Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/vjLCQpGyWg5KmnlQkcOtRV-m2zk.roa
File: vjLCQpGyWg5KmnlQkcOtRV-m2zk.roa (raw, json)
Hash identifier: s9UeFXG46VAGCb1Ffqunlmmgcoe5kN5qtkPNMu8DUTw=
Subject key identifier: BE:32:C2:42:91:B2:5A:0E:4A:9A:79:50:91:C3:AD:45:5F:A6:DB:39
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 01864E8AE4E0B66BBFA07868D3D3C0FD5360
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/vjLCQpGyWg5KmnlQkcOtRV-m2zk.roa
Signing time: Tue 14 Feb 2023 06:09:30 +0000
ROA not before: Tue 14 Feb 2023 06:09:30 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:4e:8a:e4:e0:b6:6b:bf:a0:78:68:d3:d3:c0:fd:53:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Feb 14 06:09:30 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=be32c24291b25a0e4a9a795091c3ad455fa6db39
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:3e:ec:d3:1b:99:48:28:ba:88:77:ed:fa:df:
bf:66:62:7c:6d:c8:99:2d:db:71:c2:0b:27:dd:3c:
bb:22:99:bf:a2:36:2d:0f:3b:50:43:52:8a:2c:32:
f4:71:0e:68:fd:07:59:f8:07:6d:28:94:68:80:7a:
3a:21:df:1f:91:56:43:f1:19:d2:1e:1b:22:68:e4:
af:10:2b:1b:b7:c0:37:55:fd:f7:fd:b5:90:7a:b6:
b9:3b:52:e1:72:69:36:60:e4:30:e8:7f:ef:f5:32:
1d:df:87:af:e8:db:28:80:f6:09:5d:b0:93:a3:ec:
87:eb:48:0d:1c:4f:cf:a5:17:c1:2e:d4:22:93:a3:
c0:8c:e2:ec:af:1c:ab:9d:77:17:71:48:09:21:1f:
8f:ae:ab:86:1d:b6:61:89:70:58:76:6f:df:1c:f8:
e3:a4:7c:c3:d6:1c:72:e6:86:81:0c:73:ae:e4:94:
64:e9:3e:4c:75:6c:bc:f9:89:12:c5:23:fe:31:9a:
1a:5a:bc:2e:af:03:8f:1f:39:61:39:81:cb:98:3b:
1d:d1:2f:76:5a:36:d1:8d:de:8b:f5:ff:0c:b7:a0:
96:78:1a:70:73:2e:6e:b5:83:1c:9c:01:ad:c0:08:
d9:7c:67:9d:06:ed:27:25:27:13:b6:2a:75:ea:81:
c7:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:32:C2:42:91:B2:5A:0E:4A:9A:79:50:91:C3:AD:45:5F:A6:DB:39
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/vjLCQpGyWg5KmnlQkcOtRV-m2zk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
a0:be:70:a5:a2:75:ec:b0:7d:5c:0e:a8:81:f1:f7:01:59:a8:
83:9e:20:ce:f0:ac:84:fa:36:96:0d:9a:9a:13:de:f6:1b:29:
1c:3a:1a:e3:75:7a:7d:60:a9:8c:05:9a:ca:06:cd:ba:eb:c1:
9e:ac:9c:49:5e:28:ca:d7:81:ff:3e:4b:07:86:3d:f2:be:94:
ea:5a:e4:91:93:39:a1:7e:c3:9b:f8:53:d8:5e:9a:6b:15:cf:
27:bd:bc:06:ea:1b:69:1b:e5:31:e9:0a:b7:6d:75:5c:a1:9a:
2a:a9:05:5c:35:fe:9d:44:3e:83:34:f2:73:84:13:eb:7b:6b:
b9:3e:3c:6f:91:c0:9e:73:b5:89:e0:30:22:de:09:68:d4:d8:
e3:22:7a:de:f2:fa:3a:d4:a1:4b:da:40:8d:6d:dd:da:51:c6:
0b:15:01:9b:36:e6:7a:7b:7b:44:28:45:6f:c4:b6:72:ce:7c:
bb:e4:60:e9:4b:1e:38:67:b8:16:24:9c:f8:9f:c6:10:d3:53:
2e:80:78:ca:ae:80:c3:19:22:f9:80:7b:53:e6:ba:47:8b:2d:
86:63:2a:a1:6d:e2:2d:26:ba:0a:df:f1:e7:b1:1d:64:86:3d:
68:3c:d4:14:f2:43:ac:96:e9:95:7f:c7:e3:6b:5a:a7:05:93:
93:49:fd:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 12 06:28:43 2025 by rpki-client