Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/_VCDSgcKQAlhHqgeSB0d97l_4BE.roa
File: _VCDSgcKQAlhHqgeSB0d97l_4BE.roa (raw, json)
Hash identifier: ivTY1YZ+rdyHxWoeYWEojLqpkgnrg4H/CUt/5HWYwp8=
Subject key identifier: FD:50:83:4A:07:0A:40:09:61:1E:A8:1E:48:1D:1D:F7:B9:7F:E0:11
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 018584A14E13474AF0C9EF315A395B889366
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/_VCDSgcKQAlhHqgeSB0d97l_4BE.roa
Signing time: Fri 06 Jan 2023 01:10:41 +0000
ROA not before: Fri 06 Jan 2023 01:10:41 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:185:3dcc:d8f/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:84:a1:4e:13:47:4a:f0:c9:ef:31:5a:39:5b:88:93:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Jan 6 01:10:41 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=fd50834a070a4009611ea81e481d1df7b97fe011
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:34:93:fe:83:ef:0b:e4:21:e9:99:1f:fd:eb:
9f:54:d0:32:77:5d:60:5c:89:7a:45:1d:40:0d:91:
87:62:bb:a1:28:bb:06:4e:59:e6:59:98:f0:1b:f6:
1a:5e:44:14:7a:b9:0e:8f:e9:81:dd:cc:94:0f:23:
6a:f3:c3:90:ff:9a:8d:ce:13:70:81:39:fb:24:2f:
b5:42:96:73:12:ce:1f:ef:36:f1:7b:fa:26:b8:1a:
dc:4b:2f:51:1f:ee:2e:0a:08:f7:ef:a3:6c:e3:c8:
f4:f7:36:6c:0b:a2:07:53:5d:5b:55:51:3d:d3:3a:
21:99:05:71:ad:ae:47:d1:fa:7e:f0:cd:6d:10:6d:
d1:09:91:32:39:13:92:97:f2:b3:c7:ad:27:8d:4b:
f0:cd:99:19:3b:7a:65:e8:a7:03:d2:f7:67:67:10:
5a:44:ae:2f:fe:c2:d9:8c:88:59:b5:40:24:0f:c4:
bf:dd:16:64:7d:65:09:72:76:49:11:56:46:da:fd:
6d:cb:1e:bf:dc:4b:cb:06:fc:7c:9c:02:f1:54:77:
c5:5c:64:ee:28:9b:fd:8f:d0:77:0f:06:8e:9b:16:
9e:6c:69:21:57:95:18:a7:66:b1:af:31:f3:26:cf:
a2:4a:93:9c:65:4f:b6:6b:88:b7:14:c5:05:13:3d:
6e:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:50:83:4A:07:0A:40:09:61:1E:A8:1E:48:1D:1D:F7:B9:7F:E0:11
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/_VCDSgcKQAlhHqgeSB0d97l_4BE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
02:01:5b:6d:14:a2:2f:13:00:9c:25:9c:41:17:38:cc:4f:56:
aa:7b:ae:95:b2:e3:7b:5a:cf:2b:1c:82:a0:a2:56:37:42:f4:
b0:41:f1:6d:8a:17:c2:04:d0:f7:60:fc:b1:ed:34:f6:8b:c8:
0e:64:87:d0:f2:3c:d0:f9:1b:47:56:f5:ef:b2:3b:35:fb:96:
a9:fb:f7:a9:b0:70:86:b3:bd:5f:94:e9:51:54:b9:db:4f:c9:
6c:74:43:61:db:a7:dd:f1:37:7f:3d:3d:4f:95:3e:83:92:39:
bc:58:60:44:20:cc:97:60:84:de:0e:74:f2:5f:41:bd:32:f7:
8e:28:51:35:04:41:1b:ab:69:5d:1c:0c:0e:5e:3b:e0:c8:36:
81:ea:52:13:62:40:93:c3:17:e6:b1:53:22:12:1a:32:80:18:
b3:5d:a8:8e:ba:18:32:2e:8e:50:ef:fe:78:7b:37:6a:90:08:
4f:e5:98:22:2d:57:1b:e9:85:0c:7e:c1:aa:dd:ab:f4:ec:90:
d7:7f:08:1a:53:fb:73:44:22:fc:6d:72:56:9c:ca:a4:e3:05:
da:2b:ac:3b:06:ac:b4:7b:e6:0e:84:e9:68:32:ba:e7:6c:51:
07:d3:7e:47:05:a7:66:ee:9b:ae:e4:74:14:19:3a:05:b3:03:
31:8b:89:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 14:38:27 2025 by rpki-client