Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/vf_GFgQ_Z3qUBaJ3pEjDh07Ls0E.roa
File: vf_GFgQ_Z3qUBaJ3pEjDh07Ls0E.roa (raw, json)
Hash identifier: fpXvFBr+v/uU+42kdLyY+u+6YJL65dBqU0Exlojnqd0=
Subject key identifier: BD:FF:C6:16:04:3F:67:7A:94:05:A2:77:A4:48:C3:87:4E:CB:B3:41
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0187AA9802EF94A78D7E3B2C0B8834431D96
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/vf_GFgQ_Z3qUBaJ3pEjDh07Ls0E.roa
Signing time: Sat 22 Apr 2023 20:11:41 +0000
ROA not before: Sat 22 Apr 2023 20:11:41 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:187:4695:a68a/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:aa:98:02:ef:94:a7:8d:7e:3b:2c:0b:88:34:43:1d:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Apr 22 20:11:41 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=bdffc616043f677a9405a277a448c3874ecbb341
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:6a:ff:10:9a:ac:f0:73:f3:f6:e0:85:81:f0:
84:84:64:5f:f7:66:61:10:4a:99:be:10:6b:56:4b:
73:6f:d7:db:13:83:9c:58:7a:e9:08:14:8c:88:22:
cb:41:21:ba:aa:c6:23:3b:c1:f2:fb:dc:16:52:8e:
c0:b3:ba:d5:37:c7:23:50:dc:6d:3d:6c:e3:89:a2:
45:db:82:f0:95:6e:fe:68:e0:fc:b5:40:5a:17:a8:
4c:56:87:21:c5:b7:b3:2b:9b:b2:fb:d1:ce:94:c7:
9a:51:8b:3c:d2:f7:d0:31:2c:e9:20:ff:19:6b:f0:
03:b9:4c:fa:80:41:97:5c:9b:15:c9:e6:b7:c4:56:
bd:4d:b5:6b:e6:33:87:31:4b:74:13:fa:db:ce:71:
39:52:63:2a:4a:fa:a1:b8:f3:64:30:be:53:7c:5d:
d3:bc:71:eb:89:98:bb:38:45:3f:6c:0f:78:c0:65:
84:d8:a0:00:52:2b:e1:4a:2e:35:29:ac:bf:20:01:
24:31:b5:9c:17:7f:58:c1:d8:80:51:35:45:b8:d4:
16:f3:d9:0b:97:ae:c7:6c:20:ae:49:ef:ca:19:37:
e0:6a:59:98:09:66:8f:2a:6d:52:22:c2:6b:16:fd:
c8:ac:77:d6:bd:60:4a:d5:32:68:1e:0f:a3:03:b8:
47:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:FF:C6:16:04:3F:67:7A:94:05:A2:77:A4:48:C3:87:4E:CB:B3:41
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/vf_GFgQ_Z3qUBaJ3pEjDh07Ls0E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
0a:5b:4b:a9:86:f6:3d:ef:79:0d:38:30:de:56:21:a7:6c:07:
5c:60:23:37:34:c5:be:3c:51:26:6b:73:31:36:7d:e1:ed:88:
72:ab:e7:da:bf:8c:09:fc:44:1a:30:ad:0c:39:bb:86:fd:52:
1b:66:a5:68:4b:28:ec:b3:ce:fb:e0:b6:bb:34:02:d0:c7:bb:
9c:31:94:06:2a:85:ca:a8:47:6c:28:44:f8:9b:d7:7c:dd:95:
84:c4:61:bb:9f:79:23:02:2d:bb:cf:f2:ed:53:fe:fc:31:2e:
fc:94:ae:07:57:13:15:4d:78:17:d5:2c:ba:61:71:79:0c:09:
48:25:11:28:4f:53:4f:9b:2b:60:64:df:5f:a1:54:09:05:53:
65:73:7e:26:37:b6:3b:99:1d:23:04:ea:88:32:06:61:62:aa:
34:b8:35:b4:c2:96:a1:a5:03:37:e8:4a:a3:06:27:15:32:d2:
87:14:ae:a6:4c:a8:60:69:fd:3b:6d:98:8e:35:14:1a:ef:cf:
7e:76:35:78:61:75:3f:02:4d:8f:32:8b:64:31:52:bb:5f:51:
86:e3:34:c7:cc:d8:74:63:e1:4b:7f:fe:28:82:d5:70:9e:95:
e5:67:1c:f2:c0:ec:d4:e8:20:aa:80:e8:78:09:fb:f7:b7:f5:
67:90:82:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 18:02:15 2025 by rpki-client