Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/vrz_LHgluzYQ6UWHsuaC4q8sazY.roa
File: vrz_LHgluzYQ6UWHsuaC4q8sazY.roa (raw, json)
Hash identifier: kBzzd6sfmFQ5fad9MHO9me7+q3rcfALX/fEw6qudVt8=
Subject key identifier: BE:BC:FF:2C:78:25:BB:36:10:E9:45:87:B2:E6:82:E2:AF:2C:6B:36
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 6A71B801
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/vrz_LHgluzYQ6UWHsuaC4q8sazY.roa
Signing time: Mon 14 Feb 2022 04:08:59 +0000
ROA not before: Mon 14 Feb 2022 04:08:59 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1785837569 (0x6a71b801)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Feb 14 04:08:59 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=bebcff2c7825bb3610e94587b2e682e2af2c6b36
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:86:21:aa:7e:ae:62:cc:8d:aa:dc:a1:41:17:
ba:17:16:47:56:e6:0c:b2:26:0f:76:ac:00:b1:54:
d0:ae:2c:99:f4:95:c3:b0:44:1f:52:c9:f8:82:3a:
ed:40:51:89:a3:64:1e:dc:c8:95:9d:97:3e:8c:fb:
c0:2d:94:66:f7:08:9f:0a:5b:60:c2:f3:d9:14:0b:
60:22:90:76:9b:4f:88:00:89:ac:fc:2e:d9:f4:ec:
c1:06:fa:fb:50:cf:90:02:07:3c:fd:60:a0:61:9e:
bb:0a:ae:ff:5a:63:b2:bb:12:0b:f9:74:84:91:22:
c2:47:7b:e3:48:b8:a1:0b:8f:9c:81:86:9f:a1:a4:
bc:7d:af:e1:e8:3b:80:46:24:32:87:ee:e3:cc:87:
18:94:11:c3:c0:16:97:cd:42:75:68:80:9f:e3:0e:
4d:f9:8c:95:89:fa:7c:cb:04:a1:b8:cb:41:59:b0:
5d:b0:a9:6c:90:29:56:7e:9f:65:c4:38:f2:91:84:
3d:b6:36:e5:a5:c1:48:ab:70:5f:94:eb:b0:f1:71:
0f:f0:48:09:33:15:3a:11:8c:bb:60:4f:60:76:ea:
cc:ba:7e:72:9b:9d:db:83:6a:96:f7:fe:e8:22:d1:
d4:d4:e3:29:17:b5:a6:56:2b:e1:0d:75:f1:b5:95:
a2:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:BC:FF:2C:78:25:BB:36:10:E9:45:87:B2:E6:82:E2:AF:2C:6B:36
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/vrz_LHgluzYQ6UWHsuaC4q8sazY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
2e:1e:8b:33:08:30:a0:60:66:47:24:a0:1a:2e:51:6f:42:79:
46:d5:82:38:c0:7e:9d:d3:23:b7:93:67:13:ca:a4:72:27:99:
69:d4:4c:e5:9f:cd:c2:64:7c:84:b6:5b:af:b0:02:25:6e:8a:
c6:ef:2d:61:d4:53:62:80:32:f1:32:7c:56:fd:09:cb:0d:0d:
ac:55:ae:b7:ec:ed:5b:f3:04:45:a5:6f:1b:19:80:4d:ea:b1:
3f:f8:e1:df:e0:6a:91:2f:4d:d0:d5:a2:7a:f5:f7:24:3d:ac:
82:d3:c8:9e:8c:84:7d:11:c5:f1:cf:fc:76:b9:68:97:0d:6c:
df:4f:c3:9b:a3:25:5e:a3:1e:c6:03:e5:cf:a8:08:b0:35:bc:
60:f7:08:95:4b:05:98:c1:aa:53:8d:20:e0:86:4d:35:2f:8e:
a6:72:2c:bb:1e:d4:8f:c9:06:76:94:02:13:c6:37:c5:17:de:
6d:2a:96:0f:fc:19:4d:90:57:4b:76:61:83:1f:c4:13:74:af:
88:8c:be:31:98:58:3a:97:5f:02:fb:6c:76:0b:c9:6c:88:cf:
86:7e:54:5a:7d:4c:22:d2:fb:1c:0e:51:b6:20:6a:ac:fb:59:
2a:3e:14:b1:51:a1:63:8f:10:5e:dc:20:25:0b:ec:5b:4f:a0:
28:b1:26:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 4 11:36:28 2025 by rpki-client