Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/Vs8PchX3uvOlExNTsDP3lLydyw8.roa
File: Vs8PchX3uvOlExNTsDP3lLydyw8.roa (raw, json)
Hash identifier: hBMbB5TRsHTGjWgNtM9tceDWgZYX1F08ZpofX4lHXm0=
Subject key identifier: 56:CF:0F:72:15:F7:BA:F3:A5:13:13:53:B0:33:F7:94:BC:9D:CB:0F
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0186E78486E5AD68BC28CC6F1FF41FEA60EF
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/Vs8PchX3uvOlExNTsDP3lLydyw8.roa
Signing time: Wed 15 Mar 2023 23:04:27 +0000
ROA not before: Wed 15 Mar 2023 23:04:27 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:186:e784:492e/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:e7:84:86:e5:ad:68:bc:28:cc:6f:1f:f4:1f:ea:60:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Mar 15 23:04:27 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=56cf0f7215f7baf3a5131353b033f794bc9dcb0f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:29:fd:95:f3:4c:12:05:7d:97:b1:85:ff:a5:
22:30:93:e8:ac:8e:e3:ba:ae:fe:aa:94:c4:b0:a4:
33:4c:66:1b:6b:29:a8:c7:89:46:5d:ba:32:92:36:
44:b8:30:f4:0f:5e:03:7f:48:1f:a5:43:10:bc:73:
d4:4c:67:c7:3b:6b:e9:93:6e:a2:bc:bf:5e:0c:bb:
2f:2e:ae:cc:de:df:2d:2e:64:b3:6b:0b:78:14:55:
47:a6:88:c3:8f:2f:dd:37:f4:23:12:be:78:cc:81:
87:24:65:31:a3:47:8b:09:66:61:54:81:d8:f2:9e:
fe:f1:5c:65:c2:f9:db:a8:06:4f:98:8b:22:3c:f2:
fb:14:d3:7d:cc:16:a9:e6:1b:7a:f2:21:14:0f:05:
42:4e:0c:d9:86:0f:7b:fa:5d:3f:a6:a8:6d:db:6d:
d8:64:aa:fa:81:3a:65:5c:b2:4e:fc:92:4e:8e:e1:
27:e8:ba:b2:16:e2:18:d9:03:3c:66:f6:b0:e7:a9:
4d:68:9e:27:f2:55:c8:11:98:e8:b6:2c:10:08:3b:
c2:49:c2:6d:34:3d:81:ae:aa:27:bc:15:85:9c:d1:
70:aa:d7:77:80:3f:9a:6b:71:3f:20:4a:91:d9:f3:
76:02:6f:21:02:4e:85:70:aa:1e:95:8b:a2:a0:09:
fe:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:CF:0F:72:15:F7:BA:F3:A5:13:13:53:B0:33:F7:94:BC:9D:CB:0F
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/Vs8PchX3uvOlExNTsDP3lLydyw8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
0f:bb:d8:29:94:c0:71:c3:cd:34:bc:37:79:6f:c9:af:09:29:
00:ae:18:85:4a:7f:4c:44:2b:86:be:d9:74:8a:d0:ec:c7:2f:
9b:f1:87:43:7b:07:fd:d8:6d:03:30:70:20:e7:03:5c:af:27:
d4:62:fd:46:05:37:6f:bc:5b:14:bc:fb:78:ee:b5:ad:fa:b9:
d8:44:6f:33:aa:bb:a2:44:a8:4b:e7:e5:ec:b6:54:47:c0:bc:
dc:c6:f0:62:f4:38:d8:b5:b9:8c:85:65:c2:51:06:c9:e9:95:
08:7a:43:b7:72:03:80:2b:f4:8c:5a:29:69:e8:8d:dc:68:e8:
3e:bb:d5:24:ce:4f:3c:46:35:dc:57:d3:0b:fe:57:da:f4:ed:
05:5c:a2:00:5b:b2:d1:71:45:8f:3c:58:e9:a0:fe:9e:42:d1:
c0:79:99:12:d1:41:9c:22:53:a1:ef:5e:a1:8d:32:25:a0:f0:
d2:cc:77:6c:18:53:10:36:22:59:a3:2b:6b:96:3c:59:43:3d:
e4:65:1d:92:dc:23:ef:98:c9:ad:61:25:4c:02:3f:d2:78:04:
eb:87:5e:32:b2:11:ea:a9:06:f8:80:09:6e:10:11:6c:52:60:
36:7e:ae:82:d5:63:6f:ec:ee:fc:25:67:54:96:53:28:06:93:
83:1c:f3:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 10 15:32:43 2025 by rpki-client