Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/vjcgIH719nGalaqecjmFloiNMZY.roa
File: vjcgIH719nGalaqecjmFloiNMZY.roa (raw, json)
Hash identifier: XLO9QMLabsmglnCH2nXah04BikyZLCklRCQ7Amfw57I=
Subject key identifier: BE:37:20:20:7E:F5:F6:71:9A:95:AA:9E:72:39:85:96:88:8D:31:96
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 01830CEEB8EF8DD1E6E70835A31C0B9484C5
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/vjcgIH719nGalaqecjmFloiNMZY.roa
Signing time: Mon 05 Sep 2022 09:15:14 +0000
ROA not before: Mon 05 Sep 2022 09:15:14 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:182:3f1d:a803/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:182:7cb2:99d4/128 maxlen: 128
2001:67c:64:ffff:0:182:383f:6b78/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:0c:ee:b8:ef:8d:d1:e6:e7:08:35:a3:1c:0b:94:84:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Sep 5 09:15:14 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=be3720207ef5f6719a95aa9e72398596888d3196
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:58:ba:62:90:c4:c1:ac:b7:27:35:f7:fd:ec:
e2:1b:cd:24:a5:40:01:aa:61:14:3c:a2:b3:9b:44:
1b:e3:13:f8:ab:1d:c5:30:6e:da:2f:9d:79:ef:28:
56:0d:6a:9a:b0:bf:2a:5b:de:81:5c:01:9f:22:c6:
d4:cd:42:5d:ab:ad:80:a9:27:b1:b3:f5:2d:69:dd:
ee:3d:1d:b3:42:5c:cc:d9:51:ad:1c:00:0d:d5:a2:
05:c4:58:9c:79:3e:6d:62:08:75:74:71:0d:80:0b:
08:d0:77:d0:dc:41:4d:78:59:b7:ed:30:0b:2d:c6:
c8:ee:83:5e:bf:94:c9:a4:88:82:30:f8:e7:38:8d:
92:52:85:8a:70:2e:71:18:c1:bb:b3:27:7e:1c:fe:
52:a4:ea:dd:63:3f:32:78:ca:fc:86:97:2a:a5:b4:
66:cf:6e:48:4a:f3:da:8d:b5:d2:58:28:56:83:bc:
67:f8:d8:40:db:aa:ae:4b:05:db:43:67:86:65:d6:
5f:3b:7b:d4:2e:54:fa:1d:b7:31:ba:d3:db:50:d4:
67:cb:f0:cd:df:e5:9c:22:a9:cd:83:92:74:f0:44:
dc:83:f2:cb:bf:63:90:39:9f:52:a8:5d:63:90:74:
41:93:d3:20:0d:cb:a2:fc:96:be:63:1f:74:57:ef:
8a:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:37:20:20:7E:F5:F6:71:9A:95:AA:9E:72:39:85:96:88:8D:31:96
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/vjcgIH719nGalaqecjmFloiNMZY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
a9:0c:59:b9:f1:4d:ff:cf:4b:0e:51:ce:6c:25:85:bd:14:a8:
46:8c:0f:14:b8:89:89:15:b9:b4:65:43:ff:2a:96:e8:2a:63:
ac:1a:90:46:e7:e1:b1:f5:47:cf:c4:33:e3:9f:75:00:ae:de:
0b:ab:02:1a:ab:3b:c9:41:1d:82:2c:3a:a5:de:d6:fb:74:f4:
94:1c:9e:9c:25:24:c9:13:7b:42:0e:41:9a:f0:55:27:c7:07:
4c:b3:8f:04:e3:57:2a:48:61:08:27:9d:ed:6d:2b:e8:93:c4:
b2:ca:10:61:5f:95:40:aa:cf:2f:89:33:db:88:d2:7d:8e:09:
bb:cb:21:29:9c:5a:ef:7c:07:9e:9e:8c:b8:cd:40:eb:cc:68:
06:f6:d0:a1:e1:ec:34:2b:6d:a9:42:10:2d:a3:0b:28:66:48:
19:db:86:bb:ac:d4:5a:7b:06:e0:06:43:eb:b3:0c:55:25:fc:
1f:0d:e3:2e:51:ee:3e:51:f7:26:6b:ca:38:74:86:e2:0f:48:
47:38:02:39:6f:3c:b1:dc:e2:ae:b1:70:13:e4:10:36:09:2b:
f7:bc:3c:be:81:1c:6a:dd:86:e6:69:0a:ab:ec:3f:87:49:c0:
ca:f8:5e:ac:1e:b5:f6:8b:62:9c:01:bf:a6:ab:4f:f1:1e:9f:
6a:b4:6f:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 3 16:23:02 2025 by rpki-client