Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/VWRao1o7vmx54TuCBuhDILBN1A4.roa
File: VWRao1o7vmx54TuCBuhDILBN1A4.roa (raw, json)
Hash identifier: +texwo74On7XQiv88GM9E4kACMLbTISDbps2mrJMw+4=
Subject key identifier: 55:64:5A:A3:5A:3B:BE:6C:79:E1:3B:82:06:E8:43:20:B0:4D:D4:0E
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0185B09D2BFFE51237D9C8E1564C06D2D2C4
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/VWRao1o7vmx54TuCBuhDILBN1A4.roa
Signing time: Sat 14 Jan 2023 14:09:28 +0000
ROA not before: Sat 14 Jan 2023 14:09:28 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:185:3dcc:d8f/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:b0:9d:2b:ff:e5:12:37:d9:c8:e1:56:4c:06:d2:d2:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Jan 14 14:09:28 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=55645aa35a3bbe6c79e13b8206e84320b04dd40e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:07:15:a9:1f:b8:4c:1b:66:df:55:58:55:9f:
0d:13:da:9f:25:59:9f:db:bd:3c:4b:e1:78:64:f0:
d6:91:8b:08:f8:8d:cd:24:50:e3:a9:85:f2:dd:d6:
00:84:76:97:d3:bf:0b:95:c3:e5:f6:38:e3:c9:fd:
5d:9e:f5:26:32:f1:14:fe:72:4d:25:ce:8c:f0:36:
c9:6f:8c:ca:92:2b:2d:ef:ce:a3:51:4a:24:3d:33:
53:62:41:46:ab:b7:b4:f0:43:21:3e:4d:48:f0:7b:
ac:ea:a1:16:a5:02:e1:0a:28:b4:5d:04:7d:28:5c:
25:6c:ab:06:eb:8c:3b:18:5e:8e:4f:5b:a3:f1:e4:
39:10:64:69:60:7a:4a:d4:99:66:41:83:5c:2d:1a:
71:74:33:c0:e7:a6:ff:e7:c2:0e:58:ac:ac:aa:d5:
da:6d:84:6b:e1:de:d2:30:1f:de:0b:f6:91:01:2b:
87:6f:00:81:28:3f:dc:00:cf:ea:86:80:d0:38:f4:
7c:42:1f:10:c8:c8:f2:b4:d6:7f:09:22:16:35:38:
0a:40:40:f8:d4:d5:8d:04:d5:8f:1a:89:27:46:47:
7a:02:06:d6:e4:7f:dd:17:86:18:c1:29:e2:1f:af:
ab:34:85:ac:4f:a6:0a:9f:71:9e:75:4f:b8:c0:7d:
4c:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:64:5A:A3:5A:3B:BE:6C:79:E1:3B:82:06:E8:43:20:B0:4D:D4:0E
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/VWRao1o7vmx54TuCBuhDILBN1A4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
4a:88:4d:78:d9:b6:74:dc:a9:8e:61:89:54:2d:be:99:b1:b2:
b3:1f:9d:fe:50:03:37:8a:b9:8d:33:d3:32:af:c5:b8:69:5e:
b0:2a:57:fb:a6:d2:b2:47:85:91:5c:61:56:2d:e3:a8:e4:0c:
0d:c9:b0:cb:39:c7:fe:d4:77:7e:75:4c:63:d6:e8:f9:b9:12:
4a:69:15:52:cd:a3:c4:fb:d0:a0:c5:36:82:07:07:dc:2d:77:
c4:ec:d0:78:89:69:27:81:14:56:72:52:98:51:bb:aa:a1:42:
13:45:84:d1:df:db:47:17:74:66:d8:7f:e5:a8:54:47:77:9a:
d4:f8:8f:ed:83:05:ce:07:07:88:be:dc:2e:54:cc:17:91:06:
46:04:74:b5:91:c3:3d:5d:56:92:83:e6:77:43:ac:8a:25:ee:
8c:d9:99:ca:d6:51:45:01:d8:b4:d3:b8:98:8c:82:8f:d4:d3:
c7:cc:b4:ef:74:4e:48:e4:be:b8:1f:4a:c4:11:57:da:05:e1:
9a:00:71:3b:df:85:f7:66:92:4f:58:5e:7c:8d:9e:3b:3c:15:
6a:f9:6c:38:fa:34:2c:c0:a0:ae:09:e5:7e:26:cb:37:f7:71:
fb:e5:5b:46:c4:c4:b7:bc:50:e4:39:49:5e:54:0a:c8:db:00:
db:5e:40:51
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYWwnSv/5RI32cjhVkwG0tLEMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcyMDQ3YmUxNWIyNzU5MDJkY2Y2MTdkYzNkMGUxNmRjMWYz
MDgwMjIwHhcNMjMwMTE0MTQwOTI4WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1NTY0NWFhMzVhM2JiZTZjNzllMTNiODIwNmU4NDMyMGIwNGRkNDBlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmAcVqR+4TBtm31VYVZ8NE9qfJVmf
2708S+F4ZPDWkYsI+I3NJFDjqYXy3dYAhHaX078LlcPl9jjjyf1dnvUmMvEU/nJN
Jc6M8DbJb4zKkist786jUUokPTNTYkFGq7e08EMhPk1I8Hus6qEWpQLhCii0XQR9
KFwlbKsG64w7GF6OT1uj8eQ5EGRpYHpK1JlmQYNcLRpxdDPA56b/58IOWKysqtXa
bYRr4d7SMB/eC/aRASuHbwCBKD/cAM/qhoDQOPR8Qh8QyMjytNZ/CSIWNTgKQED4
1NWNBNWPGoknRkd6AgbW5H/dF4YYwSniH6+rNIWsT6YKn3GedU+4wH1M2QIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFFVkWqNaO75seeE7ggboQyCwTdQOMB8GA1UdIwQY
MBaAFHIEe+FbJ1kC3PYX3D0OFtwfMIAiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMt
MWFiZTNhYzEwYWE2LzEvVldSYW8xbzd2bXg1NFR1Q0J1aERJTEJOMUE0LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMtMWFiZTNhYzEwYWE2
LzEvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBAEqITXjZtnTcqY5hiVQt
vpmxsrMfnf5QAzeKuY0z0zKvxbhpXrAqV/um0rJHhZFcYVYt46jkDA3JsMs5x/7U
d351TGPW6Pm5EkppFVLNo8T70KDFNoIHB9wtd8Ts0HiJaSeBFFZyUphRu6qhQhNF
hNHf20cXdGbYf+WoVEd3mtT4j+2DBc4HB4i+3C5UzBeRBkYEdLWRwz1dVpKD5ndD
rIol7ozZmcrWUUUB2LTTuJiMgo/U08fMtO90TkjkvrgfSsQRV9oF4ZoAcTvfhfdm
kk9YXnyNnjs8FWr5bDj6NCzAoK4J5X4myzf3cfvlW0bExLe8UOQ5SV5UCsjbANte
QFE=
-----END CERTIFICATE-----
Generated at Fri May 2 14:26:23 2025 by rpki-client