Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/vuJ9dqEF4Wk4bINSem7qpVaNtVk.roa
File: vuJ9dqEF4Wk4bINSem7qpVaNtVk.roa (raw, json)
Hash identifier: astaaNgF7+KsaBPGoVSstXuEcM78scOSf5pzx9Q37Po=
Subject key identifier: BE:E2:7D:76:A1:05:E1:69:38:6C:83:52:7A:6E:EA:A5:56:8D:B5:59
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 01855158A3373EB64A94B361D38E2FB2819E
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/vuJ9dqEF4Wk4bINSem7qpVaNtVk.roa
Signing time: Tue 27 Dec 2022 02:10:41 +0000
ROA not before: Tue 27 Dec 2022 02:10:41 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:185:3dcc:d8f/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:51:58:a3:37:3e:b6:4a:94:b3:61:d3:8e:2f:b2:81:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Dec 27 02:10:41 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=bee27d76a105e169386c83527a6eeaa5568db559
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:4b:a4:0b:b0:12:34:6d:4a:33:3e:8e:49:a7:
1d:3d:8e:b5:d7:1e:84:fd:8a:81:43:bb:ad:33:39:
3d:b9:1b:a1:02:98:c2:7d:49:71:45:d1:fd:15:de:
24:19:be:90:ac:e8:5a:7f:b7:fb:d2:53:99:9b:71:
42:40:c9:52:0f:a6:45:9a:b7:71:8b:9d:83:72:8b:
45:55:3d:37:f6:cc:ba:16:8e:38:0c:ef:0d:db:1a:
ef:e3:2f:38:85:34:b6:31:8b:5c:19:08:d5:d4:49:
64:4e:b8:69:82:94:bc:79:f7:2f:d0:e8:e9:8c:0e:
4b:5a:7c:0d:80:91:fc:29:98:5b:89:37:a4:34:7d:
d2:37:9a:0b:fb:0b:ee:86:c5:1d:42:8d:fe:1a:77:
a5:59:33:e7:7e:1a:be:8d:76:c0:6f:6e:78:0a:86:
8f:1f:54:da:3a:d1:2c:cf:74:ff:3a:93:8a:9c:30:
cf:83:57:17:09:fa:f0:66:aa:47:9c:d4:08:e9:2a:
5c:05:ab:c9:c1:78:9a:1f:69:69:9e:3e:2f:25:d4:
c0:b6:50:39:9c:22:68:44:b2:19:9b:3f:b3:f3:85:
4f:f5:04:5e:23:cd:d0:9a:0c:68:e2:a1:7e:0e:fa:
f7:39:4d:90:ec:68:64:7f:e7:47:e3:7a:fd:b0:2d:
13:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:E2:7D:76:A1:05:E1:69:38:6C:83:52:7A:6E:EA:A5:56:8D:B5:59
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/vuJ9dqEF4Wk4bINSem7qpVaNtVk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
1d:25:d1:f0:cf:5d:0e:69:1f:b4:2e:ab:e3:7a:7e:f3:24:df:
71:37:00:e5:0f:92:f6:d6:ac:c1:27:0a:64:72:be:d8:7b:88:
8f:57:6d:80:62:6d:22:9b:ad:74:da:43:b9:ae:a2:40:f2:26:
a7:37:ae:62:dc:a1:71:d1:bb:7d:ef:a9:62:b2:83:9d:2b:85:
91:cb:f9:8c:b6:8d:5d:ec:56:92:76:eb:2c:e1:f5:91:43:48:
1f:97:06:2b:3a:a2:87:66:ce:b8:c9:62:8d:0e:aa:1b:33:33:
fb:52:37:f0:4f:35:ff:ff:79:e2:99:d4:f9:e5:2f:1d:33:d1:
47:35:f5:a0:52:d1:43:dc:be:17:28:9d:53:a3:8b:67:9f:b4:
04:9d:23:f4:7e:f7:d0:fa:dc:69:6e:2e:a2:17:9a:57:35:84:
fc:d0:56:02:c7:1d:83:1e:82:41:9d:f0:2a:9a:32:c1:5a:5d:
9f:6a:7f:d2:ec:cd:70:bd:86:41:91:32:d9:6d:f7:48:7c:36:
a3:bb:e1:e3:6c:75:67:43:4e:4f:d4:49:b4:30:03:5e:db:75:
4f:35:f5:dd:a8:e2:fb:3f:09:af:29:a0:ca:8f:07:67:53:d2:
90:2a:fa:4d:e4:17:f1:59:f0:3f:13:7e:95:27:0b:94:d5:4d:
64:00:3b:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 13:40:34 2025 by rpki-client