Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/vEGG8IHOqlK3_39gb6-9d34gftI.roa
File: vEGG8IHOqlK3_39gb6-9d34gftI.roa (raw, json)
Hash identifier: NI0gycJgbCzVFne+diYKCFux9crb+tACFd24yjOu6RI=
Subject key identifier: BC:41:86:F0:81:CE:AA:52:B7:FF:7F:60:6F:AF:BD:77:7E:20:7E:D2
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0188C4C0F2A67ACE390E5A0407166C33351C
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/vEGG8IHOqlK3_39gb6-9d34gftI.roa
Signing time: Fri 16 Jun 2023 15:09:19 +0000
ROA not before: Fri 16 Jun 2023 15:09:19 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:188:5fe2:b396/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:187:4695:a68a/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:188:7858:a003/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64:ffff:0:187:fa9a:b088/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:187:b2b8:a7dd/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:c4:c0:f2:a6:7a:ce:39:0e:5a:04:07:16:6c:33:35:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Jun 16 15:09:19 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=bc4186f081ceaa52b7ff7f606fafbd777e207ed2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:f8:2e:c9:d4:3b:8a:5b:60:56:2c:cc:67:60:
60:a7:7a:4e:df:27:e1:0b:4e:f5:83:da:33:c8:58:
8e:4e:6d:e2:be:cf:3c:36:67:a5:72:9f:e8:02:78:
80:0f:f2:2c:92:ee:de:6d:37:f8:a2:40:1b:ba:a5:
bd:05:63:32:44:c1:b2:dd:69:15:d6:4b:8b:35:f6:
b0:71:e4:d8:b5:8e:95:e0:b1:3e:a1:ca:f8:67:e9:
f7:65:74:7a:83:0c:2f:52:e9:ff:e2:45:41:ed:83:
43:33:3c:ae:4e:17:7d:e2:0c:42:0d:ed:62:08:d7:
69:46:ed:6b:0d:05:8d:0e:7c:70:1c:ef:ab:23:b5:
0d:90:4a:4a:2b:0d:0b:53:ba:14:90:0e:64:bd:af:
46:ec:e0:bf:0b:3f:99:51:82:77:8a:27:cd:cb:4f:
89:15:0c:2c:8a:29:87:86:67:e2:b4:b3:fd:7f:24:
89:aa:79:d3:4e:22:f8:46:37:44:5d:8e:eb:0f:a5:
9f:f2:4a:4d:09:d2:f4:82:b4:53:e3:89:07:b0:7d:
40:73:4c:30:ef:ff:3c:34:b5:72:5a:10:0e:62:86:
98:0c:f2:6c:03:6e:d4:a4:2d:ef:42:a7:0c:37:df:
58:98:27:ff:26:c6:1a:04:14:8b:31:ac:00:f1:cc:
c9:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:41:86:F0:81:CE:AA:52:B7:FF:7F:60:6F:AF:BD:77:7E:20:7E:D2
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/vEGG8IHOqlK3_39gb6-9d34gftI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
31:d8:62:60:d4:81:ab:d0:ac:32:34:11:30:cc:d3:51:14:22:
12:0a:cc:58:47:d0:b3:03:f5:3d:af:40:75:c4:ee:b3:c7:f0:
12:95:d5:1c:84:5c:1d:95:ea:b6:89:0b:ab:10:b3:06:fd:38:
c1:cf:d7:ef:91:52:c8:6b:4f:fb:06:57:a8:4a:c2:bc:59:86:
8a:38:7b:66:cb:72:9f:9f:0c:9e:9b:25:6a:34:15:a1:1f:e0:
1b:56:b0:32:06:03:a4:91:ac:26:78:0d:ff:59:92:e8:86:eb:
80:6e:cb:2e:a0:4e:8f:6f:7a:26:70:83:84:f7:13:be:d4:23:
30:01:e3:c1:aa:14:77:44:4a:39:de:28:e2:34:a7:8e:da:e8:
6c:e4:ac:05:09:1c:79:a1:c2:0a:56:2e:a4:ce:3c:c9:04:4e:
18:f2:6f:fe:e5:2a:a9:7b:9b:bf:f8:9e:39:a5:81:86:66:40:
47:bc:04:d4:60:82:2a:c8:19:bd:a1:d6:34:f5:83:5b:5b:6c:
d2:8c:ef:46:b4:04:26:7d:ae:ae:17:16:7a:5c:5a:eb:0d:d9:
5b:68:92:26:b8:fc:0f:23:0f:80:08:84:8f:50:79:b9:5e:80:
eb:bc:84:d0:99:e3:56:01:ef:0f:df:4a:aa:d0:f8:79:c5:aa:
12:b9:f9:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 22:39:41 2025 by rpki-client