Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/vr6eR8OeVuJYKL4pwExM7u-9PfI.roa
File: vr6eR8OeVuJYKL4pwExM7u-9PfI.roa (raw, json)
Hash identifier: GZvb4jhEvAWDY1XLFDG6snYOMo7m8A4XSRatVU47G5g=
Subject key identifier: BE:BE:9E:47:C3:9E:56:E2:58:28:BE:29:C0:4C:4C:EE:EF:BD:3D:F2
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0184DB1D1BB8B7DCA31F4F922CC9E468B0BD
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/vr6eR8OeVuJYKL4pwExM7u-9PfI.roa
Signing time: Sun 04 Dec 2022 03:10:28 +0000
ROA not before: Sun 04 Dec 2022 03:10:28 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:db:1d:1b:b8:b7:dc:a3:1f:4f:92:2c:c9:e4:68:b0:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Dec 4 03:10:28 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=bebe9e47c39e56e25828be29c04c4ceeefbd3df2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:c7:ed:b4:52:8a:10:6a:ae:f2:19:a0:40:ef:
35:e7:7f:4b:e4:6d:ac:98:3b:fc:58:5e:bb:6e:f4:
eb:ff:60:9b:c0:e8:e4:83:cd:03:1e:ec:18:6a:2d:
27:d1:59:1e:4c:da:fc:4b:33:5b:90:29:45:cc:e5:
f3:88:64:7a:c3:9d:09:aa:7c:ae:27:03:3e:b4:ad:
93:91:33:9e:a4:0b:92:5b:56:7b:29:f3:aa:83:7d:
cf:16:99:05:f7:b5:79:3f:86:f8:f5:3c:8c:c4:9b:
74:1f:e3:70:84:cc:70:3b:d3:0e:a7:5c:eb:39:ff:
64:6c:64:40:03:68:08:65:ab:4c:32:3d:f8:24:90:
86:b0:f6:32:69:87:cc:cf:39:0b:7b:9d:f0:34:96:
f4:57:15:03:07:a3:1d:f4:22:61:51:98:2b:08:4c:
aa:4b:c7:4a:57:50:8f:27:c9:79:25:b4:bc:31:fb:
42:dd:82:18:07:75:3c:df:a0:77:e1:a6:c9:8d:aa:
8c:3c:b3:fe:a8:ba:a6:e2:21:9c:58:85:af:4d:68:
d0:ac:04:07:ff:5d:4f:e1:a9:f6:4d:62:75:13:05:
c6:12:3f:6f:c0:68:93:fa:78:a5:52:73:ef:1b:3d:
0b:95:a4:d2:18:5a:96:b5:f5:dd:e1:5d:97:4a:d2:
80:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:BE:9E:47:C3:9E:56:E2:58:28:BE:29:C0:4C:4C:EE:EF:BD:3D:F2
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/vr6eR8OeVuJYKL4pwExM7u-9PfI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
82:46:b7:ee:8c:03:da:06:92:0a:72:1c:98:b3:82:25:b8:6a:
9c:e8:bf:9a:3f:80:bc:48:c5:c4:cf:90:3d:7d:da:d9:51:fc:
99:99:81:57:c9:56:f8:64:a8:5e:1f:6c:cd:81:e1:0c:f1:2f:
2f:06:99:75:00:1e:27:2c:f3:bf:3b:53:8c:70:af:36:4f:4c:
90:62:53:ae:1e:d9:d6:c9:80:db:df:19:2c:ca:26:10:79:55:
6d:5b:37:58:da:f5:a1:88:e9:af:8d:b5:63:e9:a0:88:e3:c8:
b0:8f:da:e4:7a:c8:ef:5e:a4:ca:1b:d4:7d:a7:24:a8:c8:77:
27:38:a5:f9:ce:3b:ae:85:ec:f1:15:21:f2:5a:0e:c9:33:8d:
bf:8f:d8:a7:33:62:7c:92:9d:ec:0d:fc:de:8b:ea:07:f4:99:
fa:27:42:4c:7c:d9:c4:c2:f9:01:a3:62:e9:6d:05:4e:ae:08:
01:c3:58:7f:44:03:04:e8:fc:de:57:e7:2a:53:82:27:65:05:
a2:e5:32:70:d0:ae:4a:11:0a:a1:82:e4:18:08:75:4f:9a:9a:
b2:ad:6d:2a:7c:11:07:d5:44:9f:15:96:d8:78:85:1f:70:62:
84:6e:2d:c2:00:46:3f:b7:f9:43:53:6d:e3:39:7b:97:d8:f8:
83:1a:fe:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 17:37:30 2025 by rpki-client