Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/VRS9HKvQ0aALg34d_FsTFA9vnO4.roa
File: VRS9HKvQ0aALg34d_FsTFA9vnO4.roa (raw, json)
Hash identifier: 8Spr+g8PJFsWLB7w/ZrcuL5BUt5GC+j0wXyxv7Bv5g0=
Subject key identifier: 55:14:BD:1C:AB:D0:D1:A0:0B:83:7E:1D:FC:5B:13:14:0F:6F:9C:EE
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 68657022
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/VRS9HKvQ0aALg34d_FsTFA9vnO4.roa
Signing time: Sun 06 Feb 2022 10:13:31 +0000
ROA not before: Sun 06 Feb 2022 10:13:31 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:17e:a0dd:2f5b/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1751478306 (0x68657022)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Feb 6 10:13:31 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=5514bd1cabd0d1a00b837e1dfc5b13140f6f9cee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:90:da:0f:1c:29:d6:53:f8:a6:55:fb:54:dc:
35:c1:ad:ea:b9:7f:4d:c8:38:99:ff:ab:fe:f8:5d:
e5:56:d3:6d:84:d7:40:c9:90:b9:41:8d:94:4a:27:
13:3d:3d:30:a3:eb:d9:4c:e7:2a:75:1c:78:b0:af:
05:bc:f4:d9:99:35:a6:41:a2:56:f4:11:a8:d5:2c:
85:00:75:c2:8c:11:fb:3d:17:fd:7c:b5:75:d9:a5:
bc:d6:38:d2:90:93:c1:a0:2d:ac:24:ed:59:f7:86:
cf:e9:7e:58:c6:5b:80:00:19:d2:2a:8b:0c:05:51:
01:a4:fc:2b:1b:31:a0:b3:10:22:55:69:bf:3c:b6:
16:40:12:5f:ff:83:5e:3d:51:b8:8f:8f:55:e6:83:
dc:da:b4:43:b3:fb:bb:b1:93:5f:e5:5e:21:39:5c:
d0:4e:0e:58:b5:7e:6e:fc:80:f2:69:d1:90:22:32:
f4:71:ec:0c:c3:7d:22:ff:9a:b6:03:41:d7:74:d8:
f1:b0:1f:7c:01:a1:7f:ec:33:16:3a:9c:59:ea:aa:
0c:4e:03:b8:60:8d:4c:28:ac:a8:10:e6:a9:d1:f9:
3a:81:f7:f6:95:8c:93:d9:ff:c2:b0:7d:24:85:81:
77:08:80:22:1d:b5:2c:70:b4:11:b4:36:32:cb:7d:
f8:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:14:BD:1C:AB:D0:D1:A0:0B:83:7E:1D:FC:5B:13:14:0F:6F:9C:EE
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/VRS9HKvQ0aALg34d_FsTFA9vnO4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
71:c2:e2:b2:e3:63:03:ed:6c:0e:78:bb:f9:68:49:70:ad:42:
37:13:6e:11:da:74:a2:3e:5a:99:f0:3f:5b:ec:ff:bf:25:49:
93:ca:5d:98:ee:48:52:d7:02:05:d1:62:5a:44:ff:ca:e2:79:
9e:d3:07:ec:18:1b:bf:b0:6b:70:a0:d3:50:bc:91:13:04:a1:
c4:b9:9a:47:80:64:c2:0c:b6:28:34:ca:4f:86:1a:fe:88:0d:
25:5f:f0:ef:95:7e:b9:1a:c3:5e:cc:08:4b:36:cf:97:0a:0e:
e4:b3:b9:5e:71:40:8c:5b:03:12:e2:44:5e:fa:6e:40:74:a0:
49:e2:0d:62:d5:5a:95:f7:9e:5d:99:87:57:36:10:3d:2e:af:
9d:2f:57:af:b1:22:27:11:be:fa:11:e9:64:4f:84:74:f4:d8:
34:1a:2e:5b:6c:cc:52:8d:1b:01:b5:90:df:a4:8b:e0:0b:68:
5d:51:7b:b3:60:ca:2d:04:9e:11:61:e5:bb:73:d5:00:fb:06:
1b:a6:c3:29:d4:9e:ec:08:60:20:fd:49:0b:23:89:04:4b:f9:
e8:49:79:49:9e:e3:ce:1d:87:b5:62:e1:69:55:58:13:de:6c:
a8:95:eb:ff:41:76:2a:6a:d4:c0:91:e7:fc:f4:f2:e6:9f:0b:
79:8a:c9:21
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgIEaGVwIjANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg3
MjA0N2JlMTViMjc1OTAyZGNmNjE3ZGMzZDBlMTZkYzFmMzA4MDIyMB4XDTIyMDIw
NjEwMTMzMVoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoNTUxNGJkMWNhYmQw
ZDFhMDBiODM3ZTFkZmM1YjEzMTQwZjZmOWNlZTCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAKyQ2g8cKdZT+KZV+1TcNcGt6rl/Tcg4mf+r/vhd5VbTbYTX
QMmQuUGNlEonEz09MKPr2UznKnUceLCvBbz02Zk1pkGiVvQRqNUshQB1wowR+z0X
/Xy1ddmlvNY40pCTwaAtrCTtWfeGz+l+WMZbgAAZ0iqLDAVRAaT8KxsxoLMQIlVp
vzy2FkASX/+DXj1RuI+PVeaD3Nq0Q7P7u7GTX+VeITlc0E4OWLV+bvyA8mnRkCIy
9HHsDMN9Iv+atgNB13TY8bAffAGhf+wzFjqcWeqqDE4DuGCNTCisqBDmqdH5OoH3
9pWMk9n/wrB9JIWBdwiAIh21LHC0EbQ2Mst9+FcCAwEAAaOCAhowggIWMB0GA1Ud
DgQWBBRVFL0cq9DRoAuDfh38WxMUD2+c7jAfBgNVHSMEGDAWgBRyBHvhWydZAtz2
F9w9DhbcHzCAIjAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L2NnUjc0VnNuV1FMYzloZmNQUTRXM0I4d2dDSS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvNWUvNzk4NDQ3LTIxZjQtNDVhYi05OWRjLTFhYmUzYWMxMGFhNi8x
L1ZSUzlIS3ZRMGFBTGczNGRfRnNURkE5dm5PNC5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNWUv
Nzk4NDQ3LTIxZjQtNDVhYi05OWRjLTFhYmUzYWMxMGFhNi8xL2NnUjc0VnNuV1FM
YzloZmNQUTRXM0I4d2dDSS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAw
BggrBgEFBQcBBwEB/wQhMB8wDAQCAAEwBgMEA8EAGDAPBAIAAjAJAwcAIAEGfABk
MA0GCSqGSIb3DQEBCwUAA4IBAQBxwuKy42MD7WwOeLv5aElwrUI3E24R2nSiPlqZ
8D9b7P+/JUmTyl2Y7khS1wIF0WJaRP/K4nme0wfsGBu/sGtwoNNQvJETBKHEuZpH
gGTCDLYoNMpPhhr+iA0lX/DvlX65GsNezAhLNs+XCg7ks7lecUCMWwMS4kRe+m5A
dKBJ4g1i1VqV955dmYdXNhA9Lq+dL1evsSInEb76EelkT4R09Ng0Gi5bbMxSjRsB
tZDfpIvgC2hdUXuzYMotBJ4RYeW7c9UA+wYbpsMp1J7sCGAg/UkLI4kES/noSXlJ
nuPOHYe1YuFpVVgT3myolev/QXYqatTAkef89PLmnwt5iskh
-----END CERTIFICATE-----
Generated at Fri May 2 15:37:00 2025 by rpki-client