Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/VP2Y04HZJV2ZLHABQXQ999CsDd8.roa
File: VP2Y04HZJV2ZLHABQXQ999CsDd8.roa (raw, json)
Hash identifier: +xEMHm5HJ3M5+kL8/8igywiV2EfmjjcQ4iCwQE+mbUE=
Subject key identifier: 54:FD:98:D3:81:D9:25:5D:99:2C:70:01:41:74:3D:F7:D0:AC:0D:DF
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0185063D864E43CA9DE618BBF1F3D199C68B
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/VP2Y04HZJV2ZLHABQXQ999CsDd8.roa
Signing time: Mon 12 Dec 2022 12:09:33 +0000
ROA not before: Mon 12 Dec 2022 12:09:33 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:06:3d:86:4e:43:ca:9d:e6:18:bb:f1:f3:d1:99:c6:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Dec 12 12:09:33 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=54fd98d381d9255d992c700141743df7d0ac0ddf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:1d:8a:45:b0:dd:3e:ce:2b:2b:8c:0f:44:e5:
0d:03:5f:fc:34:c0:11:bf:e2:f8:da:33:77:d5:d7:
57:91:5b:c3:95:01:a2:87:49:aa:c8:5f:a5:ac:24:
73:73:f0:3c:31:ad:fb:b2:6a:db:7b:ed:3c:ec:22:
84:59:f4:7a:b8:42:a2:80:1f:7b:75:ce:59:34:40:
da:79:34:a3:d5:b7:16:df:d5:e9:79:78:2e:27:27:
74:8b:6f:12:2c:56:55:6a:e6:24:d2:51:08:5a:c0:
ba:78:6a:a4:7b:ee:5c:d5:26:6a:e6:88:f2:36:76:
6f:d2:6d:b1:cc:1f:18:87:5e:70:69:be:97:0b:0a:
83:4a:4f:c4:90:63:5f:a2:63:1d:c9:98:b8:b9:26:
28:40:02:68:a4:99:0e:b4:c3:14:d2:86:cb:b4:2c:
d7:ec:ac:97:d9:51:c6:27:f5:49:8d:3e:61:13:6f:
01:a9:c5:eb:82:f0:ec:55:a4:1f:bb:f9:17:a1:9d:
e9:1d:49:18:4e:5f:f4:fd:2b:e4:f0:d8:c1:f4:fa:
36:26:f9:a0:02:17:e3:ae:08:98:39:b4:8b:27:19:
95:96:50:aa:f2:81:df:e1:17:fe:61:88:cc:6f:79:
f3:f7:76:ec:9e:06:cf:c9:67:99:ad:81:f2:e3:ad:
07:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:FD:98:D3:81:D9:25:5D:99:2C:70:01:41:74:3D:F7:D0:AC:0D:DF
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/VP2Y04HZJV2ZLHABQXQ999CsDd8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
06:39:cc:9f:c9:0e:f8:72:82:d1:72:90:11:e3:4e:5d:f9:2e:
2b:f4:53:3f:e8:3f:46:27:53:57:66:fa:ab:6f:24:b3:81:f9:
64:c5:5d:0a:67:17:fa:69:9c:a3:31:c3:9a:5a:8a:79:1f:bc:
e0:2b:b1:e9:c1:d7:36:52:8a:34:d8:c4:c1:cd:02:91:52:67:
e3:b9:4b:59:1a:be:de:e1:a0:5e:1c:5e:d8:d8:76:52:de:9e:
55:90:9c:c3:b5:c3:ab:a7:fb:3f:d5:dc:54:c0:d7:1b:bf:bc:
05:9a:96:74:af:13:f7:36:41:bf:a8:dc:ee:22:51:bd:30:3b:
90:1e:5c:ff:5e:e0:cb:45:e5:1f:3b:c0:3d:71:57:50:8c:d3:
51:bf:fa:1c:d1:46:27:0c:f3:ed:94:36:bd:9c:a0:94:58:44:
30:69:1b:a6:79:31:59:35:ca:c5:93:e2:f2:6a:a7:79:12:92:
02:55:ea:46:db:74:19:83:94:2f:33:b4:6c:0d:7a:1c:a9:28:
34:01:bd:10:e4:ac:6e:41:f2:96:25:77:1f:c9:f2:fd:04:60:
cc:bc:f7:cc:49:2e:bd:14:bb:3d:65:b8:07:8d:9f:d5:20:15:
e9:3f:f5:12:7c:f8:93:73:3d:e0:45:85:1c:45:4f:b3:2d:64:
cf:07:0c:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 02:37:31 2025 by rpki-client