Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/vNUJ9ArQmtADgRl11_CI9NcRQiU.roa
File: vNUJ9ArQmtADgRl11_CI9NcRQiU.roa (raw, json)
Hash identifier: vfY7MDmHKujTtppkiKMpkAEisvSx5MdbJZtlGtZt1TM=
Subject key identifier: BC:D5:09:F4:0A:D0:9A:D0:03:81:19:75:D7:F0:88:F4:D7:11:42:25
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0189C2D445897DBE5201CDE37D3EF40D81EB
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/vNUJ9ArQmtADgRl11_CI9NcRQiU.roa
Signing time: Fri 04 Aug 2023 23:13:58 +0000
ROA not before: Fri 04 Aug 2023 23:13:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:188:7858:a003/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:189:a0e4:5c7d/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:c2:d4:45:89:7d:be:52:01:cd:e3:7d:3e:f4:0d:81:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Aug 4 23:13:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=bcd509f40ad09ad003811975d7f088f4d7114225
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:7e:7f:15:a9:7e:b2:2b:cc:61:be:73:81:fb:
10:8f:86:80:70:aa:ea:7d:27:9a:34:a5:68:2c:5a:
f1:91:2e:12:58:0a:4c:80:5f:e9:65:b1:90:d3:e4:
ff:27:bb:09:c3:9e:6e:56:83:4b:e9:ea:d2:df:05:
09:4f:79:81:1f:85:70:e0:fa:20:9b:d4:6a:e4:1b:
04:1f:d8:3e:43:bb:f1:f5:7c:4c:51:f3:17:fa:4c:
87:72:a0:7a:bb:b5:be:bb:ee:a5:fb:67:66:8e:d3:
54:be:4f:09:7f:4a:bf:6f:df:9e:d7:58:7f:a5:b5:
03:03:51:c8:3f:66:d6:62:16:1d:cb:6b:91:92:4c:
eb:1b:f8:1c:d7:15:70:79:22:79:a0:fd:36:99:ee:
37:c3:ec:fb:00:85:19:8b:ab:ed:5b:17:5c:76:74:
45:b3:82:8e:ea:9a:6a:a8:9f:ce:09:99:d6:01:6a:
cc:75:e7:e5:25:a4:94:3a:84:18:06:ba:96:8e:47:
5a:55:5a:46:2a:98:4b:ba:53:02:e0:23:b1:02:c1:
39:60:e1:3e:37:b5:2f:14:9a:85:7a:f4:06:0c:84:
c7:10:8c:2d:2e:d1:c5:32:85:17:05:24:db:91:d6:
9f:f9:fc:54:f2:51:ed:d6:d0:32:c5:4f:fc:50:60:
9a:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:D5:09:F4:0A:D0:9A:D0:03:81:19:75:D7:F0:88:F4:D7:11:42:25
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/vNUJ9ArQmtADgRl11_CI9NcRQiU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
98:a3:2c:56:28:43:54:02:5e:e4:6d:b0:70:b7:ad:09:65:8c:
ff:41:03:6b:61:50:6d:1e:31:10:2e:69:ad:cf:98:76:7f:99:
e2:ba:81:a6:1e:62:0d:73:bd:0a:c3:55:78:fa:92:20:2c:5e:
b7:3c:99:99:6e:d3:03:31:88:68:c4:c3:1e:b9:4f:c5:78:97:
b6:22:46:46:8a:f6:28:85:88:08:2b:06:a6:b0:a4:62:58:e9:
6b:e8:4f:3b:fa:15:b8:0a:03:73:ff:4e:d1:98:f4:a9:42:c2:
e2:68:6e:8d:49:de:f4:5b:0b:fd:90:93:c5:e1:92:58:b2:73:
e7:04:89:2c:ee:5a:3d:5d:7e:52:c0:bf:1a:7e:22:72:d8:d2:
ee:42:14:06:9c:76:47:d1:5a:8e:ef:b1:28:40:ae:58:7c:09:
79:2c:e5:de:5a:20:58:5b:1e:e4:b9:54:20:63:3b:d0:7c:7e:
dd:e6:0e:d3:15:f1:c0:02:f1:38:cc:ea:24:84:d0:74:45:25:
ed:ab:d8:73:15:0b:5f:6a:a1:eb:36:07:a0:e3:65:91:4b:0e:
11:29:a3:f3:c4:2f:fc:b8:5e:85:9d:38:3d:f3:80:20:22:bd:
70:21:ce:b2:b4:27:f7:82:29:d4:53:32:e4:22:9c:14:ab:42:
e9:ce:52:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 11 20:48:24 2025 by rpki-client