Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/vrFHCRdenMzhUqY7ivGYNpc1ylo.roa
File: vrFHCRdenMzhUqY7ivGYNpc1ylo.roa (raw, json)
Hash identifier: D4xMDM2f/cEXkhNc1IYZHCqrdx8FnqtFp87ChwVDVsE=
Subject key identifier: BE:B1:47:09:17:5E:9C:CC:E1:52:A6:3B:8A:F1:98:36:97:35:CA:5A
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 70A49E05
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/vrFHCRdenMzhUqY7ivGYNpc1ylo.roa
Signing time: Tue 08 Mar 2022 01:10:45 +0000
ROA not before: Tue 08 Mar 2022 01:10:45 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:17f:1bf4:40b5/128 maxlen: 128
2001:67c:64:ffff:0:17f:20ac:a2bd/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1889836549 (0x70a49e05)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Mar 8 01:10:45 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=beb14709175e9ccce152a63b8af198369735ca5a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:39:5a:17:12:d4:e2:c8:ef:df:6c:c3:08:26:
96:7f:43:3e:7e:d1:44:84:19:37:ee:c7:f8:2b:84:
21:c3:14:5d:5d:04:8d:78:ae:47:04:a8:8a:19:f8:
55:c9:e1:7c:c7:22:fa:84:4b:02:93:f5:da:b1:e9:
d0:b5:15:ff:08:24:88:cb:05:56:94:1b:fb:d5:84:
26:3e:dc:8b:c2:14:50:bd:a8:aa:d5:24:52:72:0a:
de:8c:0d:f8:72:1e:65:4e:42:1c:39:9c:f4:ae:2d:
69:68:05:48:e6:72:ae:68:00:e6:f8:93:32:68:9c:
28:d6:b7:68:85:1e:40:45:f8:2e:1f:2d:ac:24:df:
3b:9f:25:1d:86:af:3f:0f:2a:42:e4:9c:6b:b3:2c:
7b:ad:37:89:92:17:cc:36:fd:a6:85:cd:1b:3f:b8:
55:47:63:0e:e8:f5:d3:87:f0:73:4a:fb:d7:9d:cb:
42:76:58:42:50:dd:75:c4:66:05:8f:50:0f:06:05:
74:c2:5a:9e:5b:19:0c:71:f0:7d:d2:5d:42:e0:af:
de:73:56:df:93:66:55:2a:95:4d:bf:d8:ef:d6:76:
58:d6:2c:69:a6:63:a1:35:d4:b5:99:6c:73:9e:17:
59:9f:36:91:54:d3:30:87:dd:07:02:d1:39:0a:2e:
08:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:B1:47:09:17:5E:9C:CC:E1:52:A6:3B:8A:F1:98:36:97:35:CA:5A
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/vrFHCRdenMzhUqY7ivGYNpc1ylo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
68:82:e9:e2:13:9a:c5:b7:c6:27:af:ee:ea:7b:c4:69:a5:ab:
d3:9d:7a:42:e1:aa:24:4e:19:79:ef:c5:fe:22:5f:09:62:1d:
c6:ef:36:26:20:81:f5:2f:f6:5d:14:ae:04:5e:4a:7d:8c:57:
0b:84:03:7b:48:aa:d4:f5:71:46:1f:a3:07:c7:36:8b:71:a1:
32:9a:98:bc:7a:96:f0:cd:c4:8c:05:06:46:51:d1:9a:86:7c:
cd:1d:77:67:33:eb:97:87:a2:64:a6:97:ab:5a:c5:f9:9d:90:
41:d8:e3:26:d8:2e:98:9a:7e:57:0b:bc:a4:8d:bd:e6:48:03:
82:c8:30:19:d1:c5:4a:58:22:c0:99:a1:93:68:75:5e:39:f6:
3a:5e:ca:2f:10:fc:15:2c:aa:ff:32:59:4c:45:86:45:99:9a:
e2:58:9e:97:59:2a:1f:25:b1:88:a3:75:c0:e8:79:ce:78:df:
73:e4:9b:04:1b:9d:95:9d:fc:9b:a3:b1:9d:99:e4:8a:fc:77:
4a:fc:88:98:90:8b:de:4c:8a:cd:69:38:a5:08:9e:88:4e:ef:
90:b4:d3:f1:8f:6e:d0:47:e8:94:1f:0b:1a:38:3d:4e:c9:aa:
b1:55:65:e9:2d:7e:09:14:7b:23:74:ff:06:b3:80:e7:d2:bf:
8f:49:78:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 00:43:27 2025 by rpki-client