Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/vHhmFtHBUlzwSeX0xlzr9xBymlE.roa
File: vHhmFtHBUlzwSeX0xlzr9xBymlE.roa (raw, json)
Hash identifier: KbgMYQvIoTwKaJFucCJe5KnG9PPqqRrieE9leXaUSP8=
Subject key identifier: BC:78:66:16:D1:C1:52:5C:F0:49:E5:F4:C6:5C:EB:F7:10:72:9A:51
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0186EB6C4718ACED0C76C36BA85AC6C21799
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/vHhmFtHBUlzwSeX0xlzr9xBymlE.roa
Signing time: Thu 16 Mar 2023 17:16:27 +0000
ROA not before: Thu 16 Mar 2023 17:16:27 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:eb:6c:47:18:ac:ed:0c:76:c3:6b:a8:5a:c6:c2:17:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Mar 16 17:16:27 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=bc786616d1c1525cf049e5f4c65cebf710729a51
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f6:37:35:48:08:5c:f0:d2:92:f0:b4:7e:c2:66:
ab:b5:19:36:8b:93:9c:46:aa:bc:45:70:7f:11:ae:
c9:81:e7:85:da:58:c7:a6:ea:6c:17:c9:03:5b:ad:
92:18:d5:b9:8e:82:c5:37:70:2e:c5:01:cf:d9:0c:
75:67:7a:5e:80:82:ab:07:19:1f:b2:e5:2c:00:59:
4d:8d:26:46:18:45:69:ac:3c:34:f5:df:e5:fe:7d:
a7:cc:2a:85:fa:1c:ba:41:e1:1d:10:b7:1c:bc:21:
6c:ba:cd:5e:a5:45:fa:a0:3c:ea:bf:c6:6a:11:33:
82:71:57:29:ba:df:c7:55:58:d4:0c:e9:35:95:7a:
04:fb:3b:e6:ba:78:37:bf:9d:f4:29:90:79:14:1f:
88:13:63:3d:9a:64:2c:6f:35:d8:e1:8c:36:72:56:
44:f3:2b:76:4d:70:4d:7b:0a:b6:86:15:af:78:0d:
77:db:2f:84:ce:38:22:3b:7f:b4:26:d4:a4:da:be:
72:16:7d:aa:ed:7f:94:eb:ac:0b:52:f8:5e:9c:1f:
e0:8e:0f:b9:fe:d2:04:9c:7b:3a:a0:6e:2f:22:f5:
5f:d2:f3:3f:bb:b4:84:15:9c:4a:eb:9f:ce:8b:2b:
da:cb:23:bf:5a:f9:e2:55:95:70:e6:de:c2:21:af:
43:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:78:66:16:D1:C1:52:5C:F0:49:E5:F4:C6:5C:EB:F7:10:72:9A:51
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/vHhmFtHBUlzwSeX0xlzr9xBymlE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
aa:ef:ee:d0:b0:99:80:1d:8c:6e:96:71:1e:13:94:6a:0d:ca:
1b:fa:06:49:73:ec:27:26:2c:b4:04:c5:d2:6a:9f:f5:5a:5c:
1c:71:5e:23:09:37:3b:ca:4d:7d:7f:21:15:d8:5f:ea:d3:26:
90:0a:f5:da:6a:6c:3a:32:f9:6c:3d:1c:1a:32:4e:fe:bf:34:
ad:76:9b:6d:72:93:76:c7:67:e1:cd:f6:fa:70:da:f5:9e:7c:
b5:60:83:50:4b:2f:3d:f3:8a:45:73:9d:56:13:db:b5:74:ed:
21:8a:be:77:4c:f8:2e:28:16:d7:08:9e:e4:73:f0:a5:87:e8:
be:8f:7f:c4:9e:ae:30:ee:55:76:81:7c:3e:75:37:f1:d7:48:
f9:32:e2:cc:e3:b9:ee:f5:d5:49:ae:a5:e2:88:e2:3d:73:75:
fb:40:d6:cc:d3:7e:b3:9e:f0:ae:ce:6e:d4:fb:1e:87:13:a6:
dd:64:8c:02:8f:a3:ac:09:9e:14:07:a8:08:d6:13:db:85:b9:
39:d6:82:d2:85:ef:d4:04:98:6e:88:bf:4e:81:22:c6:4a:84:
4c:08:1b:de:a3:78:db:44:48:42:c0:5f:ce:01:da:5e:e5:d8:
15:60:e5:24:aa:f5:88:dd:53:a4:9b:54:0f:67:55:9c:4a:9b:
1e:c7:13:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 11 13:33:30 2025 by rpki-client