Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/vmvEJukstGMD1BzJgQcNFbGLKHw.roa
File: vmvEJukstGMD1BzJgQcNFbGLKHw.roa (raw, json)
Hash identifier: OXrmULwDADhOUtH2m7ipvGGRJr9SxQPVFvepvm6k/yI=
Subject key identifier: BE:6B:C4:26:E9:2C:B4:63:03:D4:1C:C9:81:07:0D:15:B1:8B:28:7C
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0185082BE85247385CE853B0E2B109D998C8
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/vmvEJukstGMD1BzJgQcNFbGLKHw.roa
Signing time: Mon 12 Dec 2022 21:09:33 +0000
ROA not before: Mon 12 Dec 2022 21:09:33 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:08:2b:e8:52:47:38:5c:e8:53:b0:e2:b1:09:d9:98:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Dec 12 21:09:33 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=be6bc426e92cb46303d41cc981070d15b18b287c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:e2:1d:0d:c3:91:a4:00:9a:cb:c0:e5:74:28:
a8:a1:23:8d:70:ab:95:c4:39:19:f4:9a:13:94:d9:
f1:e9:f9:6e:60:f9:80:a3:23:03:cd:de:ad:d4:a2:
3f:53:7a:a1:51:bf:70:1b:20:50:be:29:e8:2d:ab:
83:0f:4c:d0:e0:72:9b:a8:cd:ea:1b:6c:a5:04:4e:
d6:83:50:92:57:3d:76:e4:a8:f9:31:f4:1d:35:ba:
a4:b7:b5:cb:96:9e:8c:0b:71:55:e2:62:1a:e3:ce:
fa:23:78:9d:a8:95:ca:54:a8:c1:78:cb:78:58:54:
90:fd:51:bc:ff:a8:14:ec:a9:49:f0:84:ab:5a:a9:
cd:51:16:95:b4:93:28:71:9f:3c:fc:ff:f1:f9:58:
e4:55:2b:c9:59:db:cc:50:7f:b3:ae:30:bc:40:78:
ce:38:c7:46:17:91:21:a7:e0:53:fa:f0:c2:d2:30:
f4:73:3b:14:b3:c2:e7:f7:e5:7d:08:69:56:d8:1a:
92:f6:34:f3:1e:a9:f0:c4:6d:2b:33:f3:2e:8b:8f:
4b:24:98:e8:51:db:54:b4:a0:28:d4:d7:96:8b:3e:
8d:32:a1:5d:d6:63:77:14:46:e9:48:7f:c1:8f:77:
82:3f:8b:21:f5:2a:73:7b:56:ad:de:8d:3d:62:17:
2e:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:6B:C4:26:E9:2C:B4:63:03:D4:1C:C9:81:07:0D:15:B1:8B:28:7C
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/vmvEJukstGMD1BzJgQcNFbGLKHw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
a8:4a:7f:f4:c9:40:7a:d4:0e:30:44:c0:d8:f1:9f:fe:c2:11:
3d:af:ad:a1:7c:1f:67:ba:d1:c8:68:3d:34:c2:e2:ef:f3:91:
db:09:24:19:cd:d7:0e:06:6d:73:d4:40:0d:b6:ac:f7:23:62:
4b:b5:35:99:9e:a0:02:2f:e2:f2:88:a3:70:d7:3f:d5:fb:a2:
22:2e:88:14:07:a7:f1:71:74:0a:96:c4:42:51:c8:44:57:d5:
0d:47:a7:d4:78:83:a1:08:5c:f9:f7:eb:24:43:a0:8a:cd:94:
dc:9b:ec:b6:f1:62:a2:41:13:41:28:85:16:83:7f:9e:31:e7:
ce:23:61:5c:3e:80:e1:a9:a4:8a:96:8c:61:5e:46:b5:0a:71:
ae:78:f5:4d:07:d6:81:29:5b:09:6b:a0:52:c9:ac:71:ba:5a:
89:35:f1:5a:26:d7:5d:b7:b0:0e:cf:75:64:26:6d:6e:ae:5e:
d4:2c:46:9e:7a:bd:d1:eb:cd:9c:2e:13:c9:a1:29:a6:bc:e2:
b3:0a:a1:17:56:a3:a5:b3:55:08:c1:53:c6:b3:a2:eb:17:9f:
92:78:25:b2:c4:53:5a:cc:fb:90:2d:c8:9a:4b:d3:e4:31:ec:
41:a4:8a:74:b3:ab:07:d8:4c:a2:37:91:e4:94:5e:f5:ad:50:
70:45:6b:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 20:06:15 2025 by rpki-client