Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/vgOg8OBn8vDS57K03GY87-SIHtw.roa
File: vgOg8OBn8vDS57K03GY87-SIHtw.roa (raw, json)
Hash identifier: UEPY7phzqUXDa/G5xNQ2UOnko6CJkyKmeFJje65rWwg=
Subject key identifier: BE:03:A0:F0:E0:67:F2:F0:D2:E7:B2:B4:DC:66:3C:EF:E4:88:1E:DC
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 8C236EB5
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/vgOg8OBn8vDS57K03GY87-SIHtw.roa
Signing time: Sun 12 Jun 2022 16:15:02 +0000
ROA not before: Sun 12 Jun 2022 16:15:02 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:181:56ba:5b78/128 maxlen: 128
2001:67c:64:ffff:0:181:22f:7a99/128 maxlen: 128
2001:67c:64:ffff:0:181:477e:58d8/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2351132341 (0x8c236eb5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Jun 12 16:15:02 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=be03a0f0e067f2f0d2e7b2b4dc663cefe4881edc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:6f:2e:e2:fb:8d:8e:f7:5f:51:dc:11:bd:24:
b7:cc:1d:4b:93:69:7e:42:3c:92:89:4a:66:83:12:
ab:80:89:78:26:00:c1:7b:df:a3:a8:81:7d:b0:8d:
12:a6:96:06:02:ef:0a:07:a3:b5:e4:6b:d7:8d:77:
b0:2b:96:d8:85:d5:a3:7f:46:d4:11:ae:e1:32:97:
53:5e:05:5e:36:31:b5:0e:8b:7f:a6:26:8b:4e:e0:
a8:6c:95:bb:29:e8:a6:79:52:8f:c8:dd:67:90:9a:
63:d2:a9:e0:7f:b7:e5:7f:82:94:b1:c8:57:f3:ae:
74:60:2d:5a:7c:a5:74:9a:af:a2:1b:1b:09:46:a4:
30:34:3f:c0:60:96:6e:68:c9:2a:12:ea:fb:73:52:
4d:da:72:ba:47:17:d5:52:3b:59:85:33:c0:b6:6d:
3f:48:1e:01:cc:81:d7:56:e5:ab:64:ae:4e:68:0c:
da:be:0f:28:fd:42:19:f3:54:e5:b3:23:ce:b6:99:
5e:dc:8d:c2:95:5f:e2:26:ca:5d:40:e1:2c:70:cb:
f6:63:b1:c6:cc:bd:2b:e5:8f:27:11:cb:17:27:da:
40:c3:f3:bd:f2:bd:4c:56:7b:f9:e0:da:ed:b6:a3:
cd:2e:3b:87:cc:d7:0e:fe:2f:02:66:17:6e:ce:a8:
4e:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:03:A0:F0:E0:67:F2:F0:D2:E7:B2:B4:DC:66:3C:EF:E4:88:1E:DC
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/vgOg8OBn8vDS57K03GY87-SIHtw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
47:51:0e:58:25:33:e3:09:4a:09:a0:95:21:8c:38:e6:63:7d:
a4:f9:f3:20:8c:af:7b:5d:c0:e3:3e:7e:63:2a:db:a8:e6:a2:
d1:af:9a:d3:9e:ea:f6:ce:62:bb:5c:f3:3a:38:65:79:f5:e7:
5c:38:25:7c:50:42:08:c6:e5:41:8e:7f:d5:33:50:56:cf:03:
cc:75:59:aa:79:70:8e:4c:53:2f:c3:a8:b5:11:41:b5:83:88:
63:2e:f0:15:04:62:36:e6:ed:83:0f:19:40:15:78:41:c7:c7:
e1:5b:30:a0:9e:3e:ee:43:cc:48:7f:6d:5c:ac:01:48:e5:5b:
b3:b8:38:b3:2c:30:a3:0e:71:36:00:61:90:37:f5:a7:31:df:
c0:f6:f1:f0:e4:6c:e9:cb:2b:11:a7:ab:d8:91:d1:63:f2:89:
52:ff:a7:f6:ee:a4:c0:7a:ec:c5:65:52:6c:94:0c:a5:91:b2:
e7:64:da:be:b4:20:00:d8:25:d5:46:13:0e:07:1c:8e:eb:eb:
00:36:50:52:69:7b:b1:79:db:68:06:b9:ba:5c:08:30:19:8a:
57:dc:c5:29:79:c2:33:39:0f:0d:37:3f:58:ba:81:40:14:eb:
e8:0b:ad:0f:58:fe:55:a0:0f:38:ad:c0:0a:cd:8e:2f:cc:21:
73:15:ed:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 4 12:06:31 2025 by rpki-client