Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/vzHcqRENOP3BDDvyf_9VNhnxo7Q.roa
File: vzHcqRENOP3BDDvyf_9VNhnxo7Q.roa (raw, json)
Hash identifier: Cqpk9yL0VJPjmPGO4q3WLmYuYQJGqcSyiOY+ck6lLKQ=
Subject key identifier: BF:31:DC:A9:11:0D:38:FD:C1:0C:3B:F2:7F:FF:55:36:19:F1:A3:B4
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 8AE14CAE
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/vzHcqRENOP3BDDvyf_9VNhnxo7Q.roa
Signing time: Wed 08 Jun 2022 03:13:02 +0000
ROA not before: Wed 08 Jun 2022 03:13:02 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:181:22f:7a99/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2330021038 (0x8ae14cae)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Jun 8 03:13:02 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=bf31dca9110d38fdc10c3bf27fff553619f1a3b4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:9e:6e:67:43:a6:48:19:75:d5:76:a7:50:14:
09:65:85:10:2b:a8:3a:d8:07:3f:99:63:80:f8:08:
16:90:87:62:64:7c:81:ee:96:a2:0d:53:16:69:2d:
d5:47:ee:88:f5:2c:ad:98:6a:60:ab:e4:48:3e:02:
83:ba:91:f5:4d:41:4d:0f:a0:4d:80:e7:a2:05:0a:
52:71:28:61:f3:ac:44:1d:6f:6d:5e:bb:f8:cc:14:
74:74:62:2e:a2:22:66:45:6f:0f:a5:48:b4:bf:bc:
64:1f:23:a0:26:78:cd:0f:9f:e1:a7:e9:bb:ca:ef:
31:a3:10:97:08:28:59:5c:aa:e3:71:60:1c:3f:31:
76:f5:89:b8:37:0a:ac:ee:08:98:37:04:73:66:1a:
5f:cf:27:f2:01:77:11:90:3a:cb:55:a1:78:03:80:
c7:3a:50:a0:a9:2e:61:72:c6:dc:b8:a4:89:7b:9f:
eb:00:fa:14:c0:d6:ed:e9:06:cf:48:2a:f6:95:7e:
3e:0f:f7:39:63:20:17:cb:4d:fa:69:45:06:61:9a:
29:18:d5:19:5d:81:32:c7:4b:c0:46:49:bb:9a:09:
83:ee:08:49:a0:cb:78:11:b3:51:0a:01:9a:68:96:
8c:8a:cc:da:7d:d2:d2:59:08:41:93:88:d2:b9:c0:
09:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:31:DC:A9:11:0D:38:FD:C1:0C:3B:F2:7F:FF:55:36:19:F1:A3:B4
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/vzHcqRENOP3BDDvyf_9VNhnxo7Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
31:35:43:c9:91:16:e8:f3:fb:d2:9a:f4:88:13:a3:86:12:e4:
5c:6b:18:18:3c:35:95:08:d5:cd:d3:41:75:b3:87:58:1e:c0:
b2:f6:3b:61:2b:f0:c4:ca:91:59:6d:76:0a:11:c8:25:af:b7:
cc:ba:4d:e7:f0:9c:48:74:9e:9f:11:9c:e8:0b:59:c0:9c:d7:
51:3a:35:91:e8:0c:e3:73:4f:b3:49:05:e7:cd:c9:81:f2:f8:
ae:98:98:09:53:4d:b9:ea:56:56:4b:ad:78:d9:31:6a:d4:90:
ee:7e:c1:09:a6:9d:89:10:b6:d0:b1:9a:92:93:e0:c9:70:fe:
20:43:3e:82:86:1f:ca:21:a9:79:87:fb:9d:33:71:77:d1:5c:
93:a1:f2:aa:91:d2:cf:ab:78:85:50:8f:30:7d:72:37:bf:86:
60:1b:9a:22:e8:6b:9d:b7:66:5a:e9:44:0e:38:de:ba:57:a2:
30:d4:24:7c:16:c2:63:d9:4d:40:9f:a0:2f:0e:8b:77:08:e6:
2f:bd:9d:87:1f:c1:25:62:72:91:52:11:c1:68:2e:1a:94:d8:
22:00:3d:6f:31:fa:93:84:c3:87:bf:a8:a9:49:f8:f8:d1:cd:
a2:93:b7:58:16:32:09:d9:29:6c:f3:09:58:37:07:a7:d2:55:
cf:ab:e1:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 3 00:37:19 2025 by rpki-client