Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/vtSuRP3s7qQSTOvkgsEeacta6YY.roa
File: vtSuRP3s7qQSTOvkgsEeacta6YY.roa (raw, json)
Hash identifier: gxrJZbhPyBIK8JQxOE5pXRzkAJ93JSJAp5yH5P3LfZQ=
Subject key identifier: BE:D4:AE:44:FD:EC:EE:A4:12:4C:EB:E4:82:C1:1E:69:CB:5A:E9:86
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0186EA58B4FFDBB6603F3456F05348946534
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/vtSuRP3s7qQSTOvkgsEeacta6YY.roa
Signing time: Thu 16 Mar 2023 12:15:27 +0000
ROA not before: Thu 16 Mar 2023 12:15:27 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:ea:58:b4:ff:db:b6:60:3f:34:56:f0:53:48:94:65:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Mar 16 12:15:27 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=bed4ae44fdeceea4124cebe482c11e69cb5ae986
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:fc:7a:da:a4:f2:a4:4b:09:34:7c:29:38:86:
54:fa:b9:18:5c:c0:9d:0f:69:80:71:bd:71:cd:4f:
c9:83:2f:fb:41:f0:78:5d:35:39:53:e3:ad:6a:bb:
b4:5d:60:85:25:8e:34:df:7b:18:bc:52:0b:d9:fa:
78:55:9d:ba:42:4c:1b:43:f6:4f:3a:f5:22:38:0d:
55:70:41:7b:2a:42:5b:ca:07:14:3c:a5:49:ad:5a:
b6:00:0e:cf:a2:c4:d9:60:57:7a:23:8f:43:6b:9e:
7a:bd:2a:cc:29:7a:59:c8:ee:19:84:7b:4d:11:e7:
3e:45:42:fd:02:52:29:87:fc:ce:de:66:a5:83:86:
af:d7:51:52:91:c6:4b:6c:5a:0c:46:a5:3c:4c:34:
3b:d2:c9:a4:6b:19:e1:aa:6a:9b:96:7e:76:43:6e:
2f:c8:8e:c9:7f:3e:0e:bf:63:96:94:3c:f7:60:90:
2e:b3:bb:b7:bf:e3:98:a5:2e:05:db:b3:28:28:af:
90:b2:74:62:2c:d6:70:d3:97:fb:e5:17:eb:f6:55:
ba:30:92:9e:cf:7a:bb:88:0b:47:50:48:c1:25:0a:
32:f7:9a:de:e9:19:6e:a6:94:4d:06:9f:3e:d7:06:
a5:36:10:21:61:18:ce:18:11:3c:b8:08:85:9f:b7:
ba:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:D4:AE:44:FD:EC:EE:A4:12:4C:EB:E4:82:C1:1E:69:CB:5A:E9:86
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/vtSuRP3s7qQSTOvkgsEeacta6YY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
7a:5b:9d:6d:2d:6f:9b:a3:d2:09:cc:c0:99:21:5e:bd:3b:87:
6d:57:44:d1:22:4b:45:9c:70:69:e1:56:66:01:09:ff:07:a0:
77:20:a4:81:04:be:e4:09:b3:31:81:0e:74:52:e9:81:b5:4d:
e3:dc:71:8e:e6:e9:58:7c:8f:a6:fb:63:cf:22:49:77:ce:4c:
30:f9:5a:b6:ff:1c:2e:3d:4c:e4:42:11:eb:ff:af:0b:b2:f4:
dc:3a:2e:78:cb:2d:12:24:79:d4:b4:c6:54:77:93:0c:07:51:
ab:6a:9e:82:0c:73:40:f2:80:1b:34:f7:20:1d:11:32:83:9c:
45:55:9f:61:74:da:c7:a5:8c:e6:d4:5c:fa:8c:06:53:ee:eb:
91:25:27:a1:79:ae:92:68:25:4c:da:e9:2b:a0:cd:7b:9d:6f:
8c:92:6d:32:9d:c4:37:93:3a:bd:71:8e:fc:2d:3c:bd:c7:b8:
e7:08:18:8e:14:fb:cc:84:dd:08:87:ec:c3:25:41:dd:57:1e:
ce:21:9f:3e:25:6b:73:a8:38:71:ce:74:ad:dc:de:5d:1a:f0:
6d:9e:6d:8a:c5:44:50:e9:5e:3f:23:b1:73:02:53:8e:01:20:
84:8b:10:59:ce:c3:90:93:63:ee:dd:f8:44:a5:fa:71:dd:80:
8d:34:13:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 03:24:27 2025 by rpki-client