Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/VD051T-uRuazFC6c4uNBOMaWEo8.roa
File: VD051T-uRuazFC6c4uNBOMaWEo8.roa (raw, json)
Hash identifier: e0AB9lrV/53oZgHY4TTpyvrzEQCAe2ZIjQdPr+huRQs=
Subject key identifier: 54:3D:39:D5:3F:AE:46:E6:B3:14:2E:9C:E2:E3:41:38:C6:96:12:8F
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0184E3456D3D6A31CA3B9AF3A0FD169C4922
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/VD051T-uRuazFC6c4uNBOMaWEo8.roa
Signing time: Mon 05 Dec 2022 17:11:28 +0000
ROA not before: Mon 05 Dec 2022 17:11:28 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:e3:45:6d:3d:6a:31:ca:3b:9a:f3:a0:fd:16:9c:49:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Dec 5 17:11:28 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=543d39d53fae46e6b3142e9ce2e34138c696128f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:df:22:4b:9d:1a:fe:e3:3b:30:19:08:8e:1a:
29:a1:50:ea:f9:db:fd:9e:5c:67:aa:b6:db:4d:30:
5e:66:42:50:c2:81:36:0c:19:ce:6f:b1:10:e8:02:
d8:4c:8e:a1:76:d8:97:14:48:c7:ac:c9:79:03:68:
52:d3:7f:18:ab:7f:03:64:46:eb:5d:72:b1:d9:4a:
a4:02:d6:fe:0c:48:39:da:c2:b4:61:d9:fb:41:74:
0f:97:77:33:05:b0:9e:ea:c0:08:b1:f8:3e:fd:e7:
5f:f3:3a:41:9a:86:4d:cc:28:20:b8:65:91:f8:0d:
45:b3:cb:9c:41:8d:3b:af:68:73:25:21:a2:a9:5c:
45:52:c8:68:b3:71:cd:01:a9:6b:af:bb:24:a5:cf:
1e:f3:b0:3c:0a:0c:cf:39:bc:17:d0:9b:54:cb:26:
a3:74:d8:31:06:25:73:f6:85:0c:39:42:a7:ba:9a:
73:c0:b1:76:17:58:64:58:06:58:c6:44:d1:71:a7:
58:1a:90:f9:6d:af:ad:40:cf:22:07:54:4a:d0:78:
b3:32:8f:6d:56:df:1f:61:12:0d:4e:d4:4e:61:6b:
66:68:6b:dc:34:00:86:ee:0a:53:0e:9f:cc:e1:74:
0f:0a:9b:4b:df:3f:b0:fa:6b:9c:eb:bd:4f:0f:93:
ac:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:3D:39:D5:3F:AE:46:E6:B3:14:2E:9C:E2:E3:41:38:C6:96:12:8F
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/VD051T-uRuazFC6c4uNBOMaWEo8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
49:b4:84:be:61:12:7e:57:11:54:24:60:4e:9f:10:37:00:75:
db:50:4b:ab:76:28:85:5f:08:10:fb:e0:d9:5a:ff:ba:08:18:
52:f0:5b:4b:6d:1b:dc:18:7a:6b:bc:f4:cd:38:6f:8a:20:32:
88:81:f9:fc:ff:bc:76:0e:9f:a6:16:31:b9:6c:d1:9b:64:a8:
dd:ac:c7:1a:8e:d0:51:77:55:14:43:38:d3:36:d4:e8:e9:37:
2c:c2:eb:04:f5:01:21:9a:8f:d3:cd:bb:af:51:df:d5:61:ae:
cc:81:7e:3f:f6:05:e0:43:7e:1a:ac:c1:b6:9f:bc:78:f4:fa:
81:ef:b3:47:c8:04:89:12:1b:a1:6a:92:47:20:0a:61:be:eb:
54:f3:3d:ba:35:2b:79:85:d7:54:ef:37:37:8f:83:65:8f:22:
8b:7c:6c:2c:24:ae:93:3c:37:44:91:25:5c:99:3f:35:5f:cc:
42:af:af:88:1d:ca:45:1b:14:c5:5f:89:41:5c:bf:76:00:ba:
4b:90:39:5e:ca:fd:38:32:e1:ea:11:ce:63:0e:46:a9:10:df:
7d:57:93:aa:f7:4a:22:5b:06:0e:4a:68:a0:52:dc:f6:44:4a:
ee:db:a9:fc:d4:88:56:b7:68:54:4d:87:0c:fb:f1:7b:6a:1c:
d7:c4:99:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 07:06:49 2025 by rpki-client