Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/Vu0-y5tBowO5qebj9uRVqqXRk8M.roa
File: Vu0-y5tBowO5qebj9uRVqqXRk8M.roa (raw, json)
Hash identifier: mup7HLuh3lIap0HLLMSO9UkogI5IaeXh4TiDFni2BXg=
Subject key identifier: 56:ED:3E:CB:9B:41:A3:03:B9:A9:E6:E3:F6:E4:55:AA:A5:D1:93:C3
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 6A845082
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/Vu0-y5tBowO5qebj9uRVqqXRk8M.roa
Signing time: Mon 14 Feb 2022 11:23:26 +0000
ROA not before: Mon 14 Feb 2022 11:23:26 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1787056258 (0x6a845082)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Feb 14 11:23:26 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=56ed3ecb9b41a303b9a9e6e3f6e455aaa5d193c3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:e1:05:73:29:ea:bf:0e:82:ee:d5:55:00:9a:
d0:2c:bf:26:d6:b0:00:38:c9:6c:2a:1e:1a:95:c2:
6c:1a:2e:e3:51:40:30:f2:19:a4:ad:89:ad:32:d2:
a6:82:ac:b2:3e:72:b8:10:9e:d6:2d:4e:29:38:bb:
e2:ee:cb:47:74:6e:9e:a8:a4:a9:2a:43:e6:cf:92:
07:ee:09:73:0a:0b:c9:2d:0d:bb:c7:68:2f:31:f0:
98:fa:df:40:02:f8:2a:0a:df:9b:06:49:49:83:f5:
ef:99:fe:af:04:1a:c9:e4:9b:1a:30:68:e3:eb:0a:
0d:94:17:82:ca:16:5b:0b:96:84:13:57:06:05:0a:
35:ec:70:5b:df:ca:5f:c8:52:f7:2c:05:27:d6:ec:
27:e2:db:50:4e:5f:3d:7a:76:fb:d1:6c:1e:3a:2b:
ff:57:14:d7:61:c2:22:59:ab:09:a5:6d:d4:c5:4e:
bd:20:83:1b:c8:e2:ab:b1:14:42:1e:41:95:14:79:
cc:b3:40:10:6e:5c:74:1d:75:79:d7:21:93:99:9a:
22:26:b5:7c:0b:e2:e0:2e:83:cc:47:2b:15:d1:13:
14:13:41:0b:90:a2:32:4c:d4:9e:5c:57:1f:05:51:
e0:d5:61:b2:f8:d7:19:ba:18:61:70:c2:7e:1e:3c:
e5:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:ED:3E:CB:9B:41:A3:03:B9:A9:E6:E3:F6:E4:55:AA:A5:D1:93:C3
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/Vu0-y5tBowO5qebj9uRVqqXRk8M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
48:5c:ed:e8:ec:e4:1f:36:a5:5c:85:6c:6c:6a:71:5e:e5:07:
6d:39:e2:6e:d2:f4:f0:c0:3d:13:2a:16:bc:f0:5d:81:c1:58:
ec:31:2b:08:6e:be:d6:95:ce:f0:f6:5e:33:ab:48:51:d7:88:
2f:7a:fd:3a:cf:76:68:26:b1:86:95:82:9c:8e:5e:ae:16:64:
e9:5d:5e:a4:1a:d9:b5:1f:2f:15:54:32:06:f5:47:a8:40:29:
54:7b:fd:9b:9d:fd:90:bf:e8:3b:e0:1b:d5:9f:6e:f5:d6:7d:
cc:bd:cf:d5:83:6b:a4:73:a5:fb:c3:ed:83:9d:9e:d5:5d:57:
49:ab:77:0a:60:a2:13:f1:f4:9d:75:a5:4f:54:18:04:0f:2a:
88:dc:73:6f:ea:3b:52:92:90:ce:12:96:f4:46:f7:01:88:77:
c1:4c:5e:73:ca:fe:13:03:c8:6f:bc:c1:b6:a9:97:e0:ad:2d:
f6:e8:56:8b:98:80:19:25:12:30:28:31:ab:25:5b:5f:6c:b1:
30:97:e2:98:77:fa:5b:60:84:fe:98:a8:84:1d:f8:bf:ef:20:
b2:43:15:13:4c:b8:14:f7:6c:37:54:66:51:dd:b6:61:a8:27:
8e:b0:c5:5b:60:97:51:85:d6:a4:58:23:f8:a1:70:a1:da:40:
25:9b:52:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 11:52:18 2025 by rpki-client