Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/veO7Bur09mMudxQ6zcd46lsFpYs.roa
File: veO7Bur09mMudxQ6zcd46lsFpYs.roa (raw, json)
Hash identifier: jgXefgeyrYqZvR3wP8/GiOHMAsx66cn3XBuhzWcch68=
Subject key identifier: BD:E3:BB:06:EA:F4:F6:63:2E:77:14:3A:CD:C7:78:EA:5B:05:A5:8B
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 6BBFC98D
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/veO7Bur09mMudxQ6zcd46lsFpYs.roa
Signing time: Fri 18 Feb 2022 19:08:49 +0000
ROA not before: Fri 18 Feb 2022 19:08:49 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1807731085 (0x6bbfc98d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Feb 18 19:08:49 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=bde3bb06eaf4f6632e77143acdc778ea5b05a58b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:ce:fb:0e:4f:e2:1a:89:a1:6d:2d:70:23:45:
1b:3c:98:29:f8:f9:62:7b:4c:4e:d9:2a:ec:e7:65:
93:01:52:be:98:f3:2f:19:6d:27:56:48:6d:56:5f:
59:f4:b1:56:8d:9c:c5:a8:5b:9a:3b:7a:cf:0f:48:
bd:c0:db:45:0f:59:b0:ba:3b:3d:16:75:4a:8e:08:
7a:95:99:56:a3:77:0f:66:1d:99:a7:da:39:f1:a6:
4f:19:d2:c5:60:ad:cc:2a:6b:3a:22:da:20:bc:18:
9f:4d:8f:11:65:32:9f:87:c2:7d:9a:54:8e:87:f0:
53:56:3d:0c:b8:5d:f8:d9:8e:ea:4f:d7:9a:48:88:
69:c8:aa:fd:9a:fd:d4:1a:e7:7f:42:ca:72:7a:71:
b1:3a:35:e3:68:ed:53:8c:45:5c:87:3c:16:99:3c:
ef:a6:56:71:77:dc:e6:b4:06:a6:a9:d0:4e:fb:fd:
89:b5:c9:56:30:91:50:27:2f:87:5b:60:21:5f:06:
ed:3c:74:21:02:02:68:bb:49:d9:9b:ca:26:a5:e8:
08:f6:56:57:40:d6:33:7a:20:50:50:e0:5d:91:a6:
18:5d:ff:1e:1d:8f:97:0d:ea:60:c6:3f:23:88:7e:
b1:04:82:49:28:2e:25:8c:a2:ea:9e:1c:c6:73:a9:
55:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:E3:BB:06:EA:F4:F6:63:2E:77:14:3A:CD:C7:78:EA:5B:05:A5:8B
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/veO7Bur09mMudxQ6zcd46lsFpYs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
ab:0b:60:7d:05:e6:14:9c:1a:1a:fe:cd:66:b9:8d:b0:a2:f1:
90:d4:d5:56:24:c7:74:d5:ac:e5:62:6b:4e:8e:dc:82:25:87:
29:b9:52:e1:48:bb:b3:27:7e:73:12:70:53:97:11:38:cf:55:
54:36:f0:6d:a0:40:12:83:a5:bf:4c:b9:21:61:01:a1:55:bf:
06:ff:d3:91:4c:c6:43:d5:dc:ec:11:ed:93:62:4c:b4:ff:3c:
f7:62:72:e6:a7:be:fa:51:f6:67:81:3d:90:79:19:9f:93:a8:
aa:ea:b0:71:c9:e9:af:ea:47:34:81:7d:73:ba:c5:e5:e4:36:
ad:45:44:c2:60:a8:ce:71:69:65:88:10:4d:f0:ab:eb:56:b5:
36:56:69:9f:0c:a7:35:b5:d4:11:52:d2:37:a3:6a:69:62:90:
74:10:44:28:55:2b:94:12:a8:1b:6f:4f:67:3e:c6:d3:9f:d3:
b4:2f:86:aa:0e:3c:4c:d3:fb:10:17:7d:2f:0e:79:b7:63:89:
a9:57:a0:2f:01:c3:4c:35:2e:82:d0:04:fd:62:df:57:49:fc:
a9:28:74:68:dd:ec:0e:dc:37:66:1a:b4:c3:29:3f:9d:2b:37:
09:b3:b2:4c:40:7f:70:ad:70:59:f8:24:d6:0a:3a:e7:62:aa:
d4:32:59:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 23:12:54 2025 by rpki-client