Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/VugrHUTgVya-dA046FMTk9tTABM.roa
File: VugrHUTgVya-dA046FMTk9tTABM.roa (raw, json)
Hash identifier: zEZBvB4UTTlncDPD/RT41ROIKAftZ+2HUN/rdp1Ogzg=
Subject key identifier: 56:E8:2B:1D:44:E0:57:26:BE:74:0D:38:E8:53:13:93:DB:53:00:13
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 01865D630B4FC5A20E82687E2465288ACC9C
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/VugrHUTgVya-dA046FMTk9tTABM.roa
Signing time: Fri 17 Feb 2023 03:20:17 +0000
ROA not before: Fri 17 Feb 2023 03:20:17 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:5d:63:0b:4f:c5:a2:0e:82:68:7e:24:65:28:8a:cc:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Feb 17 03:20:17 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=56e82b1d44e05726be740d38e8531393db530013
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:05:9b:7f:1e:c6:0c:37:8b:bd:c1:d3:85:3d:
1c:5d:71:09:f2:92:a1:79:c6:2b:ce:39:81:af:95:
80:be:31:8a:e4:b0:81:b9:8f:a8:00:15:32:ac:5e:
04:4e:3a:87:5c:bf:70:3a:23:ac:5b:2d:65:82:a6:
08:41:14:d9:86:55:43:8f:80:1b:d9:80:24:2d:00:
ea:f6:20:23:f2:b0:9d:8d:b1:61:68:af:62:29:95:
31:4d:e9:ee:9d:e1:6e:36:87:c6:60:c7:ed:4b:7c:
a6:7f:c8:9e:3f:52:62:52:83:df:7e:94:81:10:e7:
41:14:3e:e0:c6:27:88:4b:68:a3:68:e0:32:79:3c:
be:65:6a:e4:93:16:8f:0e:01:fc:e9:21:bb:4e:59:
43:51:3e:b3:d2:61:48:5e:93:96:5c:b5:15:d6:31:
61:1e:97:b5:58:1b:e2:ad:2c:65:d1:51:bf:7d:9a:
72:02:2c:ae:61:20:5c:06:1a:75:44:a5:36:9e:37:
f1:45:47:ef:6f:b7:99:a1:6a:de:46:34:f1:74:1f:
6a:65:e3:5c:68:8b:05:75:9c:23:5a:6b:7e:bd:be:
5d:50:44:58:4f:ee:a0:85:50:d0:3e:a7:83:c7:16:
65:a4:23:2a:ca:a0:82:80:b6:2f:2e:c4:d2:cb:e0:
52:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:E8:2B:1D:44:E0:57:26:BE:74:0D:38:E8:53:13:93:DB:53:00:13
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/VugrHUTgVya-dA046FMTk9tTABM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
12:ba:7a:68:3d:d7:55:a9:9b:1f:a6:2c:8b:a2:fb:05:1e:a4:
0b:da:b0:9c:42:15:20:fe:77:c9:70:3a:b4:e8:6e:3a:fd:f6:
90:23:67:df:60:85:25:b0:99:1c:d0:85:da:90:22:e3:25:91:
3b:19:65:f0:e4:d3:11:01:f1:a4:16:bd:fa:e8:4b:88:e2:2a:
0b:b9:3e:33:74:ad:21:aa:49:8f:3a:be:df:49:41:c2:b2:2b:
5e:df:9f:82:83:c5:10:65:e6:a3:8a:84:c8:19:9c:fb:93:03:
1f:b6:95:b6:9e:af:d5:50:e8:2b:88:a7:98:78:c0:ed:ab:47:
eb:5d:7f:f9:7b:50:2f:a9:4b:b5:95:0e:06:d9:77:b7:32:62:
7f:59:f7:8c:cc:9e:00:3b:d8:8f:ce:9e:93:d5:a7:be:ab:1b:
2c:a6:b1:a8:cc:05:ad:d9:07:4c:e4:d1:91:b1:d6:c2:82:a0:
80:5f:b5:9e:1b:94:a3:54:7c:24:4e:61:16:81:3e:c9:7b:dc:
36:80:81:6b:3f:cc:65:55:e6:d4:65:73:3a:05:b2:28:cf:9b:
cb:27:94:26:9c:4b:de:1d:4d:e7:a3:b1:e7:82:9e:b2:0b:0d:
a7:e0:24:04:e7:df:17:80:26:2b:28:17:61:73:33:04:f3:72:
17:c1:82:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 11 09:35:51 2025 by rpki-client