Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/vhXp8P4Ku3G4uyQbliqsnHPKaIY.roa
File: vhXp8P4Ku3G4uyQbliqsnHPKaIY.roa (raw, json)
Hash identifier: 0t2PuwVp/xZUmxInOLnOpFQVAAJc3Pp/jNpHIL3hsTI=
Subject key identifier: BE:15:E9:F0:FE:0A:BB:71:B8:BB:24:1B:96:2A:AC:9C:73:CA:68:86
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 018705D0DF18E9C7905E9D9D18CEF12E1EB8
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/vhXp8P4Ku3G4uyQbliqsnHPKaIY.roa
Signing time: Tue 21 Mar 2023 20:16:27 +0000
ROA not before: Tue 21 Mar 2023 20:16:27 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:05:d0:df:18:e9:c7:90:5e:9d:9d:18:ce:f1:2e:1e:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Mar 21 20:16:27 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=be15e9f0fe0abb71b8bb241b962aac9c73ca6886
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:f5:be:bb:af:a2:a9:67:f5:8d:82:f7:b4:06:
cf:fc:7f:f9:a2:a8:21:ae:5c:d2:4f:29:6c:76:1d:
c6:0a:79:b4:a6:8c:86:cf:5c:b3:5b:bd:ff:d4:b0:
8a:e7:08:89:74:8a:f1:00:48:90:71:a0:b5:73:fb:
5f:8b:d5:a9:79:11:e1:8e:dc:21:ac:fb:a4:60:b6:
a4:69:13:c5:10:17:d7:05:69:31:48:07:c7:0c:75:
52:a7:74:8f:e5:da:44:19:13:ce:82:2f:ef:54:69:
01:e0:11:6d:43:a5:72:c2:b7:2a:64:e5:91:34:db:
10:10:5c:ee:5d:bd:33:06:dd:fd:6f:45:c5:be:02:
c8:e6:7b:98:2b:74:98:12:c9:3d:f4:ec:3b:93:c4:
fb:6c:5d:65:0a:25:0b:cc:9e:fa:72:ef:aa:86:83:
62:6a:73:fe:a0:7c:7c:62:78:99:8a:41:33:4e:4d:
1c:22:9c:37:3e:c7:81:c6:4e:9f:6e:a6:98:ba:c6:
5c:bb:5b:2d:de:a3:22:00:cb:a8:99:47:00:1e:66:
b4:e3:4a:65:66:74:dd:63:e6:0b:a7:10:a3:06:3a:
2d:52:0c:2d:ac:8c:40:b7:de:c1:7c:87:79:6f:71:
5a:cc:81:57:57:c7:5f:a8:c6:d4:d2:6c:bb:d3:d2:
0d:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:15:E9:F0:FE:0A:BB:71:B8:BB:24:1B:96:2A:AC:9C:73:CA:68:86
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/vhXp8P4Ku3G4uyQbliqsnHPKaIY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
8c:5a:af:e5:7d:b7:b2:ee:00:3e:96:fd:8a:fc:6a:54:5b:28:
94:51:ae:2f:bb:98:70:90:06:e9:aa:90:d5:2e:c1:20:4c:e8:
1f:4d:e1:77:1e:70:ff:4d:c2:b3:f5:36:6c:3e:04:c5:1f:03:
2c:4e:48:f1:98:9b:73:b6:39:14:51:49:d5:16:f2:ff:17:c5:
2d:d7:89:82:ac:47:4c:8c:ca:b7:07:4f:e7:4b:90:dc:a9:87:
eb:30:fc:56:17:45:7f:cb:d2:28:49:27:6c:a4:a1:df:02:94:
ef:d5:db:1b:21:61:19:13:49:5d:14:bc:dd:0c:e8:e2:c6:09:
45:de:6d:02:11:38:fb:39:9f:8e:c7:11:76:1f:5a:9b:e0:9d:
d9:71:e4:43:40:0e:b6:1e:ed:27:6e:16:67:2e:e4:08:c2:d1:
ea:42:0e:c0:1d:54:2a:8e:b3:0e:a9:2b:ec:1b:f6:ca:29:e7:
35:fb:4e:a8:fa:76:ec:1e:d4:37:52:45:05:c2:ed:96:cf:8a:
b3:89:fc:c7:5a:90:61:48:85:b9:62:8c:e5:db:65:25:93:ea:
a9:a7:d3:92:95:a3:75:c9:e3:97:d2:cb:f0:8a:7f:31:bd:c2:
ff:83:35:c7:da:61:15:b8:f6:c6:26:3d:ca:0d:76:90:cd:c9:
89:ad:a5:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 22:33:40 2025 by rpki-client