Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/vZ8QKaHQmfMfFP03fAWpyLm5c-U.roa
File: vZ8QKaHQmfMfFP03fAWpyLm5c-U.roa (raw, json)
Hash identifier: lpsHsJvNNfAp9bx10z+g5DfRq39nbLPFQ6ubnz52iNg=
Subject key identifier: BD:9F:10:29:A1:D0:99:F3:1F:14:FD:37:7C:05:A9:C8:B9:B9:73:E5
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 85BC958F
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/vZ8QKaHQmfMfFP03fAWpyLm5c-U.roa
Signing time: Fri 20 May 2022 13:11:29 +0000
ROA not before: Fri 20 May 2022 13:11:29 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:180:a810:6542/128 maxlen: 128
2001:67c:64:ffff:0:180:ddb5:bc5/128 maxlen: 128
2001:67c:64:ffff:0:180:466e:42dd/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:180:e0ec:efe1/128 maxlen: 128
2001:67c:64:ffff:0:180:8961:505f/128 maxlen: 128
2001:67c:64:ffff:0:180:457:1e3f/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2243728783 (0x85bc958f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: May 20 13:11:29 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=bd9f1029a1d099f31f14fd377c05a9c8b9b973e5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:84:b2:e1:bc:59:d8:5d:84:dd:55:6c:20:65:
52:1e:c2:0c:8d:a7:e6:35:05:0d:c2:9c:b9:bc:29:
37:b6:11:f4:7d:7b:bc:e0:6f:be:bf:80:41:a1:94:
a3:b5:ab:c3:de:95:ff:d0:da:84:91:5b:ac:41:10:
1e:48:42:1b:1f:4f:7a:19:6e:aa:b6:e6:b7:1d:8a:
88:ea:1f:3d:8a:08:86:10:88:94:1b:77:05:f6:67:
e4:29:79:49:60:2c:f1:d0:bc:5b:31:8b:13:17:61:
96:36:f6:c8:6b:1f:76:94:54:03:8a:88:83:6b:6d:
a7:42:ef:ff:ee:d9:4c:47:3e:cd:8d:60:ae:e9:e1:
39:d8:87:2a:9e:a2:71:79:ae:83:5e:5f:0f:9f:73:
1a:d4:07:4a:1f:db:62:59:8c:27:c7:2a:fc:ed:a3:
31:2b:4b:58:e7:75:7f:59:ad:a1:95:09:9a:93:9c:
ec:8a:0d:e7:5d:d6:4f:5f:8f:61:ec:ff:2b:e3:7f:
7c:32:0f:68:d2:b2:b5:c1:3b:91:d1:ca:3b:1f:59:
e0:99:87:6f:ce:2c:f6:d9:fe:c8:56:f5:e0:5e:f4:
87:a8:75:03:9c:89:fc:94:77:14:8c:53:02:2f:2a:
48:ca:98:ac:18:7c:05:4e:9f:69:61:46:8d:5c:1a:
08:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:9F:10:29:A1:D0:99:F3:1F:14:FD:37:7C:05:A9:C8:B9:B9:73:E5
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/vZ8QKaHQmfMfFP03fAWpyLm5c-U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
61:ab:7f:54:fd:ef:31:e7:0e:48:41:c3:eb:56:fc:20:a9:f0:
4d:87:92:bf:6f:c9:1e:8f:02:60:24:0d:e7:2f:e6:3c:ab:82:
ef:80:ba:83:c7:19:c5:e4:c0:d6:48:bf:7c:3d:0f:30:d7:b1:
fb:87:49:47:16:40:fd:ac:99:49:ae:6c:0c:91:fa:1e:fd:3b:
b1:99:68:40:e6:19:f8:cc:db:84:4a:99:83:34:5f:4a:c9:2d:
42:9e:a0:0b:aa:cb:64:2d:e1:86:e6:13:66:7b:e7:63:c4:2f:
e9:c8:84:31:3c:91:77:15:6e:c5:6d:34:99:03:24:35:d2:5b:
93:e3:93:84:ca:35:1c:69:d2:e0:ab:cb:93:3e:8f:f5:ff:fd:
53:d6:39:7f:94:c3:33:4c:4a:d3:9e:55:56:c4:54:bb:78:16:
70:b9:64:93:c7:99:a8:ee:ab:99:bf:16:ff:2e:6a:6d:ea:10:
7d:3a:d4:dc:b5:5b:cb:0b:85:34:4c:ca:3f:86:6a:88:06:1e:
98:45:8b:3c:40:c0:05:6d:4d:d1:a5:fb:25:e2:6b:1d:06:f4:
b7:d6:a5:06:9c:a2:89:cf:d5:56:ad:f0:4d:ae:36:31:5c:49:
3e:11:96:b6:09:2d:9d:55:89:ec:ea:0f:1f:ba:02:44:29:84:
14:e7:84:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 17:36:28 2025 by rpki-client