Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/vOAjtbAErRlLHURjx8UIFOYVg5o.roa
File: vOAjtbAErRlLHURjx8UIFOYVg5o.roa (raw, json)
Hash identifier: ehJZztvF8Q6XpwNiANHhkO2SfKzAjz2htQ4FNYT8HJs=
Subject key identifier: BC:E0:23:B5:B0:04:AD:19:4B:1D:44:63:C7:C5:08:14:E6:15:83:9A
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0183C733605A87A60F03905D8425F52B328F
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/vOAjtbAErRlLHURjx8UIFOYVg5o.roa
Signing time: Tue 11 Oct 2022 13:19:36 +0000
ROA not before: Tue 11 Oct 2022 13:19:36 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:c7:33:60:5a:87:a6:0f:03:90:5d:84:25:f5:2b:32:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Oct 11 13:19:36 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=bce023b5b004ad194b1d4463c7c50814e615839a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:f2:88:4d:16:0e:91:85:e9:01:5a:c8:7b:da:
04:b7:fd:4f:f1:ac:f6:6c:23:4a:4c:7b:5f:2c:8d:
64:9f:b1:e1:7e:78:a2:71:1e:71:a8:98:63:10:19:
c6:ff:20:43:91:bc:c4:b2:bb:6b:ef:a6:5b:4c:4c:
a8:44:08:80:2e:fa:f2:bb:1b:51:5c:c9:ce:d5:15:
f2:b6:67:22:30:71:e4:a4:8a:dd:bf:e2:6b:3a:45:
dd:7e:6d:89:7a:91:4b:1f:3e:26:00:9b:55:66:72:
cb:cd:44:15:4a:90:e4:e4:a3:eb:27:c0:e6:28:8f:
47:2e:29:86:e8:94:db:c9:54:5b:79:bc:f8:95:cb:
d9:40:e2:14:47:23:e0:5e:9c:ab:21:1e:f5:09:6e:
e3:a3:6f:a7:72:83:a2:61:2e:0e:e8:cc:8f:8b:dd:
df:ac:b7:b5:4c:7d:5a:a8:3a:7f:2a:bb:83:80:f4:
4a:5d:3c:05:60:35:0c:cb:9c:e3:da:db:98:89:e0:
eb:99:af:0c:13:86:c9:c8:fd:65:0b:86:d8:b8:f3:
a8:ec:e3:e7:c9:3b:84:44:76:55:b1:5a:86:b5:e2:
04:15:f8:9c:b2:0a:3d:98:4f:77:44:a6:cf:bf:1b:
8d:c7:b2:8f:b8:08:df:bc:c3:bc:88:1f:8e:8d:cf:
a1:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:E0:23:B5:B0:04:AD:19:4B:1D:44:63:C7:C5:08:14:E6:15:83:9A
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/vOAjtbAErRlLHURjx8UIFOYVg5o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
63:e0:30:63:13:d5:31:0b:f1:96:ba:c2:36:d5:cb:03:8a:b2:
df:21:5e:bd:8e:85:39:91:a6:77:3c:86:bf:8f:d2:8e:61:68:
05:e5:6b:42:13:b0:85:fc:c5:a0:10:da:0e:19:d5:e9:04:94:
08:a3:a0:e1:77:7e:35:70:b4:6d:41:5c:e9:f0:7c:41:7b:02:
d5:cd:c8:2c:61:3e:87:64:70:f6:2c:9b:51:cb:15:1a:d5:bd:
6f:b0:68:5e:fc:30:cd:f2:ba:33:11:b7:b5:be:6f:36:fd:19:
b9:66:b0:2a:d2:b1:e8:4b:d5:3b:6f:3c:d4:c2:58:27:32:1f:
a5:0c:97:01:72:ed:5e:f3:85:1b:ef:c2:2c:26:17:33:f2:9e:
d9:48:b0:38:46:fb:6f:73:73:c3:11:f6:7e:d1:5a:0d:ac:ff:
ef:d4:0e:4b:48:1a:ef:07:38:1c:de:34:2b:ba:13:2b:86:de:
b2:b3:16:e1:67:27:88:d8:0e:42:fb:48:12:14:13:43:5a:7f:
6f:0b:c0:35:66:78:85:b4:ca:b1:68:69:84:38:70:6d:ef:45:
35:7f:c8:99:e9:16:3c:23:81:49:06:41:e1:c4:9d:45:5b:6e:
19:12:3d:1e:1b:43:8f:ec:1d:82:c9:ec:a0:4b:24:40:68:1a:
24:1e:0b:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 2 06:43:42 2025 by rpki-client