Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/vIPV-J4QiEG0DSTCbv1howC5Dso.roa
File: vIPV-J4QiEG0DSTCbv1howC5Dso.roa (raw, json)
Hash identifier: HXniw1jqkoH6GMVixRZHmub3+KahZpuzCn3w0oMBj3U=
Subject key identifier: BC:83:D5:F8:9E:10:88:41:B4:0D:24:C2:6E:FD:61:A3:00:B9:0E:CA
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 01850863C09C8666FD8BC4189DD2F572A12F
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/vIPV-J4QiEG0DSTCbv1howC5Dso.roa
Signing time: Mon 12 Dec 2022 22:10:33 +0000
ROA not before: Mon 12 Dec 2022 22:10:33 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:08:63:c0:9c:86:66:fd:8b:c4:18:9d:d2:f5:72:a1:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Dec 12 22:10:33 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=bc83d5f89e108841b40d24c26efd61a300b90eca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:27:60:59:a0:17:a4:3a:d5:92:6b:b6:8f:0a:
33:f6:af:50:ed:47:bc:a8:6b:1d:41:34:3a:6b:f7:
5f:2b:85:36:77:a5:7e:58:0d:86:9e:52:13:94:6a:
2e:c5:f0:3b:42:8e:cd:df:71:25:a0:d3:8e:1e:59:
09:3c:1a:cb:bd:12:a1:53:e7:1d:fc:0d:68:bf:d5:
39:02:56:af:94:6e:d7:88:2b:a3:bc:69:65:96:f8:
b9:02:27:fe:b3:57:ac:a2:28:ef:f9:8e:59:48:be:
37:ec:68:ce:47:9f:e0:f6:c3:2c:6b:de:64:6f:84:
8d:7c:9b:34:0c:aa:c7:b1:5c:55:ab:3f:26:0b:a7:
5c:40:83:11:de:04:73:21:e9:3b:4e:9e:41:ff:f5:
26:6b:bb:f2:58:7f:ff:6b:8a:f8:22:06:7e:93:ff:
7e:6d:b0:af:02:f4:2c:1c:4d:0d:03:70:c1:81:90:
b1:d1:9b:bb:a8:8f:10:02:85:ec:8f:09:c5:73:e5:
ba:b1:d4:c2:6a:de:42:fc:9a:c8:fc:49:c1:c3:49:
ef:9a:17:a3:fa:b9:d9:b8:51:e3:3c:51:08:b1:d7:
2a:7e:ac:d6:45:f3:27:81:bb:1c:5b:9d:09:70:32:
ec:57:49:df:37:35:ae:f5:5f:11:fa:41:e0:40:35:
21:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:83:D5:F8:9E:10:88:41:B4:0D:24:C2:6E:FD:61:A3:00:B9:0E:CA
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/vIPV-J4QiEG0DSTCbv1howC5Dso.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
17:0b:35:c4:22:7b:cf:7e:53:31:dc:11:50:d3:cf:2d:dc:9c:
e0:ca:4d:81:35:ee:3c:63:c7:ab:17:65:ce:8f:8b:30:c6:4a:
5f:39:0f:bd:27:44:87:6a:d3:1f:22:29:3c:d2:41:71:c9:58:
cd:d2:69:68:4e:42:06:12:56:3f:d6:f0:62:eb:bf:d6:7f:52:
fc:ab:2f:ec:3f:47:c6:ed:f6:4d:0a:3b:3b:e3:0d:3e:ae:0f:
f5:be:80:03:f6:5a:ea:f5:f2:c4:b1:2e:13:97:01:85:2a:e8:
ae:d7:49:74:cf:84:90:a8:b9:99:79:aa:45:fe:69:0e:5c:7f:
2f:a4:b5:92:c6:08:21:11:d3:5c:d1:04:fa:ba:34:fc:91:e0:
39:39:78:48:7e:55:c4:6d:2b:eb:73:d5:b5:6c:0e:c3:34:98:
60:89:66:61:6e:52:c1:d1:3f:4a:ec:3c:eb:06:ae:f4:73:f8:
b1:c2:e4:54:c5:53:c3:fc:ae:2f:25:e6:88:cc:93:29:ba:44:
34:d7:2c:c1:06:10:ee:57:77:41:5f:ba:11:e2:01:31:e8:1d:
db:40:b2:01:b9:c7:3b:c2:32:c5:42:08:78:5c:5a:a1:d4:b1:
4c:e7:66:44:85:b4:da:6b:9f:b2:20:bd:4c:11:69:d4:37:4c:
32:68:cd:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 21:32:14 2025 by rpki-client