Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/VPsg8LPdWPzKJXyZe8NikduoEaI.roa
File: VPsg8LPdWPzKJXyZe8NikduoEaI.roa (raw, json)
Hash identifier: sXABlQqeAvT26UqVsXVvFNqUKdUG2nQjDGVKTCt1KA8=
Subject key identifier: 54:FB:20:F0:B3:DD:58:FC:CA:25:7C:99:7B:C3:62:91:DB:A8:11:A2
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0186D20F59BE8948DA1131208C750ECF3D3C
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/VPsg8LPdWPzKJXyZe8NikduoEaI.roa
Signing time: Sat 11 Mar 2023 19:04:26 +0000
ROA not before: Sat 11 Mar 2023 19:04:26 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:d2:0f:59:be:89:48:da:11:31:20:8c:75:0e:cf:3d:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Mar 11 19:04:26 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=54fb20f0b3dd58fcca257c997bc36291dba811a2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:11:58:2c:aa:21:05:e3:d6:89:5f:c1:4e:b8:
18:25:cf:b0:0b:a6:c7:9b:0a:91:51:b8:fc:9e:f4:
9f:50:22:a0:3a:96:24:d4:33:a8:4b:0a:6b:71:5d:
71:98:f2:1a:c2:47:b8:2e:88:75:f6:80:d6:b9:58:
77:13:79:d4:bd:c8:83:7a:3b:9e:5c:2f:8e:89:27:
9b:4b:7a:ca:65:04:a8:b4:40:5a:a8:1c:28:71:0d:
b1:8b:10:c7:a6:03:39:ff:18:14:f5:07:8e:2e:d1:
df:e8:50:4c:1c:b4:73:7d:aa:3f:b2:a8:94:2e:cf:
b0:be:dd:fe:3f:49:df:b3:63:da:6d:d2:2d:f9:c5:
b8:b8:b3:29:ec:08:bb:f1:84:4b:31:b1:69:87:f1:
c2:31:13:66:12:d9:b1:5d:e3:03:98:65:9f:c8:c6:
8a:da:8e:c2:e2:f0:fb:91:16:78:8e:5b:83:32:49:
07:d0:a2:7e:73:29:9b:55:5f:23:87:1f:c9:3f:fb:
3d:f6:9b:80:ab:1a:96:0a:80:56:3e:0c:bd:2f:24:
7f:c2:7b:ac:3d:44:a3:e9:df:e2:68:3b:6c:ba:d3:
9b:9f:55:2b:14:f0:8e:cf:39:80:49:ac:c2:c4:af:
6e:e0:7c:c5:ed:2d:1a:e9:9a:a4:36:50:d3:d2:8c:
68:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:FB:20:F0:B3:DD:58:FC:CA:25:7C:99:7B:C3:62:91:DB:A8:11:A2
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/VPsg8LPdWPzKJXyZe8NikduoEaI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
5e:7c:50:96:34:e2:58:f3:8c:5e:5b:99:7e:7f:b7:7f:81:6d:
9f:b6:5e:28:32:19:a4:9d:24:ef:c6:7e:e9:7b:d7:74:13:b1:
77:7e:09:1d:5b:a5:1f:35:c5:9f:b7:d1:d5:79:4e:70:da:1e:
ab:e9:d5:9b:dc:05:eb:73:d3:ae:f1:ae:67:53:1d:f8:27:ea:
6b:ca:3e:7e:67:01:38:fe:32:ba:cc:93:c8:3c:5a:fc:73:a7:
5a:cd:75:c1:88:fe:42:e8:f5:74:1a:62:61:e4:a7:07:be:2f:
50:e4:21:b1:da:2f:cb:82:8b:5f:f5:35:73:ee:8d:08:8b:0b:
c2:eb:21:95:4d:e9:9f:14:82:bf:38:6f:1f:77:b2:ab:20:8f:
47:0a:ea:54:93:a3:81:fc:67:dc:19:d6:8d:9a:ef:01:b9:69:
84:59:8a:a3:e6:65:19:59:df:56:f4:73:a2:2d:64:f6:f7:e3:
fe:cd:35:b0:1c:59:d6:56:bd:7f:87:07:b2:e1:33:e7:f9:08:
44:71:d1:e2:7f:10:da:c4:bb:0c:1b:fe:63:dc:48:6b:f4:e0:
e2:0a:45:b6:c7:53:fe:e7:d1:a2:0d:f9:16:8e:b8:fa:1d:9f:
5d:63:2d:c7:0f:01:e4:f5:70:9d:5d:10:45:15:7c:57:e9:be:
03:3f:21:44
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYbSD1m+iUjaETEgjHUOzz08MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcyMDQ3YmUxNWIyNzU5MDJkY2Y2MTdkYzNkMGUxNmRjMWYz
MDgwMjIwHhcNMjMwMzExMTkwNDI2WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1NGZiMjBmMGIzZGQ1OGZjY2EyNTdjOTk3YmMzNjI5MWRiYTgxMWEyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqBFYLKohBePWiV/BTrgYJc+wC6bH
mwqRUbj8nvSfUCKgOpYk1DOoSwprcV1xmPIawke4Loh19oDWuVh3E3nUvciDejue
XC+OiSebS3rKZQSotEBaqBwocQ2xixDHpgM5/xgU9QeOLtHf6FBMHLRzfao/sqiU
Ls+wvt3+P0nfs2PabdIt+cW4uLMp7Ai78YRLMbFph/HCMRNmEtmxXeMDmGWfyMaK
2o7C4vD7kRZ4jluDMkkH0KJ+cymbVV8jhx/JP/s99puAqxqWCoBWPgy9LyR/wnus
PUSj6d/iaDtsutObn1UrFPCOzzmASazCxK9u4HzF7S0a6ZqkNlDT0oxoWwIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFFT7IPCz3Vj8yiV8mXvDYpHbqBGiMB8GA1UdIwQY
MBaAFHIEe+FbJ1kC3PYX3D0OFtwfMIAiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMt
MWFiZTNhYzEwYWE2LzEvVlBzZzhMUGRXUHpLSlh5WmU4TmlrZHVvRWFJLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMtMWFiZTNhYzEwYWE2
LzEvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBAF58UJY04ljzjF5bmX5/
t3+BbZ+2XigyGaSdJO/Gful713QTsXd+CR1bpR81xZ+30dV5TnDaHqvp1ZvcBetz
067xrmdTHfgn6mvKPn5nATj+MrrMk8g8Wvxzp1rNdcGI/kLo9XQaYmHkpwe+L1Dk
IbHaL8uCi1/1NXPujQiLC8LrIZVN6Z8Ugr84bx93sqsgj0cK6lSTo4H8Z9wZ1o2a
7wG5aYRZiqPmZRlZ31b0c6ItZPb34/7NNbAcWdZWvX+HB7LhM+f5CERx0eJ/ENrE
uwwb/mPcSGv04OIKRbbHU/7n0aIN+RaOuPodn11jLccPAeT1cJ1dEEUVfFfpvgM/
IUQ=
-----END CERTIFICATE-----
Generated at Thu May 1 05:33:04 2025 by rpki-client