Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/vvM1xtN77wvShjQcisb13-xxyxI.roa
File: vvM1xtN77wvShjQcisb13-xxyxI.roa (raw, json)
Hash identifier: 0RbOJAodRCndMfldS5B05Sp4wxAQamkkbjJOWtmrDD0=
Subject key identifier: BE:F3:35:C6:D3:7B:EF:0B:D2:86:34:1C:8A:C6:F5:DF:EC:71:CB:12
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0188E36C2A0B949E30DAC93A561C6E4AE4DF
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/vvM1xtN77wvShjQcisb13-xxyxI.roa
Signing time: Thu 22 Jun 2023 14:04:56 +0000
ROA not before: Thu 22 Jun 2023 14:04:56 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:188:5fe2:b396/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:187:4695:a68a/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:188:7858:a003/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64:ffff:0:188:e36b:985b/128 maxlen: 128
2001:67c:64:ffff:0:187:fa9a:b088/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:187:b2b8:a7dd/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:e3:6c:2a:0b:94:9e:30:da:c9:3a:56:1c:6e:4a:e4:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Jun 22 14:04:56 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=bef335c6d37bef0bd286341c8ac6f5dfec71cb12
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:dc:3f:4b:94:22:75:46:4d:80:50:5e:f5:e9:
57:be:42:dd:75:20:33:01:63:9f:6c:35:bf:53:0f:
40:eb:02:35:ba:22:43:05:f1:17:f5:cb:76:f9:a7:
ed:82:a1:5a:5b:cc:00:e0:dd:3c:b7:8f:99:da:59:
3c:11:d1:9c:af:31:5f:5d:e3:f8:71:80:b1:2b:5d:
58:0c:d2:38:78:02:a5:37:11:b4:4b:bb:7f:5e:c0:
59:77:ba:63:51:ef:03:87:d8:41:f5:bf:d4:62:f5:
10:c6:b0:1d:6e:85:6f:89:c2:e5:83:2e:b7:86:2e:
bf:37:71:96:c3:8e:3c:1c:c3:cc:36:7f:d9:67:84:
29:08:c6:86:99:91:94:30:54:2c:72:96:66:45:38:
46:b9:31:ec:a9:12:f7:ce:e9:2a:34:f7:60:35:a3:
39:70:aa:ad:8e:c4:84:c2:ea:06:86:bf:04:73:ab:
9a:77:9a:88:ba:b1:1d:ac:9d:01:04:19:b6:5c:f8:
77:3a:cf:60:ee:9c:26:33:fd:f0:cd:a4:ab:4f:d8:
18:e2:ae:08:cf:30:85:4d:48:02:3d:18:cc:c1:23:
be:7f:f0:2e:db:05:6f:67:38:86:ed:07:f2:e6:d9:
89:54:36:83:3a:3b:6b:da:dc:55:0d:ec:d0:a9:d9:
cd:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:F3:35:C6:D3:7B:EF:0B:D2:86:34:1C:8A:C6:F5:DF:EC:71:CB:12
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/vvM1xtN77wvShjQcisb13-xxyxI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
7d:e2:22:92:63:25:8b:f8:be:de:79:95:d2:dc:1e:09:f2:26:
5b:e9:6e:b4:94:59:21:7e:82:e6:97:b4:88:0a:1a:bc:6c:e1:
49:55:0c:25:b7:45:11:3f:5e:3e:0a:9f:3b:14:b6:4b:d9:ac:
5f:d0:b7:2d:2f:2e:12:da:5e:6f:a1:85:7d:d1:4d:37:1a:a8:
2f:35:24:d0:70:6b:d0:5c:e5:c4:77:6f:ec:6e:a0:7f:6f:fc:
09:11:73:94:ac:b1:3f:8c:e4:37:ef:a8:de:87:4b:70:10:61:
6e:9f:6a:fb:fb:80:be:15:e1:b3:4e:dc:97:14:93:4b:ff:0d:
93:99:d0:d1:8f:6e:55:80:b0:87:7e:3d:21:66:ae:2d:e6:ed:
eb:65:d3:e9:d1:30:a0:6f:86:07:c5:10:e6:7f:f4:8c:22:12:
e0:8f:1f:f9:af:c9:fa:db:34:68:31:0e:d0:02:07:87:87:78:
6e:ff:5c:a3:ec:8e:61:3a:be:81:33:ce:63:86:44:6b:38:a5:
8a:8d:12:00:db:eb:0b:49:72:da:60:3e:72:47:04:61:91:58:
e6:e8:48:f0:1e:0d:2d:76:b3:be:fb:8e:da:76:42:dc:b2:c1:
96:fa:ff:bb:03:88:1e:d7:c9:7b:90:c3:10:99:2c:1a:b4:24:
5a:2a:90:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 15:37:54 2025 by rpki-client