Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/VCWUYcHTGFTsdXDDG5utDM51oEA.roa
File: VCWUYcHTGFTsdXDDG5utDM51oEA.roa (raw, json)
Hash identifier: AvSGCjMH+gmqffbQgYG6TfFQqN/Juo5YXGVcarJSWFk=
Subject key identifier: 54:25:94:61:C1:D3:18:54:EC:75:70:C3:1B:9B:AD:0C:CE:75:A0:40
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0189522C28D2DC6A0D5C4DEC5338F28954D1
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/VCWUYcHTGFTsdXDDG5utDM51oEA.roa
Signing time: Fri 14 Jul 2023 02:12:53 +0000
ROA not before: Fri 14 Jul 2023 02:12:53 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:188:5fe2:b396/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:187:4695:a68a/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:188:7858:a003/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64:ffff:0:187:fa9a:b088/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:187:b2b8:a7dd/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:52:2c:28:d2:dc:6a:0d:5c:4d:ec:53:38:f2:89:54:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Jul 14 02:12:53 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=54259461c1d31854ec7570c31b9bad0cce75a040
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:27:7e:ab:25:b0:f8:f0:f9:80:12:b5:f1:6f:
94:63:f2:a5:81:87:57:5e:52:9a:06:5e:c9:51:3d:
86:6a:b0:0b:a6:f5:b1:17:ce:ea:74:80:5d:da:b0:
78:83:50:f4:e3:2f:4f:7f:09:b8:46:1b:94:54:5e:
0b:23:f1:28:aa:e7:42:e6:c7:6f:c0:89:c2:fe:39:
83:b4:92:bc:14:d3:34:5c:14:9f:f8:a2:eb:88:c7:
87:cd:48:47:9c:a2:af:86:27:69:2e:24:a4:61:ef:
ef:14:74:87:c5:02:f0:17:19:53:68:55:13:a4:1b:
86:34:b2:24:b2:c0:1d:43:59:b0:99:53:13:b4:62:
25:8a:b8:01:56:31:88:bf:65:f9:5d:e9:36:a8:c0:
15:1b:fe:69:02:e2:de:4b:35:3c:2b:49:b3:8f:59:
8e:ff:10:8a:98:45:57:06:37:4f:64:29:5a:f5:70:
09:df:b8:7a:38:20:09:30:5b:14:78:03:1e:67:46:
e8:e7:6e:3c:4e:ea:ad:c1:57:36:db:07:a8:60:b7:
02:29:3d:60:51:a3:6a:e0:98:98:cd:f1:b6:1e:f5:
8c:75:b4:23:b3:2a:4c:41:b9:14:15:23:6a:3c:1a:
78:86:fd:a1:9b:98:71:6f:6b:09:a2:4a:ba:d3:cb:
61:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:25:94:61:C1:D3:18:54:EC:75:70:C3:1B:9B:AD:0C:CE:75:A0:40
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/VCWUYcHTGFTsdXDDG5utDM51oEA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
9a:a0:22:f8:43:e2:0b:fa:39:d6:03:24:13:fc:8d:69:59:cd:
72:b2:08:20:43:30:8e:e7:fd:45:6e:bb:bb:a0:be:38:7d:d0:
1b:12:16:fd:7f:05:b6:8e:15:93:e2:51:03:94:52:fa:79:f3:
b7:d3:60:5b:fc:c4:60:24:49:b6:a5:af:6f:32:6a:c8:2d:c3:
25:cc:05:04:fe:54:35:22:f6:a9:5d:95:60:52:b2:72:da:eb:
a9:7e:99:4e:a0:a0:5a:a7:a5:41:cf:15:d5:7b:07:eb:f1:dc:
2d:2d:28:7d:79:8b:75:1e:32:ab:ca:f4:a1:71:18:97:73:9c:
5d:5c:97:94:2a:a8:ba:44:ff:70:a4:9c:55:96:5a:9d:86:85:
77:e7:9c:00:b1:c8:95:dc:a6:6e:ec:a8:38:34:f1:8a:68:5d:
5d:e2:d5:a1:84:b7:f7:82:80:60:8a:e4:12:a7:b4:1d:19:e4:
99:ba:46:d0:e8:46:08:bd:c8:86:0b:f9:65:49:18:2a:ea:40:
9f:a7:28:29:9d:50:f5:7e:e7:5f:3c:77:86:2d:0d:7f:cd:8b:
dd:08:07:ea:16:4b:8b:6b:ed:67:bd:b7:01:66:a9:64:76:23:
59:47:c6:2a:62:a4:4b:fe:55:29:69:7f:f5:da:3f:ce:e2:f3:
d3:33:50:04
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYlSLCjS3GoNXE3sUzjyiVTRMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcyMDQ3YmUxNWIyNzU5MDJkY2Y2MTdkYzNkMGUxNmRjMWYz
MDgwMjIwHhcNMjMwNzE0MDIxMjUzWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1NDI1OTQ2MWMxZDMxODU0ZWM3NTcwYzMxYjliYWQwY2NlNzVhMDQwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkSd+qyWw+PD5gBK18W+UY/KlgYdX
XlKaBl7JUT2GarALpvWxF87qdIBd2rB4g1D04y9Pfwm4RhuUVF4LI/EoqudC5sdv
wInC/jmDtJK8FNM0XBSf+KLriMeHzUhHnKKvhidpLiSkYe/vFHSHxQLwFxlTaFUT
pBuGNLIkssAdQ1mwmVMTtGIlirgBVjGIv2X5Xek2qMAVG/5pAuLeSzU8K0mzj1mO
/xCKmEVXBjdPZCla9XAJ37h6OCAJMFsUeAMeZ0bo5248TuqtwVc22weoYLcCKT1g
UaNq4JiYzfG2HvWMdbQjsypMQbkUFSNqPBp4hv2hm5hxb2sJokq608thZQIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFFQllGHB0xhU7HVwwxubrQzOdaBAMB8GA1UdIwQY
MBaAFHIEe+FbJ1kC3PYX3D0OFtwfMIAiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMt
MWFiZTNhYzEwYWE2LzEvVkNXVVljSFRHRlRzZFhEREc1dXRETTUxb0VBLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMtMWFiZTNhYzEwYWE2
LzEvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBAJqgIvhD4gv6OdYDJBP8
jWlZzXKyCCBDMI7n/UVuu7ugvjh90BsSFv1/BbaOFZPiUQOUUvp587fTYFv8xGAk
Sbalr28yasgtwyXMBQT+VDUi9qldlWBSsnLa66l+mU6goFqnpUHPFdV7B+vx3C0t
KH15i3UeMqvK9KFxGJdznF1cl5QqqLpE/3CknFWWWp2GhXfnnACxyJXcpm7sqDg0
8YpoXV3i1aGEt/eCgGCK5BKntB0Z5Jm6RtDoRgi9yIYL+WVJGCrqQJ+nKCmdUPV+
5188d4YtDX/Ni90IB+oWS4tr7We9twFmqWR2I1lHxipipEv+VSlpf/XaP87i89Mz
UAQ=
-----END CERTIFICATE-----
Generated at Thu May 1 01:25:54 2025 by rpki-client