Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/vuSWm4EG2WOrviTEdxWdaPQtEHo.roa
File: vuSWm4EG2WOrviTEdxWdaPQtEHo.roa (raw, json)
Hash identifier: tdjaJxFYT/nMLMTtu9fpY5ACnOVsgQxZSrmIY7f72H4=
Subject key identifier: BE:E4:96:9B:81:06:D9:63:AB:BE:24:C4:77:15:9D:68:F4:2D:10:7A
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0182143CE06B767CDE17E03C12FD9DC9AB8A
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/vuSWm4EG2WOrviTEdxWdaPQtEHo.roa
Signing time: Tue 19 Jul 2022 02:15:10 +0000
ROA not before: Tue 19 Jul 2022 02:15:10 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:14:3c:e0:6b:76:7c:de:17:e0:3c:12:fd:9d:c9:ab:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Jul 19 02:15:10 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=bee4969b8106d963abbe24c477159d68f42d107a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:a5:9c:df:c1:b3:5a:79:07:6b:e5:ca:34:ed:
7d:fc:81:6e:2e:ee:39:6f:97:bf:c1:f9:6b:9c:4c:
19:67:f5:a2:70:80:3c:a3:23:d0:bf:4d:23:3f:fe:
c4:e8:2b:63:4f:40:20:12:d1:78:91:0f:03:f6:ba:
91:5b:9e:5d:2f:76:aa:dd:8d:d1:ae:b5:ff:09:69:
e6:78:c2:92:8d:9a:0b:92:8d:98:cd:c7:14:ab:a5:
e3:2d:b5:c8:9b:ed:03:d4:a5:1e:4a:dc:dd:ca:77:
04:7c:0a:b7:35:63:09:a6:d6:25:a5:81:f9:2b:f6:
3b:5d:ac:fa:76:cd:6b:ae:c3:4c:f8:ad:69:a8:f1:
5f:9d:3a:83:31:5f:da:15:65:fe:89:28:40:3f:e7:
5e:da:5f:90:81:35:f5:8b:2d:f4:39:a8:67:42:19:
a9:69:49:5e:0c:0a:fb:cf:4d:37:d3:e1:ed:cf:98:
d2:12:8b:1a:ea:76:e9:c9:61:46:8e:27:4a:bf:92:
79:a2:64:9e:5f:34:f3:c0:1d:ce:74:83:73:4a:f6:
f3:b2:5e:60:83:72:72:0e:10:4d:88:d5:54:8f:6f:
8f:9c:c5:9b:6b:1a:c4:af:2a:ef:87:55:54:45:03:
bc:1f:01:24:b2:80:c7:96:15:8f:2e:78:31:93:9b:
33:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:E4:96:9B:81:06:D9:63:AB:BE:24:C4:77:15:9D:68:F4:2D:10:7A
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/vuSWm4EG2WOrviTEdxWdaPQtEHo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
18:bc:13:d4:a6:94:81:b4:60:8f:45:26:19:6d:89:50:37:71:
ce:47:63:32:a0:37:13:ab:d0:80:b4:17:74:c1:e2:67:c6:e7:
8c:e9:19:c2:9e:ac:c4:03:2c:9c:8a:19:c9:ae:ee:bc:ce:4c:
eb:24:68:6d:ae:88:db:9a:d9:5f:4a:3e:c8:b1:11:bc:e1:5a:
ec:34:9f:8c:ac:a6:5f:3b:89:6b:c5:b8:1f:8a:14:f0:86:6a:
fd:c1:97:27:d9:9b:2e:a8:41:d5:f8:58:fa:0f:05:2f:41:dc:
29:58:cb:b7:14:dd:e2:96:c4:71:ee:b1:11:6a:c5:23:b8:ac:
16:88:09:ca:96:ea:34:a8:37:c1:f8:55:ec:e0:a9:09:6b:6d:
1f:ba:4b:7d:99:f8:c7:e6:95:c3:11:31:4c:5a:93:f1:9b:e0:
12:59:c0:c1:52:65:39:a4:8b:a6:d6:bb:ff:7c:6a:4e:e7:93:
04:f8:91:1e:8d:49:61:7f:58:eb:e7:fd:49:64:55:64:50:c3:
56:11:58:8a:69:4a:0a:b9:fc:6f:55:c4:2b:f1:62:6d:d7:55:
8e:79:03:24:03:f1:01:33:92:b9:fb:31:54:93:7f:34:d4:88:
bf:59:f9:3f:f5:36:71:a3:9e:71:8c:61:32:17:ec:1a:ed:cb:
e1:f3:26:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 06:02:06 2025 by rpki-client