Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/VZLd_B5NbRXz7J68WKIil2HrLTc.roa
File: VZLd_B5NbRXz7J68WKIil2HrLTc.roa (raw, json)
Hash identifier: FBImgzn0HZ/YwxUYUGRs3ilg+FhESwyW9tg9ULhNr6A=
Subject key identifier: 55:92:DD:FC:1E:4D:6D:15:F3:EC:9E:BC:58:A2:22:97:61:EB:2D:37
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0184E45900B5CA79D78A5970EE20FA858520
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/VZLd_B5NbRXz7J68WKIil2HrLTc.roa
Signing time: Mon 05 Dec 2022 22:12:28 +0000
ROA not before: Mon 05 Dec 2022 22:12:28 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:e4:59:00:b5:ca:79:d7:8a:59:70:ee:20:fa:85:85:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Dec 5 22:12:28 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=5592ddfc1e4d6d15f3ec9ebc58a2229761eb2d37
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:b0:8d:80:e7:98:e6:85:71:81:15:4c:10:d5:
7a:d1:35:d3:22:6a:0a:fb:b2:e4:e7:3a:c7:7c:b8:
21:c1:ba:13:8d:b6:1a:32:78:ea:87:24:be:58:64:
75:35:45:5f:99:1c:ef:3e:70:ae:56:af:96:c0:a4:
b0:e9:cb:67:aa:ee:cf:83:e9:06:90:ea:1b:f5:41:
96:5f:9b:2b:23:53:96:69:52:2f:b4:52:c2:63:21:
4d:ab:68:d4:9b:40:05:1c:5b:24:35:52:90:70:66:
d5:b4:89:c3:a7:cb:b5:f0:f4:d3:4b:4a:35:f0:05:
12:14:ad:a5:24:39:39:89:3b:65:df:ca:0d:06:22:
8e:8e:e6:69:f1:f2:bf:87:37:3c:62:8a:eb:c6:ad:
70:bd:ab:02:1c:b5:27:1e:f1:f9:e5:42:34:6c:88:
e4:74:70:3f:20:54:d7:97:d3:3a:1d:11:ff:e5:0e:
ef:d2:87:56:d9:44:93:98:64:21:82:d4:27:a8:46:
05:d6:f4:09:bd:a8:5a:81:32:8f:1c:b2:44:e4:f7:
d1:79:d4:3d:2f:62:c1:7f:ef:39:be:22:84:ec:db:
c2:1a:fa:6d:8e:30:f7:37:94:28:7f:c0:4e:b7:9a:
ad:18:2b:2e:2f:b7:83:1a:70:1a:ad:fe:c1:37:28:
9b:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:92:DD:FC:1E:4D:6D:15:F3:EC:9E:BC:58:A2:22:97:61:EB:2D:37
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/VZLd_B5NbRXz7J68WKIil2HrLTc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
53:3f:ff:e1:ae:24:94:01:27:e7:bd:74:28:81:9b:d7:4a:5d:
7e:a0:38:dc:ae:f0:8b:17:43:6e:f9:8d:50:ae:4d:7d:cc:62:
c6:f3:da:04:43:76:d1:55:59:84:5c:e1:31:d9:a8:61:ae:dd:
c5:6a:22:ab:5f:8a:45:5c:4d:72:d5:c8:71:c2:70:d9:2c:3d:
f2:06:04:8b:62:16:dd:68:d4:fc:60:d8:19:d5:b0:53:19:21:
59:16:f9:f6:c6:e2:ec:88:aa:6e:46:57:a3:b4:a5:6d:1e:81:
fa:a2:be:71:56:a8:d8:2d:78:61:f2:26:e4:8b:07:5d:bf:16:
20:db:47:19:21:be:d7:e7:c7:3a:a1:45:a9:cc:94:8a:43:ea:
01:a3:63:bb:0d:8c:e5:81:37:b6:69:9d:16:3d:2e:e9:1b:3c:
76:20:75:88:93:64:68:0d:ce:21:53:b9:76:da:a1:1b:a9:b6:
4f:17:7f:0c:f8:93:a9:ec:b5:02:a6:ed:2f:8b:9b:0a:f3:e1:
57:eb:c9:7c:bb:df:0c:46:33:8a:53:72:9d:ea:7f:e0:b4:a1:
79:7e:03:8b:3c:89:ef:6c:74:ad:51:77:37:2b:0c:49:84:f5:
4a:ce:d5:14:d5:58:b2:12:1d:0c:73:18:77:d3:02:39:b9:67:
11:49:62:66
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYTkWQC1ynnXillw7iD6hYUgMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcyMDQ3YmUxNWIyNzU5MDJkY2Y2MTdkYzNkMGUxNmRjMWYz
MDgwMjIwHhcNMjIxMjA1MjIxMjI4WhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1NTkyZGRmYzFlNGQ2ZDE1ZjNlYzllYmM1OGEyMjI5NzYxZWIyZDM3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApLCNgOeY5oVxgRVMENV60TXTImoK
+7Lk5zrHfLghwboTjbYaMnjqhyS+WGR1NUVfmRzvPnCuVq+WwKSw6ctnqu7Pg+kG
kOob9UGWX5srI1OWaVIvtFLCYyFNq2jUm0AFHFskNVKQcGbVtInDp8u18PTTS0o1
8AUSFK2lJDk5iTtl38oNBiKOjuZp8fK/hzc8Yorrxq1wvasCHLUnHvH55UI0bIjk
dHA/IFTXl9M6HRH/5Q7v0odW2USTmGQhgtQnqEYF1vQJvahagTKPHLJE5PfRedQ9
L2LBf+85viKE7NvCGvptjjD3N5Qof8BOt5qtGCsuL7eDGnAarf7BNyibGQIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFFWS3fweTW0V8+yevFiiIpdh6y03MB8GA1UdIwQY
MBaAFHIEe+FbJ1kC3PYX3D0OFtwfMIAiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMt
MWFiZTNhYzEwYWE2LzEvVlpMZF9CNU5iUlh6N0o2OFdLSWlsMkhyTFRjLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMtMWFiZTNhYzEwYWE2
LzEvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBAFM//+GuJJQBJ+e9dCiB
m9dKXX6gONyu8IsXQ275jVCuTX3MYsbz2gRDdtFVWYRc4THZqGGu3cVqIqtfikVc
TXLVyHHCcNksPfIGBItiFt1o1Pxg2BnVsFMZIVkW+fbG4uyIqm5GV6O0pW0egfqi
vnFWqNgteGHyJuSLB12/FiDbRxkhvtfnxzqhRanMlIpD6gGjY7sNjOWBN7ZpnRY9
LukbPHYgdYiTZGgNziFTuXbaoRuptk8Xfwz4k6nstQKm7S+Lmwrz4VfryXy73wxG
M4pTcp3qf+C0oXl+A4s8ie9sdK1RdzcrDEmE9UrO1RTVWLISHQxzGHfTAjm5ZxFJ
YmY=
-----END CERTIFICATE-----
Generated at Wed Apr 30 17:40:57 2025 by rpki-client