Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/vgl0xuZ4l2KFbttfwBe77MFBUgI.roa
File: vgl0xuZ4l2KFbttfwBe77MFBUgI.roa (raw, json)
Hash identifier: uI5EDl/7jlx66QMinbUwNa0pt77s80C1szoFwCW9IWc=
Subject key identifier: BE:09:74:C6:E6:78:97:62:85:6E:DB:5F:C0:17:BB:EC:C1:41:52:02
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 01889BC4E424F141DCBB55811E0BD6681B95
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/vgl0xuZ4l2KFbttfwBe77MFBUgI.roa
Signing time: Thu 08 Jun 2023 16:09:11 +0000
ROA not before: Thu 08 Jun 2023 16:09:11 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:188:5fe2:b396/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:187:4695:a68a/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:188:7858:a003/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64:ffff:0:187:fa9a:b088/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:187:b2b8:a7dd/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:9b:c4:e4:24:f1:41:dc:bb:55:81:1e:0b:d6:68:1b:95
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Jun 8 16:09:11 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=be0974c6e6789762856edb5fc017bbecc1415202
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:27:f8:5a:4c:62:77:3c:4d:ee:9a:8a:1d:ca:
b4:a9:5f:2d:3a:4d:e9:d0:30:8a:05:28:dc:e0:4d:
0a:d2:ff:40:6e:f5:f9:66:f1:71:34:06:1a:a9:7f:
af:45:5d:70:29:4b:6e:ce:9b:c2:b7:9f:84:73:38:
d8:5f:05:b9:70:fa:f2:1c:d5:24:f3:cf:24:16:65:
d5:ad:26:37:41:1d:52:21:ec:5b:56:ce:9a:5b:3a:
14:48:8c:05:02:97:23:ff:22:1e:7d:23:ca:77:a8:
f7:c9:84:64:bd:e8:25:81:33:81:d0:96:77:c9:40:
63:1a:fd:ca:78:7e:66:ad:62:9c:2a:c2:53:ee:92:
a3:f4:c3:80:e3:b7:12:a7:91:c3:30:a7:a2:70:bd:
8f:90:c3:c5:0e:b8:4e:0b:d1:9c:29:3d:96:aa:15:
5a:a1:f6:8d:fd:85:15:d2:15:87:9d:7b:8a:fe:36:
0a:44:61:9c:76:30:a9:8d:2f:d4:b9:1a:47:72:0f:
b9:d8:76:db:46:91:f8:94:e8:a4:71:9d:0c:23:0c:
d6:e6:74:d9:d4:cc:86:e0:94:6f:20:de:5b:cc:87:
6f:55:29:3d:7d:81:e0:e9:3a:eb:09:84:2f:fd:f1:
98:2a:fd:d5:f5:32:5c:bf:93:c0:78:ba:c6:af:f2:
20:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:09:74:C6:E6:78:97:62:85:6E:DB:5F:C0:17:BB:EC:C1:41:52:02
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/vgl0xuZ4l2KFbttfwBe77MFBUgI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
59:21:d0:7d:c4:d9:22:c8:0d:c1:4c:23:7c:7c:d8:08:2a:b4:
02:06:cd:74:55:69:79:ec:b8:b2:ff:d3:fc:72:b7:07:86:72:
3a:a8:a4:6e:bb:a1:5d:dc:9b:87:e1:bc:3d:4b:a0:08:57:80:
35:29:94:1b:46:3e:43:aa:af:03:33:1a:8c:1d:9d:ca:50:b9:
db:27:76:01:72:3a:4a:75:df:6b:a7:ad:a2:15:df:18:7d:03:
48:63:6a:ff:38:61:b7:5d:9c:81:08:a8:5e:ff:18:7e:f1:45:
19:98:4d:8e:7e:47:1f:60:39:86:5a:38:d6:d6:b5:2d:48:b9:
99:38:db:87:33:2b:35:47:ae:d5:9e:fe:44:8e:1c:e5:2f:1b:
16:7f:78:95:95:b4:8a:fc:44:b6:be:e7:cf:47:e0:13:11:d9:
4d:88:51:40:97:59:12:b5:8e:00:b8:87:35:fd:f6:14:ac:b1:
8c:16:bd:4c:d1:f1:08:49:b0:91:ff:3b:37:32:f1:f2:44:e1:
91:5a:8f:f3:23:3c:82:99:f8:10:cb:fb:ba:bb:b6:29:90:67:
f6:5f:3d:36:93:d2:8d:7f:bd:d6:4c:34:b0:31:80:96:a3:f8:
3e:b8:60:c4:0d:65:fe:e1:20:b3:5a:21:e3:64:a5:04:ae:ac:
5d:b8:fc:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 06:47:18 2025 by rpki-client