Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/vh-oJ2ViM8moc7Voka6aqW14BOQ.roa
File: vh-oJ2ViM8moc7Voka6aqW14BOQ.roa (raw, json)
Hash identifier: GfymVdkwyG7pZWNRkW62ktlnkMC/Y7inCZnPnfY1q7U=
Subject key identifier: BE:1F:A8:27:65:62:33:C9:A8:73:B5:68:91:AE:9A:A9:6D:78:04:E4
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0186578EF94DCF504694CC8D82406DF6ACB1
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/vh-oJ2ViM8moc7Voka6aqW14BOQ.roa
Signing time: Thu 16 Feb 2023 00:10:33 +0000
ROA not before: Thu 16 Feb 2023 00:10:33 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:57:8e:f9:4d:cf:50:46:94:cc:8d:82:40:6d:f6:ac:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Feb 16 00:10:33 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=be1fa827656233c9a873b56891ae9aa96d7804e4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:09:47:54:c5:ac:79:37:ca:9d:5b:b9:f2:e9:
87:00:12:39:0e:ee:fb:94:37:3f:01:47:68:91:8e:
54:94:b8:ac:42:cf:73:14:d7:49:53:f5:ab:aa:4e:
c0:b7:b0:ef:19:00:36:e0:bd:51:11:ca:77:44:cd:
07:5f:e9:59:9f:14:43:6e:9f:1d:5c:7b:65:a1:22:
1a:9b:f9:22:64:fe:9f:56:7b:c1:d9:bb:3a:1f:13:
4c:d4:ed:9a:35:3d:04:9a:04:dc:3d:ed:6b:9c:bc:
b2:7e:ec:d8:3e:7f:90:c7:ce:1a:36:dd:4b:57:69:
7b:1f:f4:61:f8:6a:38:a0:4d:09:c6:67:aa:4c:41:
0b:58:54:fe:39:46:6b:7d:aa:87:7b:86:b9:60:c6:
ce:b5:87:3e:d0:89:43:3d:78:ea:9c:8b:c2:91:c6:
ee:ad:ec:61:a9:36:34:fb:7b:ca:49:30:a9:a7:94:
f7:c9:51:e4:41:e5:68:99:bc:27:5e:fe:46:2d:70:
03:3f:39:3e:ba:d2:2b:d3:43:83:e5:ef:9d:53:32:
a6:c1:db:e2:70:66:ef:cf:85:73:e0:0f:e2:d5:0a:
99:de:dd:47:f3:23:7c:1c:07:4c:05:90:cd:31:34:
32:80:c8:d7:c2:03:dd:c8:36:29:1f:03:cb:ff:5a:
98:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:1F:A8:27:65:62:33:C9:A8:73:B5:68:91:AE:9A:A9:6D:78:04:E4
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/vh-oJ2ViM8moc7Voka6aqW14BOQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
41:0e:8b:67:91:b6:95:c8:35:72:c7:eb:49:d5:bf:02:8b:1f:
4e:14:dc:f3:91:f9:47:96:58:37:00:49:82:17:d7:df:7d:81:
d3:f0:f0:98:12:19:d3:03:1a:a4:ba:b6:ae:b9:d4:fd:cc:9f:
71:56:5e:4c:2a:46:69:83:af:d4:95:ab:f4:f7:5c:37:ca:03:
11:35:28:c0:16:b1:15:a0:fe:e1:00:13:aa:f3:8d:7d:c0:79:
9a:44:dc:3a:95:3e:39:b0:c8:7d:7e:36:18:d3:f5:85:1b:9a:
88:1e:f0:a7:86:49:3c:ba:ce:a8:75:39:e4:7b:2b:66:25:2e:
99:68:2c:5c:4b:8f:8c:6e:99:d9:7f:88:5e:0d:94:b4:fa:d9:
48:21:2e:c0:ce:c2:cd:68:d7:6f:38:1f:b8:e1:99:81:13:ae:
04:f5:c4:0c:d1:c1:c0:48:df:ea:cd:a8:cf:66:21:eb:f7:1d:
7c:e3:50:93:74:cb:d3:aa:c1:e3:08:6a:22:82:cd:00:81:13:
8b:f6:c1:48:ee:ab:a4:cf:da:b1:70:f5:73:96:94:bb:2a:0c:
47:de:c8:69:1d:a5:3d:27:0b:11:03:7f:fb:7a:28:6c:56:21:
d2:bc:f1:b8:1f:a9:3c:99:6a:de:aa:2b:82:d4:d1:e8:e2:a5:
03:74:1d:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 3 08:20:04 2025 by rpki-client