Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/vPoa3nW6zi6wMPLFcpVfrqaJ0vg.roa
File: vPoa3nW6zi6wMPLFcpVfrqaJ0vg.roa (raw, json)
Hash identifier: mOjtRYTCDvnOrgCG4owOdgqhZQq0yq3DVAm4aBOq+Yo=
Subject key identifier: BC:FA:1A:DE:75:BA:CE:2E:B0:30:F2:C5:72:95:5F:AE:A6:89:D2:F8
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0181E94F16F5FAAE37ED0CEDDC9D577F53FE
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/vPoa3nW6zi6wMPLFcpVfrqaJ0vg.roa
Signing time: Sun 10 Jul 2022 18:11:23 +0000
ROA not before: Sun 10 Jul 2022 18:11:23 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:81:e9:4f:16:f5:fa:ae:37:ed:0c:ed:dc:9d:57:7f:53:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Jul 10 18:11:23 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=bcfa1ade75bace2eb030f2c572955faea689d2f8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:9e:99:7d:67:4c:9e:e5:a5:50:a5:de:4f:b2:
b4:bd:23:26:0b:34:6b:b1:c7:04:fa:c6:4e:d4:32:
07:f3:a0:52:cc:25:e2:0a:9a:35:0d:c3:be:10:08:
24:c9:e9:76:13:af:31:65:5e:f5:f5:25:e4:e0:05:
36:29:f2:a7:66:45:24:1d:a6:6e:51:91:84:65:e7:
7d:a0:3b:b3:1e:37:d4:31:b1:80:59:9b:cd:9f:64:
96:7f:a5:0a:40:03:1d:2b:29:2d:6c:5a:38:21:f0:
d8:cc:9e:56:43:dc:9e:62:ce:da:28:85:1a:93:f8:
e8:07:cf:65:48:64:a3:ed:15:97:74:eb:5a:a9:bb:
b0:43:fb:c5:b6:3a:a0:e2:92:dc:e3:65:67:53:ea:
40:6a:e0:33:22:eb:51:c3:ca:fb:11:d1:a6:ec:17:
70:63:83:f3:7f:07:f4:ec:18:78:aa:e0:3d:68:2b:
1c:d3:c6:9a:71:fb:61:8b:f4:d5:d8:f5:5e:9c:2e:
6d:fb:b0:c0:01:81:5f:84:85:f4:0d:cd:a4:4e:1f:
da:40:ad:29:78:d1:31:d7:18:4a:fa:83:22:e8:ae:
73:fe:98:20:4b:6e:4e:63:bd:fd:01:f4:1c:ba:5f:
a9:ab:dd:a6:ad:64:71:df:26:92:78:53:65:98:9e:
ae:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:FA:1A:DE:75:BA:CE:2E:B0:30:F2:C5:72:95:5F:AE:A6:89:D2:F8
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/vPoa3nW6zi6wMPLFcpVfrqaJ0vg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
23:09:3c:43:f2:a1:f6:b2:fc:1b:fa:fb:a3:6d:b6:d5:0f:ab:
4c:53:0f:15:7d:1d:ea:d5:e7:6e:4d:7c:c1:53:bb:b8:b9:53:
29:0a:d7:d5:16:83:3f:26:43:33:36:45:cc:30:42:67:52:b9:
62:f2:56:fe:b4:e9:31:c2:96:3d:ad:eb:fd:ed:6c:cb:f4:be:
b7:91:e2:6e:38:de:c2:de:90:8b:bc:b8:c2:01:3b:f1:54:0e:
db:2c:de:1a:dc:7e:23:ad:c0:21:62:61:de:a3:3e:78:39:fc:
61:ad:f0:33:ef:af:b5:b9:30:ce:a7:fe:64:e3:07:fd:f1:7c:
1a:17:12:1f:18:1a:32:a4:2c:22:ec:7b:f9:a0:6c:2b:cf:22:
71:42:04:1a:93:65:74:f6:15:bb:ac:88:1b:ae:df:70:00:7a:
2f:55:97:1e:ec:09:cb:0b:45:09:e9:b6:79:72:b0:42:97:8c:
a1:5a:a7:77:9b:38:5f:86:b3:25:ea:5b:8a:7a:8c:6c:ea:ac:
09:f2:7d:0a:4a:b8:d2:bb:29:e8:cf:70:72:bc:d0:e2:c9:ae:
09:83:ea:3a:6d:a2:de:8f:6f:9f:6b:d2:5f:1a:4f:eb:3b:01:
a9:7a:c9:db:a0:d5:f5:00:75:00:ce:70:a1:ab:b5:bd:2d:96:
ad:60:a1:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 03:29:52 2025 by rpki-client