Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/vaYroE4GYu_8UidWuRq2q4m4dUE.roa
File: vaYroE4GYu_8UidWuRq2q4m4dUE.roa (raw, json)
Hash identifier: aN9nSEzUnz+VYAhfgW+C2asHHQS1z5AjqG6dox9HHIE=
Subject key identifier: BD:A6:2B:A0:4E:06:62:EF:FC:52:27:56:B9:1A:B6:AB:89:B8:75:41
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0184BC3C2C2342AADB9E708E26232DB3D9F9
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/vaYroE4GYu_8UidWuRq2q4m4dUE.roa
Signing time: Mon 28 Nov 2022 03:16:10 +0000
ROA not before: Mon 28 Nov 2022 03:16:10 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:184:ae77:4719/128 maxlen: 128
2001:67c:64:ffff:0:184:9f03:9814/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:bc:3c:2c:23:42:aa:db:9e:70:8e:26:23:2d:b3:d9:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Nov 28 03:16:10 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=bda62ba04e0662effc522756b91ab6ab89b87541
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:b8:d9:57:94:d9:cd:b5:f2:b3:cc:aa:dc:2f:
d2:85:59:e2:46:7e:72:ad:3f:26:b3:c8:30:ae:af:
41:9f:52:19:90:0e:4a:93:1f:a6:26:d3:ae:87:26:
0a:2e:72:da:c2:7c:35:f1:f4:72:f9:ba:ca:7e:a0:
ff:a0:96:84:d7:7a:26:1c:42:bd:44:fc:74:10:37:
88:a5:20:83:f5:7e:a3:cd:61:d1:46:44:b0:11:b5:
3e:5d:10:1b:6e:e7:07:7b:e3:73:6f:fc:84:d6:50:
79:cf:8b:6a:62:55:94:99:a7:a0:2c:17:c8:0d:bd:
68:55:82:14:a6:77:c9:69:38:55:81:23:23:91:b7:
ae:63:69:99:63:03:6f:00:a3:a0:aa:4b:65:f2:ab:
f8:80:2c:17:47:dc:b8:09:75:75:9f:0f:5b:b0:99:
82:22:da:89:81:dd:a9:90:b9:f5:64:db:7a:ef:cb:
c8:fb:ca:e7:54:cb:86:eb:dd:b2:b4:57:75:d8:f1:
a3:97:f5:79:52:f1:cd:47:00:e4:dc:cb:15:a3:ab:
18:17:b5:70:de:ca:48:1f:d9:2e:65:8c:97:2b:d3:
db:b8:2f:a1:cb:d3:7a:c6:08:37:58:af:f8:ee:d3:
04:d8:e3:28:50:e0:98:38:0a:95:85:c3:65:e7:2f:
2a:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:A6:2B:A0:4E:06:62:EF:FC:52:27:56:B9:1A:B6:AB:89:B8:75:41
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/vaYroE4GYu_8UidWuRq2q4m4dUE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
2f:00:d9:58:0a:1e:4a:97:5e:98:bc:c2:07:18:ac:4c:59:09:
cf:50:18:41:a2:0c:f4:23:46:67:bb:a4:8d:25:3a:fa:bc:a9:
5d:2a:35:cf:b9:af:e1:e1:fa:1b:1d:5c:c2:9b:de:ae:68:8e:
b1:2e:ed:83:60:09:48:78:7e:1d:7b:54:3c:29:99:16:be:f3:
76:fa:86:a6:35:9b:b1:e8:9b:fb:c1:70:b0:18:b4:ac:57:4f:
a7:6b:61:a3:bb:30:19:bc:9f:e6:cb:91:8a:6d:13:ed:4e:3f:
70:cb:0d:56:0f:11:3a:75:93:cc:ca:da:a5:49:22:f1:3f:4f:
57:24:c5:71:94:e0:ba:bd:5f:ee:fc:32:c1:ea:71:18:9b:f4:
4b:69:a0:4e:c8:3b:a4:44:82:24:53:7e:55:fe:14:80:f1:fb:
09:af:a3:b0:42:fa:33:ba:26:85:cf:23:80:21:d0:33:85:61:
ed:bd:3c:fb:19:40:3e:99:40:60:54:e1:36:11:54:ed:db:6d:
e0:81:8c:27:6b:ca:58:31:d7:3d:0a:ae:90:81:b3:05:dc:2c:
ac:b5:f0:76:30:09:34:ec:3f:a4:73:5a:f4:03:da:65:9f:ab:
8c:0d:1c:2d:2b:75:a1:b4:b9:a2:40:f4:5c:c0:7f:80:93:b0:
2c:39:3a:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 02:53:17 2025 by rpki-client