Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/VD66M55Hx7dFAQUJn5y8bFZlYag.roa
File: VD66M55Hx7dFAQUJn5y8bFZlYag.roa (raw, json)
Hash identifier: y14HA6bHx0YueWUzHU1HviTYuHdggLJaWCam99hd8O8=
Subject key identifier: 54:3E:BA:33:9E:47:C7:B7:45:01:05:09:9F:9C:BC:6C:56:65:61:A8
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0186D7776C93EE4FDD1D1883D87B6D7EC609
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/VD66M55Hx7dFAQUJn5y8bFZlYag.roa
Signing time: Sun 12 Mar 2023 20:16:13 +0000
ROA not before: Sun 12 Mar 2023 20:16:13 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:d7:77:6c:93:ee:4f:dd:1d:18:83:d8:7b:6d:7e:c6:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Mar 12 20:16:13 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=543eba339e47c7b7450105099f9cbc6c566561a8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:ab:e9:3b:44:38:0b:3c:dc:aa:0a:36:9a:0c:
31:88:f3:a3:be:75:92:fd:b4:f7:c1:54:fe:00:c6:
bb:ab:df:6d:6d:b4:e1:ec:32:93:d2:72:77:86:0c:
c5:11:94:47:6b:f9:ce:4b:f8:5e:14:99:84:75:c0:
ec:dc:80:6a:0a:8e:27:90:e4:fd:f2:21:65:a6:fb:
52:c0:23:16:c3:70:1a:7a:05:0a:8c:1c:23:d2:cc:
af:ad:f2:76:ec:13:e6:ac:65:d1:71:5f:3b:4c:74:
40:d8:43:15:ac:66:8a:fd:97:02:6b:aa:9c:b2:eb:
5a:f7:22:d6:93:12:d9:14:4b:9e:aa:6e:d7:31:76:
24:55:29:5c:d0:27:3f:85:15:55:e5:0d:c7:c9:45:
c2:1f:b4:da:2b:9c:6e:ea:0b:13:4d:9a:e8:ad:1d:
ad:d5:a0:0b:2a:e5:58:c1:f2:ac:27:33:20:5b:23:
28:03:c8:ef:e2:80:87:e6:67:01:3b:5e:3b:d0:4c:
b1:c7:8b:31:10:d1:1c:1a:1b:6d:f4:ab:44:11:7a:
57:f1:57:9e:60:33:da:e2:db:8e:a1:88:8f:b4:d8:
4b:b5:8e:83:40:45:d3:3a:84:3a:d9:06:4d:78:44:
4b:7a:e3:99:ab:67:fe:06:61:f3:43:7f:ef:25:2d:
47:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:3E:BA:33:9E:47:C7:B7:45:01:05:09:9F:9C:BC:6C:56:65:61:A8
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/VD66M55Hx7dFAQUJn5y8bFZlYag.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
97:d5:57:fd:7a:6d:f9:9e:ce:86:89:52:82:a4:8f:5f:ad:0a:
42:97:7c:51:c1:97:b3:0f:ed:2a:51:00:fa:aa:ff:47:1f:96:
c1:fb:5c:48:4e:8a:de:73:86:36:52:78:ad:e0:ef:b7:80:cc:
aa:91:66:0e:4e:1f:10:95:1f:f8:8d:a0:c9:3b:d9:e2:0b:05:
91:b0:f0:9c:51:2e:83:34:f0:34:ad:ef:5c:47:b9:c0:db:c3:
15:96:54:7b:52:2a:bb:0f:f6:9e:86:9c:f1:ac:d3:f2:98:ee:
10:07:0b:6c:2b:bb:85:0a:96:d2:0c:62:92:4d:e7:9e:70:e2:
e7:36:6b:7b:c0:32:d4:9e:b6:62:ca:4b:1b:92:2e:b4:2e:15:
ea:de:a6:20:9c:27:8e:2c:ce:cb:76:72:66:64:8b:55:ad:1b:
47:72:4c:70:c3:15:ef:9c:91:be:68:34:30:50:ed:de:0d:ec:
65:49:16:0e:13:0b:be:a6:07:7f:f5:20:1f:a5:d9:79:e1:54:
ca:6e:d4:eb:37:79:34:3e:89:b5:b8:7f:7a:60:42:35:b2:b2:
ba:12:9d:d6:b9:7d:81:58:39:f7:05:9d:dc:90:00:9e:ad:69:
56:7b:db:39:a6:31:a5:38:c1:d6:72:32:f9:ed:5c:9a:d8:b9:
c7:6d:a3:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 08:58:50 2025 by rpki-client