Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/vxbth6x7HChxspJNVhgEn-gGdu8.roa
File: vxbth6x7HChxspJNVhgEn-gGdu8.roa (raw, json)
Hash identifier: rBBis5vVplHHGbSQO7ZcAOS10c89KXebRFrGzicOql8=
Subject key identifier: BF:16:ED:87:AC:7B:1C:28:71:B2:92:4D:56:18:04:9F:E8:06:76:EF
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0181F589FCF57E6F453D9B143F1B31C1F133
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/vxbth6x7HChxspJNVhgEn-gGdu8.roa
Signing time: Wed 13 Jul 2022 03:11:09 +0000
ROA not before: Wed 13 Jul 2022 03:11:09 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:81:f5:89:fc:f5:7e:6f:45:3d:9b:14:3f:1b:31:c1:f1:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Jul 13 03:11:09 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=bf16ed87ac7b1c2871b2924d5618049fe80676ef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:af:3c:eb:fb:90:92:75:2b:3a:d2:72:f3:9e:
65:a5:a6:ec:45:47:79:a2:39:9a:dd:73:13:b7:13:
53:ad:99:f9:f9:d6:9f:02:c5:7c:4f:ae:eb:3d:82:
fb:0a:e1:19:31:3b:44:fd:dc:01:bd:83:e7:d7:62:
a1:5e:1c:37:54:6b:87:62:64:71:1d:3d:47:9b:2a:
a0:43:88:5d:d2:69:07:83:2d:9a:f5:e7:1a:cb:11:
82:70:15:af:d6:cf:72:53:92:cb:ab:eb:11:69:aa:
54:ea:f5:a8:b2:6b:a4:12:8a:aa:70:16:9a:6d:23:
b9:00:94:d4:19:8a:21:ff:e6:d4:4d:10:e8:43:9d:
48:31:e1:76:3b:c9:e2:cd:96:38:51:08:53:2b:e5:
00:a4:1e:67:a2:b1:ae:65:5c:e9:03:9d:e5:b9:b6:
8c:63:8f:ce:b5:5e:fd:05:11:f0:d8:cd:b9:c5:11:
0c:7e:a5:e3:d8:31:98:6d:58:a3:8a:d0:85:31:c4:
f6:30:2c:95:b0:92:0c:e5:80:c8:4e:2e:af:9c:d9:
a9:a4:4d:8e:5c:ee:d7:c9:76:e6:a5:6f:5d:c7:d8:
b9:e1:15:95:51:16:b3:4e:88:af:d0:02:a5:4c:51:
0a:8b:1f:70:28:47:9a:dc:d7:73:7b:1a:ca:14:52:
ed:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:16:ED:87:AC:7B:1C:28:71:B2:92:4D:56:18:04:9F:E8:06:76:EF
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/vxbth6x7HChxspJNVhgEn-gGdu8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
20:ec:ae:1e:a6:a2:ad:92:b0:b6:a0:e9:00:3e:fd:41:ce:ac:
71:76:29:1f:e8:d8:ad:fd:3b:f0:90:f9:41:a6:45:30:3d:08:
1b:bc:e0:93:16:68:bf:d2:ff:ed:0f:25:bc:f8:34:7a:59:aa:
72:bd:a9:ab:e5:fd:81:a4:ff:3b:29:aa:18:f5:12:d1:b5:a2:
c6:2a:89:a8:e1:7e:67:db:a6:51:8b:75:bd:c0:7c:8e:f2:bb:
c6:2c:c7:57:63:8c:e9:d0:c2:e8:9c:4a:02:24:e9:72:f7:9e:
26:54:df:59:86:9c:66:92:45:8d:f3:8b:45:3a:ca:b6:75:72:
d0:b2:d5:e3:0f:41:88:8e:8c:cb:b1:69:4b:5c:23:20:62:a0:
32:ff:92:f2:38:7e:eb:37:f6:8b:89:dd:26:43:83:01:c8:e5:
7a:24:4a:cc:10:71:4c:2b:ff:c2:45:4f:8c:6d:03:19:dc:fd:
44:2f:b2:01:fe:3c:da:e6:b2:cc:9d:a7:cf:4f:2d:bc:f2:2e:
a1:b3:56:51:52:3c:58:2c:5e:9f:38:21:4e:6b:7f:e1:2a:d8:
93:37:49:47:38:3a:90:53:2c:d7:19:11:df:9d:b6:99:10:fb:
b2:07:aa:7a:78:b4:56:83:3d:c1:a0:3a:af:59:2c:85:f4:43:
04:0d:23:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 02:39:47 2025 by rpki-client