Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/VzvioT7-kc2fTyPk050RnZrsFb4.roa
File: VzvioT7-kc2fTyPk050RnZrsFb4.roa (raw, json)
Hash identifier: 8r3GwSrPeJ/wNYZKuwGzwvln7N7l6TDCo6cJBV/JJyU=
Subject key identifier: 57:3B:E2:A1:3E:FE:91:CD:9F:4F:23:E4:D3:9D:11:9D:9A:EC:15:BE
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 018883EFD189F6477F69FA52D40B2F0EF625
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/VzvioT7-kc2fTyPk050RnZrsFb4.roa
Signing time: Sun 04 Jun 2023 01:05:11 +0000
ROA not before: Sun 04 Jun 2023 01:05:11 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:188:5fe2:b396/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:187:4695:a68a/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:188:7858:a003/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64:ffff:0:187:fa9a:b088/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:187:b2b8:a7dd/128 maxlen: 128
2001:67c:64:ffff:0:188:83ef:17d7/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:83:ef:d1:89:f6:47:7f:69:fa:52:d4:0b:2f:0e:f6:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Jun 4 01:05:11 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=573be2a13efe91cd9f4f23e4d39d119d9aec15be
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:37:4c:81:58:4b:33:7a:09:44:3f:02:9e:4e:
cf:57:13:93:66:da:d1:b8:c1:33:fc:2c:2c:cf:72:
fc:c7:25:67:46:f6:ae:5e:a0:1a:33:c7:33:2b:95:
ba:fb:03:6a:3d:ff:87:55:64:56:03:5a:02:43:0d:
ab:0c:f9:4e:f7:bb:12:5f:12:e5:6c:81:2c:9c:c4:
b9:b1:d1:6f:bd:e9:8a:55:78:40:f9:3e:e5:23:94:
c7:5c:18:79:e3:b4:a3:dd:98:4c:48:bd:42:5e:29:
b1:6b:56:00:7c:4a:27:57:db:53:a0:ed:7b:1e:8f:
a9:e2:35:19:c4:15:01:cc:e2:ef:3b:7a:00:10:9b:
55:8e:0c:4c:2f:f7:25:fa:57:46:d9:65:88:8e:a9:
e6:f4:3c:d2:9b:e3:00:df:14:ff:69:e7:22:e7:20:
ac:62:e5:ab:0d:77:1f:e1:7c:36:f2:c2:91:78:98:
68:94:41:ac:34:20:1e:a0:b7:b5:fe:f5:fc:d6:41:
cd:82:61:a8:04:30:64:5f:48:52:7d:22:30:c0:e3:
45:67:23:58:e2:19:ea:15:cb:9c:e6:e3:4b:3a:7d:
85:81:63:91:8c:86:42:a5:9b:48:c1:cb:e7:7f:7d:
52:fc:ef:d6:6c:cc:e0:2f:d1:c9:85:fe:4c:66:4e:
67:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:3B:E2:A1:3E:FE:91:CD:9F:4F:23:E4:D3:9D:11:9D:9A:EC:15:BE
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/VzvioT7-kc2fTyPk050RnZrsFb4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
44:bd:d0:99:46:69:78:95:60:98:7b:e2:f7:b8:5a:00:74:95:
3c:9b:08:61:bc:35:93:b5:13:77:89:65:d1:cb:02:46:92:21:
98:12:6d:6c:d8:d1:2f:a9:cd:5b:ff:5c:9c:7d:5b:68:24:a7:
c4:78:63:84:12:ba:5d:41:96:31:7b:24:c5:d8:54:97:0b:aa:
a0:99:e3:60:90:46:24:5f:42:04:72:86:6a:b8:c7:dd:2b:1c:
13:bc:87:87:f1:4d:54:36:a7:20:75:ea:c3:b7:63:2f:b4:f2:
99:6b:95:50:f1:a8:9d:bf:e2:6e:a1:60:e9:10:04:ec:4d:5d:
54:ff:74:fc:9c:7f:88:f8:15:d9:82:86:c1:26:01:80:bf:68:
55:46:56:e4:a0:29:b5:fa:60:14:d8:b3:81:e5:7c:17:5e:85:
2d:12:11:37:fb:9b:2f:b5:6d:83:3b:55:ff:39:d7:63:9a:d9:
78:1f:57:4b:0a:4d:e0:a0:3e:fb:9e:0b:92:f8:73:ea:ea:ca:
39:50:ba:71:b9:a9:5b:50:40:22:c3:a4:52:72:e4:80:b4:25:
d6:33:9b:e8:ae:c6:e3:ed:2d:9e:bf:6a:e6:1e:61:81:c1:64:
88:8f:de:90:76:45:7a:a5:74:72:07:78:9a:2f:2f:b4:ed:44:
87:35:a8:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 10 16:15:19 2025 by rpki-client