Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/VOJ4xTyodkYbtaWbrUe7WkQ5NO8.roa
File: VOJ4xTyodkYbtaWbrUe7WkQ5NO8.roa (raw, json)
Hash identifier: RfYwxVGTpmdrJaqCEjanFSZsHYXKb/Vav1EbVkCF4/8=
Subject key identifier: 54:E2:78:C5:3C:A8:76:46:1B:B5:A5:9B:AD:47:BB:5A:44:39:34:EF
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 01883FEE58EEEA6353B60AF0FEB9BADB6B7A
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/VOJ4xTyodkYbtaWbrUe7WkQ5NO8.roa
Signing time: Sun 21 May 2023 20:09:24 +0000
ROA not before: Sun 21 May 2023 20:09:24 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:187:4695:a68a/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64:ffff:0:187:fa9a:b088/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:187:b2b8:a7dd/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:3f:ee:58:ee:ea:63:53:b6:0a:f0:fe:b9:ba:db:6b:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: May 21 20:09:24 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=54e278c53ca876461bb5a59bad47bb5a443934ef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:17:5d:e8:76:e9:c2:4b:e4:e6:32:76:4b:41:
52:ae:4d:36:c6:4a:2b:04:90:30:8d:20:3e:b6:57:
73:48:1d:ca:04:9a:9d:13:27:ce:3e:e8:1b:17:a3:
d5:90:3a:b8:85:34:bc:2a:75:c5:5e:fc:31:5b:0a:
c4:61:bf:83:22:27:e3:53:c3:d7:25:73:14:11:38:
21:48:07:f9:79:0e:b6:8e:f0:ad:38:b1:b4:48:8a:
8e:9c:48:14:d8:83:d2:64:1e:7b:97:fb:36:47:57:
fa:51:5e:cd:49:25:87:a9:c6:c7:7a:1a:a5:e8:c2:
1e:6c:46:e3:1f:b6:8b:d9:eb:14:e9:dc:0a:4e:9d:
2e:5f:57:9d:a4:80:56:fd:5c:61:4d:49:14:e2:ae:
3c:fb:3d:b0:b9:06:be:8a:ab:39:a5:24:43:d0:c1:
cf:b6:5c:b4:69:6f:64:02:55:d9:70:0d:f7:ed:90:
ca:5e:48:42:e3:ea:5d:63:45:0e:77:e7:29:b6:22:
0d:67:cc:12:31:3a:d4:66:dc:04:33:1d:a6:d2:be:
fc:92:fd:17:01:17:14:c3:2d:23:0f:a7:40:1c:73:
8a:46:aa:69:03:08:c7:84:2e:ae:a9:5b:a6:c9:45:
26:55:dd:f2:2d:a0:ff:30:5d:fa:f0:b8:0f:14:06:
0a:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:E2:78:C5:3C:A8:76:46:1B:B5:A5:9B:AD:47:BB:5A:44:39:34:EF
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/VOJ4xTyodkYbtaWbrUe7WkQ5NO8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
69:ce:3c:66:ff:15:d9:93:d6:a5:17:a0:14:29:19:ed:ea:b6:
4a:46:d1:e8:2b:1a:cb:62:8a:f6:d8:49:57:c5:fc:75:ae:6a:
72:ff:f4:cd:65:fe:62:0c:14:16:72:84:76:e0:53:7b:e5:ee:
22:74:49:a4:3e:91:0d:0d:89:af:50:36:b8:85:c6:03:73:38:
7b:30:6a:87:ba:14:68:b3:f6:72:3c:44:88:fa:f0:77:a7:d4:
70:78:82:83:be:74:a8:81:bc:d4:ff:de:e8:92:78:80:8f:7e:
60:ec:6b:dd:68:87:14:8c:a9:aa:4e:07:11:9e:9f:77:ec:a8:
b1:9c:96:24:7b:7a:67:19:4f:26:21:f9:da:52:3a:00:8c:74:
56:c9:d9:dc:93:9b:c2:7c:eb:49:a0:e5:4b:7a:63:ef:75:d6:
95:66:fa:14:8e:be:3c:9a:89:59:69:ce:46:11:13:f2:6f:bd:
c6:2f:bb:87:00:5b:18:10:1d:f7:f9:68:57:09:08:76:68:a2:
61:a6:05:ae:3b:a2:51:e8:0b:cd:76:e5:42:80:ef:2d:7f:90:
44:3d:d8:70:46:de:27:0f:a3:88:84:ef:f3:a6:64:80:f5:9d:
d0:f9:a9:8a:65:22:52:4e:a2:37:1e:66:b6:6a:da:78:03:95:
df:e9:ba:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 00:13:17 2025 by rpki-client