Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/VIOOY7u1evnBUq8AaBijg2843vs.roa
File: VIOOY7u1evnBUq8AaBijg2843vs.roa (raw, json)
Hash identifier: 3G6eEuq+zHS3zgtwQ1id+LWEsuw4pgfLPiDRUg0JBC8=
Subject key identifier: 54:83:8E:63:BB:B5:7A:F9:C1:52:AF:00:68:18:A3:83:6F:38:DE:FB
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0186958C9DA41E3B5140978D704D2BEB9CAF
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/VIOOY7u1evnBUq8AaBijg2843vs.roa
Signing time: Tue 28 Feb 2023 01:04:25 +0000
ROA not before: Tue 28 Feb 2023 01:04:25 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:958c:92bb/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:95:8c:9d:a4:1e:3b:51:40:97:8d:70:4d:2b:eb:9c:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Feb 28 01:04:25 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=54838e63bbb57af9c152af006818a3836f38defb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:af:a7:9a:6c:85:e6:ac:fc:1c:34:ff:49:4f:
31:04:f1:47:d1:fe:8e:35:30:d7:10:5a:b7:a9:9f:
f5:10:e5:bf:73:9d:64:5c:2c:3d:17:54:f8:0f:f7:
10:f5:d5:24:4a:6d:67:b9:b9:f1:ec:2f:24:fe:1a:
5b:d0:45:ac:2b:cd:ed:84:a0:c4:87:ae:7a:d8:5e:
26:02:bb:e9:ec:c9:bf:20:47:64:38:cc:dd:81:ee:
e5:4f:a9:f8:ee:42:d4:b8:c5:bc:5c:38:32:d8:ca:
2c:1a:19:ae:e3:9b:fd:4d:18:eb:4b:4b:7c:d4:0d:
5c:1e:af:02:63:69:80:21:dd:4b:47:10:f7:61:53:
0d:95:d0:8b:f3:69:24:cd:c7:a3:2d:ae:ca:e1:71:
f1:81:b8:49:8c:d8:0e:d6:c2:ae:b0:98:46:64:6a:
6a:01:b3:9b:57:03:e2:3d:8f:99:31:65:67:0e:47:
f7:3a:f9:6e:89:96:02:cf:3e:aa:ce:09:dd:7f:b0:
3e:b4:4b:cd:1d:ab:ad:96:3e:01:f9:0a:3b:6c:64:
db:b0:2f:b8:8a:ad:5b:67:dd:d0:5b:d9:13:b8:02:
5b:e4:db:6b:5b:52:84:7c:0f:78:6e:7b:6b:06:56:
b2:16:32:bb:5d:15:65:1a:8d:67:16:27:6b:a2:36:
19:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:83:8E:63:BB:B5:7A:F9:C1:52:AF:00:68:18:A3:83:6F:38:DE:FB
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/VIOOY7u1evnBUq8AaBijg2843vs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
43:08:0c:ca:43:5e:10:4f:4d:5e:cd:4f:de:f1:e5:c3:d3:ef:
5a:03:32:d6:8c:f5:d0:91:d5:54:8d:e0:b7:fb:83:7d:58:d8:
8e:6c:f9:b6:e2:c7:f9:d5:fe:0c:b0:32:f7:58:e3:ba:b4:60:
4b:b1:ba:f9:bf:9f:bb:52:56:9c:e4:92:85:76:2d:32:3f:16:
85:a6:7c:aa:9c:c3:ee:3a:37:96:ab:3d:cd:9c:bd:ce:e8:63:
29:d4:c2:39:5b:51:57:83:3f:4a:23:66:fb:a0:b2:ec:13:e1:
0a:d4:c0:f9:6e:7f:af:c9:e2:5c:d0:10:b5:8d:33:5d:d3:48:
fb:65:3a:5a:01:1a:b1:7b:c6:c0:c6:b5:05:85:bc:f7:73:68:
db:3c:2e:8a:7a:72:95:cc:9f:e8:7e:0d:df:2c:9a:04:9f:85:
61:0c:5e:ad:c4:67:2b:9a:b2:c0:18:8d:33:71:92:7b:c5:db:
a1:a3:36:d1:95:8d:38:b9:08:3a:ca:4e:a0:b6:9e:70:c8:d1:
b3:e4:7d:da:13:54:77:e8:45:d9:cb:c1:34:d6:94:be:0f:5a:
43:58:9a:61:d6:32:48:30:ae:ab:27:38:d6:b5:f7:aa:d3:8d:
69:86:75:10:0f:35:75:62:2d:9c:86:27:23:e8:c8:93:e0:87:
20:10:fe:c5
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYaVjJ2kHjtRQJeNcE0r65yvMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcyMDQ3YmUxNWIyNzU5MDJkY2Y2MTdkYzNkMGUxNmRjMWYz
MDgwMjIwHhcNMjMwMjI4MDEwNDI1WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1NDgzOGU2M2JiYjU3YWY5YzE1MmFmMDA2ODE4YTM4MzZmMzhkZWZiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgK+nmmyF5qz8HDT/SU8xBPFH0f6O
NTDXEFq3qZ/1EOW/c51kXCw9F1T4D/cQ9dUkSm1nubnx7C8k/hpb0EWsK83thKDE
h6562F4mArvp7Mm/IEdkOMzdge7lT6n47kLUuMW8XDgy2MosGhmu45v9TRjrS0t8
1A1cHq8CY2mAId1LRxD3YVMNldCL82kkzcejLa7K4XHxgbhJjNgO1sKusJhGZGpq
AbObVwPiPY+ZMWVnDkf3OvluiZYCzz6qzgndf7A+tEvNHautlj4B+Qo7bGTbsC+4
iq1bZ93QW9kTuAJb5NtrW1KEfA94bntrBlayFjK7XRVlGo1nFidrojYZlQIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFFSDjmO7tXr5wVKvAGgYo4NvON77MB8GA1UdIwQY
MBaAFHIEe+FbJ1kC3PYX3D0OFtwfMIAiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMt
MWFiZTNhYzEwYWE2LzEvVklPT1k3dTFldm5CVXE4QWFCaWpnMjg0M3ZzLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMtMWFiZTNhYzEwYWE2
LzEvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBAEMIDMpDXhBPTV7NT97x
5cPT71oDMtaM9dCR1VSN4Lf7g31Y2I5s+bbix/nV/gywMvdY47q0YEuxuvm/n7tS
VpzkkoV2LTI/FoWmfKqcw+46N5arPc2cvc7oYynUwjlbUVeDP0ojZvugsuwT4QrU
wPluf6/J4lzQELWNM13TSPtlOloBGrF7xsDGtQWFvPdzaNs8Lop6cpXMn+h+Dd8s
mgSfhWEMXq3EZyuassAYjTNxknvF26GjNtGVjTi5CDrKTqC2nnDI0bPkfdoTVHfo
RdnLwTTWlL4PWkNYmmHWMkgwrqsnONa196rTjWmGdRAPNXViLZyGJyPoyJPghyAQ
/sU=
-----END CERTIFICATE-----
Generated at Sun May 4 11:58:55 2025 by rpki-client