Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/VB68_NxgdQj2Y5WDCL3X4OYj1XE.roa
File: VB68_NxgdQj2Y5WDCL3X4OYj1XE.roa (raw, json)
Hash identifier: GGVLCg4ZzjOzmQa3VLe2U5erwrsSskoFVn+mEes2MZ4=
Subject key identifier: 54:1E:BC:FC:DC:60:75:08:F6:63:95:83:08:BD:D7:E0:E6:23:D5:71
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 018570AD953E5D1BDD809EC9B7EFC74DE798
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/VB68_NxgdQj2Y5WDCL3X4OYj1XE.roa
Signing time: Mon 02 Jan 2023 04:11:42 +0000
ROA not before: Mon 02 Jan 2023 04:11:42 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:185:3dcc:d8f/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:ad:95:3e:5d:1b:dd:80:9e:c9:b7:ef:c7:4d:e7:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Jan 2 04:11:42 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=541ebcfcdc607508f663958308bdd7e0e623d571
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:5b:7e:3b:0d:9b:22:6d:3b:a3:cb:ce:f2:98:
e6:f1:0f:79:a7:c3:7d:55:ca:3b:b8:98:4e:0f:ec:
a8:19:ce:fc:9e:b5:48:39:f0:f8:5a:12:13:89:4b:
b4:be:19:43:08:c3:23:29:e4:84:a4:3b:34:d9:e1:
b8:f1:36:25:48:4d:96:0f:e6:88:c3:1c:47:32:96:
5b:81:74:ad:c6:4e:5f:69:d7:50:42:28:f9:50:69:
34:4c:2f:ef:37:3e:4d:c6:c6:6b:68:2e:2c:5c:c7:
0f:f7:ed:1c:8b:cc:d8:db:d5:90:03:f3:4d:17:ba:
58:16:56:1a:08:77:06:86:3d:8e:9c:9a:be:e3:29:
0c:95:64:2e:6c:b3:4e:2e:6b:8e:ed:a5:f8:f4:31:
a3:ba:d0:a5:8c:7d:6b:a8:b1:d5:21:e1:f5:86:76:
20:b1:ee:54:48:f0:1a:95:75:fc:15:a1:8f:07:fb:
d1:13:18:9a:61:ce:7e:1b:e0:59:fb:db:1f:45:6c:
a5:6d:42:93:80:8c:49:1d:e7:4c:4b:29:8e:97:21:
e5:1f:1c:07:de:c5:b7:15:be:21:2c:da:e2:c2:d0:
e0:49:b8:6a:e8:ca:b3:35:6d:09:b2:ce:bf:4b:da:
63:77:0d:87:64:e2:da:c9:de:bf:31:78:e1:69:f7:
8c:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:1E:BC:FC:DC:60:75:08:F6:63:95:83:08:BD:D7:E0:E6:23:D5:71
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/VB68_NxgdQj2Y5WDCL3X4OYj1XE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
12:cd:b1:9b:4a:5a:e8:a7:7a:c2:08:e2:ac:af:d1:2a:66:22:
68:b0:87:98:43:2c:a1:dc:ef:09:aa:26:7e:85:b7:97:be:4f:
58:24:42:0e:98:42:9b:e4:f7:cc:6d:32:83:b6:b7:a8:5e:4d:
a3:b6:1c:dd:18:78:b6:e4:32:eb:74:9d:0b:d3:18:db:6e:de:
6b:fb:ad:15:81:ab:84:2c:f6:9f:9b:36:d1:8f:d5:f2:8c:01:
27:1c:53:97:bd:c3:40:01:c4:29:03:f0:bd:2a:95:ac:34:90:
34:e2:47:95:7a:be:4e:8d:db:e1:b8:41:02:66:6f:b4:c6:92:
6c:47:30:41:38:06:61:5d:86:36:af:30:ad:a1:aa:be:12:1c:
08:e1:5f:41:88:ae:56:70:da:9e:3a:36:68:58:89:7b:9f:eb:
b0:dd:c7:5d:86:bb:07:8f:92:4b:d0:f7:29:e5:ff:fd:25:95:
39:ac:01:a5:8f:99:44:62:57:f7:86:0f:66:ac:77:c3:0a:36:
2b:63:ed:9a:88:fc:18:38:f7:4a:71:f0:d2:51:b5:5c:d3:70:
68:0f:c7:d9:ed:d8:ef:a0:f4:6b:e4:60:22:ee:47:b6:4e:63:
ab:73:2e:fe:fe:a1:7d:8b:67:69:9b:86:1d:6c:ba:7b:12:1f:
ec:44:aa:19
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYVwrZU+XRvdgJ7Jt+/HTeeYMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcyMDQ3YmUxNWIyNzU5MDJkY2Y2MTdkYzNkMGUxNmRjMWYz
MDgwMjIwHhcNMjMwMTAyMDQxMTQyWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1NDFlYmNmY2RjNjA3NTA4ZjY2Mzk1ODMwOGJkZDdlMGU2MjNkNTcxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAglt+Ow2bIm07o8vO8pjm8Q95p8N9
Vco7uJhOD+yoGc78nrVIOfD4WhITiUu0vhlDCMMjKeSEpDs02eG48TYlSE2WD+aI
wxxHMpZbgXStxk5faddQQij5UGk0TC/vNz5NxsZraC4sXMcP9+0ci8zY29WQA/NN
F7pYFlYaCHcGhj2OnJq+4ykMlWQubLNOLmuO7aX49DGjutCljH1rqLHVIeH1hnYg
se5USPAalXX8FaGPB/vRExiaYc5+G+BZ+9sfRWylbUKTgIxJHedMSymOlyHlHxwH
3sW3Fb4hLNriwtDgSbhq6MqzNW0Jss6/S9pjdw2HZOLayd6/MXjhafeMpQIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFFQevPzcYHUI9mOVgwi91+DmI9VxMB8GA1UdIwQY
MBaAFHIEe+FbJ1kC3PYX3D0OFtwfMIAiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMt
MWFiZTNhYzEwYWE2LzEvVkI2OF9OeGdkUWoyWTVXRENMM1g0T1lqMVhFLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMtMWFiZTNhYzEwYWE2
LzEvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBABLNsZtKWuinesII4qyv
0SpmImiwh5hDLKHc7wmqJn6Ft5e+T1gkQg6YQpvk98xtMoO2t6heTaO2HN0YeLbk
Mut0nQvTGNtu3mv7rRWBq4Qs9p+bNtGP1fKMASccU5e9w0ABxCkD8L0qlaw0kDTi
R5V6vk6N2+G4QQJmb7TGkmxHMEE4BmFdhjavMK2hqr4SHAjhX0GIrlZw2p46NmhY
iXuf67Ddx12GuwePkkvQ9ynl//0llTmsAaWPmURiV/eGD2asd8MKNitj7ZqI/Bg4
90px8NJRtVzTcGgPx9nt2O+g9GvkYCLuR7ZOY6tzLv7+oX2LZ2mbhh1sunsSH+xE
qhk=
-----END CERTIFICATE-----
Generated at Wed Apr 30 21:34:45 2025 by rpki-client