Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/Vkc926fS4k-X0CzT9WeqdBkaA4M.roa
File: Vkc926fS4k-X0CzT9WeqdBkaA4M.roa (raw, json)
Hash identifier: 9VrUizqQ4+h+LRscNJZhXwx6ZXJM7AJsjhBdN3q7ge0=
Subject key identifier: 56:47:3D:DB:A7:D2:E2:4F:97:D0:2C:D3:F5:67:AA:74:19:1A:03:83
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0189E90704B6674C313B1BF01E6470FA3D75
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/Vkc926fS4k-X0CzT9WeqdBkaA4M.roa
Signing time: Sat 12 Aug 2023 09:14:58 +0000
ROA not before: Sat 12 Aug 2023 09:14:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:188:7858:a003/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:189:a0e4:5c7d/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:e9:07:04:b6:67:4c:31:3b:1b:f0:1e:64:70:fa:3d:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Aug 12 09:14:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=56473ddba7d2e24f97d02cd3f567aa74191a0383
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:27:4e:82:84:9b:dd:83:d9:76:8b:31:c9:ca:
68:2e:41:0f:54:25:ec:60:51:80:45:d9:84:72:c5:
47:01:e7:21:1e:1d:99:2b:ee:e4:9d:8f:81:62:b8:
e8:da:a2:c1:9e:7f:0c:71:df:ac:31:ec:85:a7:00:
f3:f5:49:55:db:2c:e8:e6:c2:5a:4f:10:72:3a:35:
9e:74:59:25:10:1a:3d:26:5c:7f:77:27:01:14:95:
dd:06:b6:44:fc:e6:7d:0a:18:84:eb:c2:16:25:78:
15:07:a0:b5:a6:d4:d4:39:a2:a4:5a:dd:d2:14:6f:
57:ea:c7:30:60:45:c8:5d:16:04:c8:62:23:64:8e:
1b:78:ae:5f:ef:9b:24:e9:4c:48:47:d4:d8:aa:0b:
16:40:4f:7a:d7:1f:29:74:a1:bf:ad:6a:64:d6:d1:
60:56:4f:37:c7:85:57:68:87:5a:92:bb:c1:b5:c8:
3a:f0:c8:90:3d:9a:70:1d:0a:ff:e1:4c:1f:f2:01:
f6:18:a0:ba:cb:20:60:6b:0c:65:2b:ed:c9:5d:16:
8e:73:b6:c1:25:29:14:e0:cb:32:ef:b1:6b:e4:a5:
fc:00:e2:55:ed:85:a1:3f:1f:d9:a8:72:22:5a:fe:
c5:08:0f:97:f7:59:63:75:5a:ca:da:db:cf:f3:a7:
06:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:47:3D:DB:A7:D2:E2:4F:97:D0:2C:D3:F5:67:AA:74:19:1A:03:83
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/Vkc926fS4k-X0CzT9WeqdBkaA4M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
75:ca:6a:91:ba:29:bd:c9:c8:91:33:63:8a:eb:b0:c9:61:2d:
43:40:27:d4:71:5e:b8:88:26:06:03:58:54:49:70:16:9b:88:
51:8f:13:6c:89:d8:6d:d9:89:43:e2:66:0a:06:9a:93:c7:18:
2b:7f:f8:21:93:6f:7f:41:78:0f:0a:c6:3f:81:8e:01:1f:53:
54:b5:a1:ff:cc:9e:c3:b7:1a:06:ad:f8:4e:79:84:df:8f:32:
fc:1e:4c:e1:45:e2:15:b2:52:f1:27:65:d4:5d:46:92:3c:ed:
b5:a2:17:9f:62:51:b1:b2:ed:ba:cb:ce:54:23:57:70:76:64:
6d:00:d1:28:1b:b6:1e:71:d9:c7:55:4e:54:d9:05:02:4b:87:
9b:fa:e1:03:56:2d:76:3d:f1:b1:8f:ac:53:81:62:30:86:fa:
4a:5b:dd:1c:01:26:05:a9:fc:89:32:d0:75:42:24:f2:4c:d4:
45:8b:ae:66:7f:ac:29:05:59:70:eb:90:f4:43:61:e8:40:03:
92:98:d9:21:a7:be:b9:d3:e4:de:cf:7d:d1:55:69:e8:b7:6d:
27:e2:bc:4d:27:27:5d:1e:df:25:13:4a:b5:78:a0:69:9d:cc:
96:cc:4b:eb:1c:59:5a:d0:be:1d:30:bf:c2:a6:bd:94:c1:f2:
eb:b1:53:77
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYnpBwS2Z0wxOxvwHmRw+j11MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcyMDQ3YmUxNWIyNzU5MDJkY2Y2MTdkYzNkMGUxNmRjMWYz
MDgwMjIwHhcNMjMwODEyMDkxNDU4WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1NjQ3M2RkYmE3ZDJlMjRmOTdkMDJjZDNmNTY3YWE3NDE5MWEwMzgzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwSdOgoSb3YPZdosxycpoLkEPVCXs
YFGARdmEcsVHAechHh2ZK+7knY+BYrjo2qLBnn8Mcd+sMeyFpwDz9UlV2yzo5sJa
TxByOjWedFklEBo9Jlx/dycBFJXdBrZE/OZ9ChiE68IWJXgVB6C1ptTUOaKkWt3S
FG9X6scwYEXIXRYEyGIjZI4beK5f75sk6UxIR9TYqgsWQE961x8pdKG/rWpk1tFg
Vk83x4VXaIdakrvBtcg68MiQPZpwHQr/4Uwf8gH2GKC6yyBgawxlK+3JXRaOc7bB
JSkU4Msy77Fr5KX8AOJV7YWhPx/ZqHIiWv7FCA+X91ljdVrK2tvP86cGgwIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFFZHPdun0uJPl9As0/VnqnQZGgODMB8GA1UdIwQY
MBaAFHIEe+FbJ1kC3PYX3D0OFtwfMIAiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMt
MWFiZTNhYzEwYWE2LzEvVmtjOTI2ZlM0ay1YMEN6VDlXZXFkQmthQTRNLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMtMWFiZTNhYzEwYWE2
LzEvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBAHXKapG6Kb3JyJEzY4rr
sMlhLUNAJ9RxXriIJgYDWFRJcBabiFGPE2yJ2G3ZiUPiZgoGmpPHGCt/+CGTb39B
eA8Kxj+BjgEfU1S1of/MnsO3Ggat+E55hN+PMvweTOFF4hWyUvEnZdRdRpI87bWi
F59iUbGy7brLzlQjV3B2ZG0A0Sgbth5x2cdVTlTZBQJLh5v64QNWLXY98bGPrFOB
YjCG+kpb3RwBJgWp/Iky0HVCJPJM1EWLrmZ/rCkFWXDrkPRDYehAA5KY2SGnvrnT
5N7PfdFVaei3bSfivE0nJ10e3yUTSrV4oGmdzJbMS+scWVrQvh0wv8KmvZTB8uux
U3c=
-----END CERTIFICATE-----
Generated at Sat May 3 02:25:13 2025 by rpki-client