Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/VuhFtE34CFDc_qfrn-8BgAnYhgs.roa
File: VuhFtE34CFDc_qfrn-8BgAnYhgs.roa (raw, json)
Hash identifier: nH6l8zZ2YYjrQSOPJ3RJWwFcjMqo9czzrGGjXMeHdsg=
Subject key identifier: 56:E8:45:B4:4D:F8:08:50:DC:FE:A7:EB:9F:EF:01:80:09:D8:86:0B
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0184D3CC422823875435CEB51E1D5FCF3D6C
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/VuhFtE34CFDc_qfrn-8BgAnYhgs.roa
Signing time: Fri 02 Dec 2022 17:04:49 +0000
ROA not before: Fri 02 Dec 2022 17:04:49 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:184:d3cc:1ae8/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:d3:cc:42:28:23:87:54:35:ce:b5:1e:1d:5f:cf:3d:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Dec 2 17:04:49 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=56e845b44df80850dcfea7eb9fef018009d8860b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:82:c7:e4:1a:b4:65:8e:37:a0:03:2e:96:fc:
2e:51:b4:2b:e6:57:ad:f0:10:90:bb:a4:c6:98:de:
4b:49:41:e3:1d:06:75:13:d5:5d:f3:eb:44:0b:95:
e5:6c:ea:08:ab:d2:30:ff:8a:50:70:eb:05:14:17:
3a:8f:a3:e2:dd:18:fc:4b:c9:8a:5d:a6:04:e5:17:
8e:6c:d7:26:14:de:db:e1:12:6a:85:7d:11:dc:e2:
d5:5c:07:2f:8d:63:60:d0:7d:79:a9:6e:19:05:86:
5d:01:b5:f9:e1:d5:70:64:b8:0a:32:2d:39:f9:3e:
0c:68:7a:9c:cc:e0:24:75:8b:2e:81:69:d1:eb:33:
b8:19:b9:a5:f9:5c:f2:91:2a:c3:5d:15:85:32:bd:
89:b5:d1:ce:f0:16:1f:1b:92:a8:e8:9b:f1:1f:27:
4c:88:38:6d:e6:a2:52:03:4b:0e:ef:eb:e8:d2:64:
4f:a9:b3:b4:e8:28:bf:89:b4:bc:b5:f3:38:8a:89:
31:7e:f3:eb:b2:0a:a0:fb:b1:90:76:bd:12:2c:55:
82:3c:76:7e:42:4c:7b:54:22:17:de:06:37:b4:97:
4f:da:75:45:0c:c7:9f:d3:7a:f8:67:3a:55:2a:a0:
e8:cc:e2:da:10:9f:f5:88:df:b4:60:25:d8:eb:08:
43:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:E8:45:B4:4D:F8:08:50:DC:FE:A7:EB:9F:EF:01:80:09:D8:86:0B
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/VuhFtE34CFDc_qfrn-8BgAnYhgs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
a2:e4:ff:6c:00:a2:29:99:19:43:2f:b7:77:17:8d:5e:f7:58:
0d:ba:92:e7:b2:94:22:2d:52:4a:8b:bb:8a:b6:1f:9b:09:50:
01:cb:78:09:e4:b5:6c:80:c8:a9:a0:4d:18:0e:c7:88:6e:ae:
3e:b6:1d:1d:6b:b2:e6:66:93:cb:4c:cf:1a:ca:61:99:a9:7e:
c8:16:08:6f:de:87:b2:d9:90:89:fe:c8:d9:4e:3d:74:ca:da:
d7:0e:17:8f:1e:fd:28:87:c9:09:c0:72:96:85:e1:05:f0:f1:
f5:55:2f:eb:e5:aa:e2:61:42:d3:3f:ba:48:30:69:8c:91:7f:
5a:47:23:e7:15:f3:c1:74:3c:21:f4:e1:eb:7a:20:de:30:3f:
b8:93:0f:1f:04:03:a6:dc:7a:6a:c1:cb:fc:f6:f9:fc:4e:89:
59:85:fc:f4:d0:40:1f:ab:62:cd:d5:ad:fc:a0:6d:d5:5a:b3:
d4:dd:6d:f5:92:04:de:45:81:1a:48:52:22:05:29:fb:00:2b:
3b:41:7f:b4:c0:1f:c8:fc:af:58:eb:0b:06:b3:fc:35:f7:b7:
9c:37:c6:17:48:8d:5e:60:58:40:9e:f0:95:9d:c3:9b:69:f5:
7d:10:b9:13:6f:38:11:ed:e0:4c:da:39:ea:13:af:ea:0f:0b:
b0:01:47:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 10 10:53:15 2025 by rpki-client