Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/vmNHhJmdU2L1rj-hAbbSpH4IDFk.roa
File: vmNHhJmdU2L1rj-hAbbSpH4IDFk.roa (raw, json)
Hash identifier: neCQinmPmedRdy9SIxvvFglb16FsWSFHJuo6VS6K0hE=
Subject key identifier: BE:63:47:84:99:9D:53:62:F5:AE:3F:A1:01:B6:D2:A4:7E:08:0C:59
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0182B298CB63DE09AFA53E33A91443E9D947
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/vmNHhJmdU2L1rj-hAbbSpH4IDFk.roa
Signing time: Thu 18 Aug 2022 20:15:34 +0000
ROA not before: Thu 18 Aug 2022 20:15:34 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:182:3f1d:a803/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:182:7cb2:99d4/128 maxlen: 128
2001:67c:64:ffff:0:182:383f:6b78/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:b2:98:cb:63:de:09:af:a5:3e:33:a9:14:43:e9:d9:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Aug 18 20:15:34 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=be634784999d5362f5ae3fa101b6d2a47e080c59
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:ee:70:4b:e2:74:3f:71:52:97:ad:6a:24:19:
98:ea:f8:d6:cd:fe:fd:46:f5:3b:86:f3:e5:08:75:
e4:9b:83:af:01:97:6d:3f:b7:b2:44:af:05:15:5f:
de:a8:3d:d2:4f:bd:6b:20:76:eb:a4:e6:bd:5d:84:
4f:03:f1:5e:4a:a1:14:3b:36:ee:a1:6a:3a:97:90:
6d:3e:b9:f7:bc:4b:52:d0:47:7c:d8:62:c5:73:ce:
a0:1d:4a:00:c3:3b:39:c6:dd:b0:0b:50:cb:65:76:
03:ed:55:c8:fc:fb:e8:a6:b3:a9:f9:45:13:dd:ad:
17:c5:aa:30:91:86:7e:52:ab:a9:ba:29:93:d5:be:
88:e8:f5:c6:c8:ec:5e:62:1c:15:0e:fc:d5:75:f6:
cd:ec:6b:03:64:57:4e:d3:3a:71:3f:7f:ba:ed:ba:
f8:c1:b2:ec:ce:ed:ce:11:af:1f:96:23:27:4b:62:
86:05:22:67:b7:1a:78:1d:23:7d:56:9f:48:c0:a2:
6f:1a:27:98:9e:bc:2c:db:26:74:47:b8:a1:de:5d:
ed:bf:8a:ad:84:e3:e9:bf:5c:6a:bd:6d:91:bb:c5:
8a:54:c3:39:78:b3:4f:ce:8f:5b:e1:a7:3b:ac:15:
e2:d4:62:a4:67:97:92:57:af:22:fd:37:3b:7e:e0:
1b:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:63:47:84:99:9D:53:62:F5:AE:3F:A1:01:B6:D2:A4:7E:08:0C:59
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/vmNHhJmdU2L1rj-hAbbSpH4IDFk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
55:03:6d:5a:86:a5:bd:0f:bf:f2:20:16:e0:4d:59:2b:d4:e7:
44:25:b3:d5:c1:fe:37:c0:0c:78:5c:00:6d:c5:13:72:ad:b9:
fd:f8:9e:18:46:95:73:67:be:00:ac:10:63:1c:a1:74:ab:3a:
46:80:4f:0f:cd:66:5c:d6:28:f4:02:7b:38:2f:7b:ab:2a:8d:
27:4d:dd:b7:81:36:8c:36:09:91:66:d5:e7:e0:b8:65:c7:a0:
bb:a3:f4:64:3b:78:e3:ed:bd:68:fc:03:81:9f:38:2f:f4:79:
35:cc:27:76:97:97:37:05:61:19:b2:29:8a:0f:32:73:6e:03:
bf:46:80:99:8e:04:f9:ff:db:b6:8f:d2:aa:3e:fa:c9:d5:9f:
83:88:e9:c6:d8:08:5f:22:86:b8:a0:ac:1a:c4:9a:ae:27:0e:
86:8d:6c:ab:28:28:f9:37:c7:ae:9d:a2:70:25:b5:3e:6b:31:
a7:99:70:b5:f1:d4:80:e3:29:6a:3d:5a:7e:3c:f8:68:8c:60:
80:fc:1b:3f:f7:8b:e7:0c:92:d2:81:28:92:5f:e3:5e:ff:11:
2d:fa:ba:b7:8a:fb:58:f6:e5:11:67:3b:91:a1:c7:0d:ab:17:
ed:b9:a0:8e:3d:6d:5e:ec:3c:fb:82:9c:2c:08:36:2e:9e:06:
a8:a8:9f:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 17:36:41 2025 by rpki-client