Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/VSYEZYOxO2J3Z--3j6sHk3eVk-I.roa
File: VSYEZYOxO2J3Z--3j6sHk3eVk-I.roa (raw, json)
Hash identifier: +lB8xtu3oWtkB+MZ+QWkNvzgkAh6FzVlkUmxeDXjuOQ=
Subject key identifier: 55:26:04:65:83:B1:3B:62:77:67:EF:B7:8F:AB:07:93:77:95:93:E2
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 01858C555B31C60D32AFEFF15CA9CBEC0F66
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/VSYEZYOxO2J3Z--3j6sHk3eVk-I.roa
Signing time: Sat 07 Jan 2023 13:04:42 +0000
ROA not before: Sat 07 Jan 2023 13:04:42 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:185:8c54:ea6c/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:185:3dcc:d8f/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:8c:55:5b:31:c6:0d:32:af:ef:f1:5c:a9:cb:ec:0f:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Jan 7 13:04:42 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=5526046583b13b627767efb78fab0793779593e2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:45:b0:1a:89:98:9d:a4:54:91:1e:8d:4e:23:
d1:31:b9:6b:92:bb:a0:69:46:98:58:3a:93:ca:bd:
64:15:b8:58:f9:86:0c:d3:c1:9e:a1:cc:fa:08:26:
8b:f0:33:46:03:f4:bb:bc:f3:9e:7d:51:9d:53:b0:
e3:25:7d:71:cc:c7:c8:9e:b3:2d:97:8f:f2:c3:a6:
88:23:15:ed:15:c1:03:57:8b:4f:65:94:b9:8f:41:
c4:51:a7:98:f2:94:1a:03:35:d2:9a:da:8d:4a:f0:
42:4b:13:a9:c2:cb:dc:4e:69:40:78:4f:ba:78:84:
3e:fd:43:fd:b4:2a:fe:ee:d7:62:8d:ca:0e:4a:1d:
f9:70:cf:4f:e8:ff:97:a1:7b:6d:aa:9c:85:d4:c7:
bc:c1:6b:28:e6:15:ae:62:db:ea:64:90:40:fc:b3:
f2:26:4b:f6:8f:13:fc:4e:ce:56:fe:7b:5c:f9:ef:
2e:ed:fa:d6:d9:d6:7c:8e:a0:0c:45:fe:5a:51:f6:
4a:81:c5:24:2d:99:4b:dd:b4:60:55:54:03:e4:e1:
b5:b4:a7:65:54:cb:75:59:51:25:30:4c:8a:24:53:
42:67:30:01:df:96:87:8b:dc:98:ba:6d:cb:5b:24:
d5:f9:29:14:5a:1e:5d:36:8c:79:4a:d2:e8:39:8d:
cb:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:26:04:65:83:B1:3B:62:77:67:EF:B7:8F:AB:07:93:77:95:93:E2
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/VSYEZYOxO2J3Z--3j6sHk3eVk-I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
b4:61:ae:69:7a:df:12:51:1f:8c:b7:67:3b:8f:69:5c:e3:22:
2f:bf:cc:ac:ac:04:7a:ed:64:46:54:46:2d:c2:6c:70:5a:b0:
0b:35:aa:4e:70:90:8c:b7:83:f4:18:57:18:ea:0d:7b:5b:32:
19:f1:92:e7:68:e6:8b:af:44:cf:f4:ff:06:f7:17:0a:2e:bd:
0d:4f:b0:3d:54:17:cb:39:c3:f6:a5:e3:2f:16:4d:ef:21:4d:
e3:d2:e1:2f:0a:dd:c3:eb:89:d0:6e:73:9b:c0:9d:63:f2:12:
de:42:e2:5e:25:b2:a9:5c:ed:ad:e3:30:2b:cc:83:c2:cc:1f:
28:76:33:12:a7:62:b1:00:ee:79:62:50:7d:a8:5f:7d:fa:97:
17:21:ac:19:7a:33:fa:19:e0:e5:3f:57:06:7c:65:94:9c:db:
1a:81:ea:bf:9c:fb:a8:ae:73:83:a8:6f:0f:51:48:0e:c1:c5:
e6:65:87:0a:16:e6:aa:69:7a:5f:84:ff:83:a0:dd:94:a7:7d:
75:51:3d:d2:0f:0e:75:34:28:d8:93:f6:68:02:ca:a4:dd:31:
b5:4c:86:71:c9:c7:30:83:31:01:09:9d:bb:f6:2a:a9:13:c6:
d2:0b:75:27:58:24:29:df:57:a7:a4:1e:2c:1e:ca:1a:2e:64:
41:f0:c3:14
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYWMVVsxxg0yr+/xXKnL7A9mMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcyMDQ3YmUxNWIyNzU5MDJkY2Y2MTdkYzNkMGUxNmRjMWYz
MDgwMjIwHhcNMjMwMTA3MTMwNDQyWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1NTI2MDQ2NTgzYjEzYjYyNzc2N2VmYjc4ZmFiMDc5Mzc3OTU5M2UyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArkWwGomYnaRUkR6NTiPRMblrkrug
aUaYWDqTyr1kFbhY+YYM08Geocz6CCaL8DNGA/S7vPOefVGdU7DjJX1xzMfInrMt
l4/yw6aIIxXtFcEDV4tPZZS5j0HEUaeY8pQaAzXSmtqNSvBCSxOpwsvcTmlAeE+6
eIQ+/UP9tCr+7tdijcoOSh35cM9P6P+XoXttqpyF1Me8wWso5hWuYtvqZJBA/LPy
Jkv2jxP8Ts5W/ntc+e8u7frW2dZ8jqAMRf5aUfZKgcUkLZlL3bRgVVQD5OG1tKdl
VMt1WVElMEyKJFNCZzAB35aHi9yYum3LWyTV+SkUWh5dNox5StLoOY3L/wIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFFUmBGWDsTtid2fvt4+rB5N3lZPiMB8GA1UdIwQY
MBaAFHIEe+FbJ1kC3PYX3D0OFtwfMIAiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMt
MWFiZTNhYzEwYWE2LzEvVlNZRVpZT3hPMkozWi0tM2o2c0hrM2VWay1JLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMtMWFiZTNhYzEwYWE2
LzEvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBALRhrml63xJRH4y3ZzuP
aVzjIi+/zKysBHrtZEZURi3CbHBasAs1qk5wkIy3g/QYVxjqDXtbMhnxkudo5ouv
RM/0/wb3FwouvQ1PsD1UF8s5w/al4y8WTe8hTePS4S8K3cPridBuc5vAnWPyEt5C
4l4lsqlc7a3jMCvMg8LMHyh2MxKnYrEA7nliUH2oX336lxchrBl6M/oZ4OU/VwZ8
ZZSc2xqB6r+c+6iuc4Oobw9RSA7BxeZlhwoW5qppel+E/4Og3ZSnfXVRPdIPDnU0
KNiT9mgCyqTdMbVMhnHJxzCDMQEJnbv2KqkTxtILdSdYJCnfV6ekHiweyhouZEHw
wxQ=
-----END CERTIFICATE-----
Generated at Thu May 1 11:18:15 2025 by rpki-client