:4f:8f:2e:c7:95:11:7d:58:2d:2b:
8a:9d:e5:76:d4:48:c1:1a:c4:2e:82:19:63:78:03:35:c7:22:
9f:28:85:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 20:51:34 2025 by rpki-client