Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/Ve994R5VrF4HGcy3tA9oM-HXFkQ.roa
File: Ve994R5VrF4HGcy3tA9oM-HXFkQ.roa (raw, json)
Hash identifier: oVgMQX+0mv2455gTwhluhOdzCacn875JQ/g/LJ9Twy8=
Subject key identifier: 55:EF:7D:E1:1E:55:AC:5E:07:19:CC:B7:B4:0F:68:33:E1:D7:16:44
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 01894C22BAF9971DAD2707980269B437B764
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/Ve994R5VrF4HGcy3tA9oM-HXFkQ.roa
Signing time: Wed 12 Jul 2023 22:04:51 +0000
ROA not before: Wed 12 Jul 2023 22:04:51 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:189:4c22:45c3/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:188:5fe2:b396/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:187:4695:a68a/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:188:7858:a003/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64:ffff:0:187:fa9a:b088/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:187:b2b8:a7dd/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:4c:22:ba:f9:97:1d:ad:27:07:98:02:69:b4:37:b7:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Jul 12 22:04:51 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=55ef7de11e55ac5e0719ccb7b40f6833e1d71644
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:3b:60:d0:a9:76:81:36:0c:cc:e4:b0:a2:a1:
fa:1d:53:fa:6b:72:1b:5f:90:94:da:1a:f6:ed:02:
93:98:ad:62:86:9d:f4:d1:f2:82:ff:00:bd:68:b9:
aa:2f:a3:25:cf:cd:ee:de:ca:b2:97:b6:fd:f5:67:
d1:4d:ea:10:02:e0:38:a7:a1:39:d9:6a:b7:25:f6:
5d:67:78:32:8f:f4:65:91:02:bd:f3:a5:0b:90:ff:
0e:78:4d:f8:42:63:53:12:64:7b:ac:5f:9a:6e:a2:
ba:e3:4f:b0:cd:7f:50:4b:fa:6f:97:9f:db:1f:c8:
ed:3c:84:14:b6:2a:c4:33:50:8d:d4:27:2a:c4:a6:
78:c6:1e:d9:ba:8a:aa:98:04:86:b7:9b:f5:0a:32:
62:8c:cd:49:12:08:bd:30:b1:76:08:4a:81:76:3f:
2b:5c:41:f9:d6:20:27:a6:0f:8e:cd:19:16:73:44:
ff:7d:4c:2d:52:17:b8:4c:a0:2d:02:24:00:a8:65:
c4:64:0d:cd:9e:8b:db:e1:36:53:d9:39:77:ea:23:
f7:65:e2:f7:ea:e9:bd:4c:70:7d:fe:e3:46:90:cd:
d7:c8:2e:4e:c4:d6:3b:d1:6d:0a:00:cd:70:1c:07:
d4:38:ca:13:33:ff:f9:47:15:56:56:c7:6f:43:44:
fc:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:EF:7D:E1:1E:55:AC:5E:07:19:CC:B7:B4:0F:68:33:E1:D7:16:44
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/Ve994R5VrF4HGcy3tA9oM-HXFkQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
b1:40:ee:90:8b:a4:02:51:99:b0:89:14:6a:f3:0e:11:6a:a8:
2c:fe:dc:18:26:b9:8b:55:64:ec:af:7f:78:c4:ef:ea:34:2c:
ec:8e:ce:66:21:81:1c:c8:6a:d2:7c:2e:e2:c5:32:11:6b:c0:
59:f1:75:10:8f:fd:41:23:97:a1:67:56:f0:4d:d7:79:53:cb:
bd:23:95:dd:8d:33:ba:3e:2e:77:1f:7e:e4:54:f8:a9:9b:2d:
7b:d0:7f:f5:e9:e2:2f:92:c1:71:7b:42:3d:41:e7:fb:1f:86:
69:02:66:91:73:aa:4d:c1:7c:00:5a:56:47:46:07:e0:58:f6:
2c:b7:2a:16:95:df:21:9e:f7:11:be:5b:a5:c5:25:58:d2:17:
eb:c8:0a:37:cf:fd:93:3c:90:4b:e1:bc:20:4f:11:10:01:09:
b1:b0:0a:49:33:7c:92:d7:28:de:05:e1:4e:7a:f9:f6:fd:f5:
4b:04:8d:7b:c1:a5:4c:59:af:ee:ac:b9:51:2c:7f:a8:e7:f6:
62:1b:50:c4:3a:cf:1d:0e:16:04:f5:d5:ae:60:f8:0b:7e:4d:
b9:bc:08:6f:cd:f9:fe:f1:df:fa:18:f5:7a:30:f4:0f:f4:60:
ff:8c:d5:f1:cc:3a:3a:96:3f:8e:ca:b3:86:fc:f7:0d:19:d2:
22:f3:62:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 11 08:11:16 2025 by rpki-client