Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/VU-oatnbSZztGuIkqcoWC8P-f-A.roa
File: VU-oatnbSZztGuIkqcoWC8P-f-A.roa (raw, json)
Hash identifier: GX0i2HOHbF++GLdvupLj5GVt0zRJlJqho5YPWbifrMI=
Subject key identifier: 55:4F:A8:6A:D9:DB:49:9C:ED:1A:E2:24:A9:CA:16:0B:C3:FE:7F:E0
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 018998575A2B22088AD8872B619BB0128514
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/VU-oatnbSZztGuIkqcoWC8P-f-A.roa
Signing time: Thu 27 Jul 2023 17:13:28 +0000
ROA not before: Thu 27 Jul 2023 17:13:28 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:188:7858:a003/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:98:57:5a:2b:22:08:8a:d8:87:2b:61:9b:b0:12:85:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Jul 27 17:13:28 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=554fa86ad9db499ced1ae224a9ca160bc3fe7fe0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:82:83:d9:6a:4e:de:aa:54:9d:8a:c4:d3:b4:
ed:94:29:0b:82:dd:fe:a8:1a:87:8f:d2:6a:b3:a9:
18:b3:c6:cd:77:61:36:32:8f:19:e5:17:83:ec:87:
b7:33:3d:90:ba:03:bd:6e:6e:45:61:b3:76:23:c6:
6e:36:a8:94:18:da:5d:ee:39:e1:3f:9a:f8:94:bd:
6f:a9:a5:47:fe:d0:0c:5b:ed:bc:49:20:a4:d8:65:
fe:9b:82:c9:e8:17:0e:49:2f:05:c6:d8:e9:eb:38:
18:31:9c:1c:3c:dc:b2:a3:b0:d2:5d:ba:9a:42:aa:
a4:2e:c8:b4:4a:c3:a8:82:d5:70:62:e5:98:12:32:
fa:d0:0e:90:19:27:3b:e4:dd:9a:f6:cd:04:2e:06:
57:29:33:e3:e2:65:b0:79:3b:be:a9:a4:9f:ee:d0:
87:a1:db:61:ca:d7:30:d4:41:60:96:05:49:a4:5e:
c1:95:b9:3f:46:5c:a7:7b:77:20:08:e0:ad:9b:df:
2d:46:b0:c6:4f:6d:1f:34:e2:29:07:a0:f5:17:55:
ca:99:cd:3f:fd:ba:81:e4:d0:4e:4d:cf:7b:e1:c6:
e0:e9:34:75:bd:28:fc:f2:bd:4d:df:d3:f2:d3:64:
15:8f:69:3e:73:f9:2e:2e:21:35:97:4e:4e:61:91:
88:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:4F:A8:6A:D9:DB:49:9C:ED:1A:E2:24:A9:CA:16:0B:C3:FE:7F:E0
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/VU-oatnbSZztGuIkqcoWC8P-f-A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
8c:7c:ff:46:0a:b0:98:dc:50:94:ee:b8:9c:71:02:68:a9:54:
cc:db:34:83:75:b2:f2:22:69:ca:81:86:fd:dc:be:a6:77:13:
82:35:05:a7:d7:18:81:5f:36:d0:94:8a:c7:34:f9:cf:3e:9a:
f1:58:02:ad:a2:84:99:10:1b:e7:40:6f:b0:d8:d3:9b:d6:17:
6a:92:3a:94:a6:aa:87:e0:07:45:76:6d:de:bf:76:71:7f:5a:
18:de:26:51:e4:95:c7:a5:6d:1a:9d:31:65:83:1d:58:75:39:
7b:e3:06:e3:b6:65:13:f7:03:ef:27:04:3f:bf:28:be:56:93:
c9:3a:a1:9c:41:b8:e7:11:fe:c6:f7:06:0e:4c:01:3a:39:38:
86:ab:1b:89:05:1c:a9:ce:2d:82:45:7e:f7:02:c1:75:e3:07:
61:52:3f:e5:95:49:3f:89:18:76:16:0d:fa:69:1d:cb:ab:f2:
ff:5c:5a:69:8c:57:8c:8b:7e:0c:65:88:a0:76:26:6b:1c:8d:
dc:3a:04:e8:7a:33:33:2c:58:f6:ef:4c:64:f0:d1:2a:2c:79:
5e:81:ac:26:46:d2:31:0e:c9:e1:bd:31:cf:c3:16:9e:02:f4:
9c:08:25:59:c7:5f:4a:8f:c8:dc:b4:6f:06:a1:5a:d2:28:64:
f4:aa:7a:23
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYmYV1orIgiK2IcrYZuwEoUUMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcyMDQ3YmUxNWIyNzU5MDJkY2Y2MTdkYzNkMGUxNmRjMWYz
MDgwMjIwHhcNMjMwNzI3MTcxMzI4WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1NTRmYTg2YWQ5ZGI0OTljZWQxYWUyMjRhOWNhMTYwYmMzZmU3ZmUwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzYKD2WpO3qpUnYrE07TtlCkLgt3+
qBqHj9Jqs6kYs8bNd2E2Mo8Z5ReD7Ie3Mz2QugO9bm5FYbN2I8ZuNqiUGNpd7jnh
P5r4lL1vqaVH/tAMW+28SSCk2GX+m4LJ6BcOSS8Fxtjp6zgYMZwcPNyyo7DSXbqa
QqqkLsi0SsOogtVwYuWYEjL60A6QGSc75N2a9s0ELgZXKTPj4mWweTu+qaSf7tCH
odthytcw1EFglgVJpF7Blbk/Rlyne3cgCOCtm98tRrDGT20fNOIpB6D1F1XKmc0/
/bqB5NBOTc974cbg6TR1vSj88r1N39Py02QVj2k+c/kuLiE1l05OYZGIWQIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFFVPqGrZ20mc7RriJKnKFgvD/n/gMB8GA1UdIwQY
MBaAFHIEe+FbJ1kC3PYX3D0OFtwfMIAiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMt
MWFiZTNhYzEwYWE2LzEvVlUtb2F0bmJTWnp0R3VJa3Fjb1dDOFAtZi1BLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMtMWFiZTNhYzEwYWE2
LzEvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBAIx8/0YKsJjcUJTuuJxx
AmipVMzbNIN1svIiacqBhv3cvqZ3E4I1BafXGIFfNtCUisc0+c8+mvFYAq2ihJkQ
G+dAb7DY05vWF2qSOpSmqofgB0V2bd6/dnF/WhjeJlHklcelbRqdMWWDHVh1OXvj
BuO2ZRP3A+8nBD+/KL5Wk8k6oZxBuOcR/sb3Bg5MATo5OIarG4kFHKnOLYJFfvcC
wXXjB2FSP+WVST+JGHYWDfppHcur8v9cWmmMV4yLfgxliKB2Jmscjdw6BOh6MzMs
WPbvTGTw0SoseV6BrCZG0jEOyeG9Mc/DFp4C9JwIJVnHX0qPyNy0bwahWtIoZPSq
eiM=
-----END CERTIFICATE-----
Generated at Fri May 2 19:51:56 2025 by rpki-client