Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/VX9XF32o14yTkOrX6B2yz5LIiLo.roa
File: VX9XF32o14yTkOrX6B2yz5LIiLo.roa (raw, json)
Hash identifier: uGzQ/J7CK0wZ3DMZeXhoWwZCxiul6gkRRBMPvYpBqoA=
Subject key identifier: 55:7F:57:17:7D:A8:D7:8C:93:90:EA:D7:E8:1D:B2:CF:92:C8:88:BA
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 018514995DEC56EACD6DBEBB229768868E97
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/VX9XF32o14yTkOrX6B2yz5LIiLo.roa
Signing time: Thu 15 Dec 2022 07:04:33 +0000
ROA not before: Thu 15 Dec 2022 07:04:33 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:185:1499:4789/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:14:99:5d:ec:56:ea:cd:6d:be:bb:22:97:68:86:8e:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Dec 15 07:04:33 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=557f57177da8d78c9390ead7e81db2cf92c888ba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:7c:da:d9:b9:7c:1d:b3:d7:9b:d8:d1:bb:7b:
c6:97:54:4a:ac:a3:bf:02:a6:80:a0:49:0c:50:22:
99:b4:89:98:09:8c:19:04:12:05:2c:49:06:a4:a0:
93:cc:ef:7d:8e:75:ea:19:b8:16:9c:d3:c9:a8:ad:
af:f5:09:b3:e5:4c:20:14:47:bb:71:82:f4:f3:e7:
02:68:f9:44:35:e4:ff:7c:4d:c6:6a:bd:bb:ba:df:
18:24:18:88:a5:a4:d6:ae:98:f6:19:10:01:a7:5f:
36:33:9a:91:3f:30:ee:02:26:04:3f:77:25:83:57:
14:a1:95:4b:fa:48:88:4a:83:2b:26:17:aa:ec:57:
fc:a9:94:aa:f6:87:ba:34:60:7b:32:a9:60:5b:13:
c9:87:3b:96:4e:41:88:01:d4:75:67:0e:b3:16:63:
8c:8b:54:e1:96:5e:e7:64:6e:d5:77:5f:14:ca:bc:
17:ce:61:91:25:23:e7:3d:da:e4:b9:c5:78:4d:11:
c1:1d:12:33:55:26:fb:83:a9:f9:c5:47:8b:c4:03:
e9:7c:92:71:31:1c:d4:cf:f0:1c:47:c5:cd:5f:04:
22:5d:9d:29:1c:43:a1:1a:1e:3b:3f:25:94:f7:f8:
f4:a9:b0:2f:5a:e5:80:b6:96:45:93:9c:55:32:74:
b2:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:7F:57:17:7D:A8:D7:8C:93:90:EA:D7:E8:1D:B2:CF:92:C8:88:BA
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/VX9XF32o14yTkOrX6B2yz5LIiLo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
7e:d9:5b:1d:61:09:87:09:34:9d:86:80:f6:a0:f9:70:0f:7c:
6f:30:a5:47:d0:46:a3:f7:8c:a1:ff:fa:ec:59:d7:37:0b:42:
29:56:3e:bf:0e:4d:df:54:ea:d6:a1:da:09:5f:c2:e3:9f:fa:
30:a5:b0:4b:d3:07:40:25:9a:7e:ff:7e:a9:48:44:0e:48:7e:
90:07:6e:12:84:72:e3:4c:f5:30:2e:57:0f:11:38:d3:72:6f:
47:6a:23:51:95:97:f0:3a:8b:8c:2f:ca:cd:ff:d5:67:b3:c4:
f4:ab:ca:f4:fe:d3:96:58:26:ae:8e:d9:b4:cb:2f:fc:29:21:
e8:a4:90:44:f3:ca:d5:2f:81:02:f1:19:69:c8:34:ef:e5:62:
48:b0:df:62:30:66:2e:33:0a:70:b3:ad:a4:fe:bb:c4:d4:52:
92:34:75:da:15:e8:da:d5:3b:6c:9f:23:4b:a3:f0:47:c6:d6:
95:29:f8:bb:67:7a:ea:79:59:38:03:3a:25:85:05:4f:c0:b9:
43:99:ea:17:34:57:bc:d6:b1:71:14:85:6b:5b:32:f8:3e:d0:
6a:db:16:3c:fd:9c:08:14:da:1c:8b:19:a6:9b:dd:16:61:d9:
8c:6c:06:c4:08:1a:88:aa:78:e8:9f:0e:ae:c3:35:9b:2a:01:
e0:68:2f:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 00:12:42 2025 by rpki-client