Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/vhBV7sIEh1ATuTibaipKCbhUe3M.roa
File: vhBV7sIEh1ATuTibaipKCbhUe3M.roa (raw, json)
Hash identifier: inf+Dn0oI9LUTnNe6+y5HuHHooDPrmwYdatjr4eljg8=
Subject key identifier: BE:10:55:EE:C2:04:87:50:13:B9:38:9B:6A:2A:4A:09:B8:54:7B:73
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 01876D3369D070BA40E1DA077A3DFE75F5EE
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/vhBV7sIEh1ATuTibaipKCbhUe3M.roa
Signing time: Mon 10 Apr 2023 22:04:58 +0000
ROA not before: Mon 10 Apr 2023 22:04:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:187:4695:a68a/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:187:6d33:372b/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:6d:33:69:d0:70:ba:40:e1:da:07:7a:3d:fe:75:f5:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Apr 10 22:04:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=be1055eec204875013b9389b6a2a4a09b8547b73
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:d3:f4:65:6f:ef:b6:eb:0b:51:ff:81:c7:6e:
c9:fd:a4:7e:5a:1f:8e:88:de:95:7c:86:0a:59:a2:
e4:58:71:42:db:2b:14:0a:3d:c6:3b:9c:47:1d:40:
fc:0f:62:02:9c:04:d2:65:3f:eb:ba:4a:28:74:aa:
66:99:a5:2e:bc:ac:bf:b7:73:9e:72:02:77:d0:63:
9c:97:81:df:6b:aa:5f:7d:35:6b:66:2d:45:ce:5b:
e6:6a:a3:ab:82:6d:b3:28:fe:54:3e:4c:26:b0:87:
bc:e9:3a:02:29:86:42:ef:6d:e7:71:05:c1:66:f7:
fb:52:22:35:3e:d2:b9:00:a4:1c:05:e5:7b:58:f2:
8b:65:79:c8:b4:c9:70:02:cc:32:b1:89:0e:64:a5:
54:c8:cf:74:f2:94:46:29:ba:75:02:d8:c1:2b:0a:
0f:f7:ba:77:85:84:07:49:b3:f4:87:6d:74:cf:5f:
eb:3b:8c:20:c9:59:5e:0f:66:fd:71:be:5d:d3:1a:
52:15:f3:d3:76:5c:8c:ce:e7:0e:c2:5c:9a:92:43:
83:01:04:c4:b9:5a:29:50:8e:7a:57:21:21:dd:a6:
08:ef:b3:72:1f:fa:e7:58:09:da:44:08:89:bf:e4:
e9:28:e3:08:93:45:24:5b:cf:23:91:dc:ff:67:f2:
2a:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:10:55:EE:C2:04:87:50:13:B9:38:9B:6A:2A:4A:09:B8:54:7B:73
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/vhBV7sIEh1ATuTibaipKCbhUe3M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
4e:29:c0:62:c9:c0:06:ac:2c:46:86:cc:eb:57:36:30:fd:a3:
cd:af:1b:37:46:90:35:46:b3:96:ae:b9:bd:10:d7:ba:41:a9:
45:8e:52:fa:15:59:2f:aa:73:4e:62:db:90:9e:16:8d:1e:54:
ec:9c:b0:27:88:87:3e:96:0d:41:c5:46:5f:c1:6f:22:f5:ee:
e3:6e:25:33:18:6f:37:74:4d:85:0c:b4:0f:b5:9d:12:17:4a:
c7:08:32:be:c3:f9:3c:70:91:2b:15:bb:15:25:59:78:ed:5e:
61:0f:d6:2d:8c:3e:fc:92:ab:53:be:08:8a:75:cd:ec:46:a3:
fc:9a:94:c4:eb:a3:3e:9c:40:08:81:86:18:a8:e1:13:e0:ff:
47:73:10:bf:b9:81:a1:67:eb:60:36:55:80:86:a5:03:48:bd:
f1:c8:45:0d:5d:62:c8:a7:46:52:5e:d6:16:2a:e3:f0:d2:50:
42:f0:c2:71:4a:ff:79:b2:38:ee:5b:8b:39:3c:0d:d9:5d:ee:
85:70:6b:62:0e:1f:b9:af:db:c3:87:b6:6b:8c:b2:b5:2c:48:
7d:b1:df:f0:bf:49:13:d4:42:a7:95:06:4e:60:b3:ac:4b:ae:
e8:1f:c3:0e:00:fd:af:16:b5:81:98:60:7c:9e:d3:57:83:16:
d3:37:a1:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 3 21:53:16 2025 by rpki-client