Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/VqwLIp9q5SE2m5tStRAUhZemNmc.roa
File: VqwLIp9q5SE2m5tStRAUhZemNmc.roa (raw, json)
Hash identifier: 7y8oLBrOxdyurNgslTapSx+J9rhCDk+JxonV7h48HEc=
Subject key identifier: 56:AC:0B:22:9F:6A:E5:21:36:9B:9B:52:B5:10:14:85:97:A6:36:67
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 89FFE7D8
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/VqwLIp9q5SE2m5tStRAUhZemNmc.roa
Signing time: Sun 05 Jun 2022 01:12:20 +0000
ROA not before: Sun 05 Jun 2022 01:12:20 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:181:22f:7a99/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2315249624 (0x89ffe7d8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Jun 5 01:12:20 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=56ac0b229f6ae521369b9b52b510148597a63667
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:54:ce:6f:d1:dc:33:ee:92:6c:c8:34:64:2f:
ab:7e:da:03:af:e7:03:93:77:b1:e2:df:b7:7e:d1:
26:69:77:66:fe:b5:47:fe:60:86:3c:0c:97:11:2c:
09:91:be:fd:51:88:69:68:21:b0:e9:21:f8:7f:71:
1f:3f:bc:c4:55:3a:8d:37:77:1b:20:d7:8e:72:d0:
64:1f:fc:37:64:f9:49:c3:70:1c:9c:00:a9:f9:a5:
44:8f:b8:78:58:c0:cd:ee:c1:fe:d2:f1:4d:c8:92:
9e:11:f9:c3:7d:25:30:f3:8a:40:0a:7f:46:ab:46:
13:1b:ad:5d:fe:50:6e:0c:77:b6:62:30:d5:6d:de:
f1:6a:a5:23:fe:ea:22:f0:2d:f0:bf:93:72:c1:51:
d7:ec:b6:8e:fe:e0:82:ac:52:f1:48:6f:86:29:89:
4e:65:8a:dc:24:f0:ca:b8:db:66:a2:e2:39:9c:64:
c6:77:bb:7a:66:40:32:70:0e:39:c0:39:9d:8e:55:
8e:e2:ff:55:46:d8:b5:67:98:44:c6:a4:d7:5d:df:
53:eb:d2:58:69:a0:a2:98:9e:ef:2b:c7:bc:f3:7b:
70:88:46:da:4b:f5:5a:f5:cb:8b:f7:c0:b0:99:82:
8e:6c:44:5c:d8:39:99:0d:be:94:bf:4a:1e:58:db:
76:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:AC:0B:22:9F:6A:E5:21:36:9B:9B:52:B5:10:14:85:97:A6:36:67
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/VqwLIp9q5SE2m5tStRAUhZemNmc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
9a:d5:5c:1f:98:cf:13:c5:f9:5a:3b:88:2f:b6:e4:74:4c:56:
9e:77:6a:03:16:db:e3:29:24:c1:8c:a7:a4:f7:cb:d1:cc:6e:
7e:2d:20:a4:ac:24:28:27:b5:20:83:bc:95:ff:82:fb:ea:5a:
f2:a7:7f:3c:12:56:9c:a4:a9:c3:fa:44:d3:14:b7:5a:28:5a:
28:d4:09:08:c0:8d:24:78:bc:df:62:6f:60:2e:14:4e:2c:4d:
93:b9:8f:1b:f7:cd:fe:57:f0:57:e5:33:70:30:3e:10:38:d1:
67:21:f1:32:5b:54:5e:9d:62:94:18:eb:cd:d5:15:bc:9c:55:
d2:41:7c:51:0f:ef:22:b1:aa:c4:60:ef:23:a7:b6:1c:ae:ea:
78:a9:12:8e:54:47:57:ab:11:61:58:0b:5a:b4:11:9c:9d:28:
f8:8b:33:c6:c9:01:9d:5f:06:70:71:9e:79:fe:2e:d7:ca:47:
d5:4e:a3:cd:c8:ae:d1:f0:98:43:dc:a9:2b:0a:d7:58:cb:c8:
9c:df:1d:3a:95:54:d5:f6:74:4d:36:d6:2d:40:de:48:02:20:
df:43:30:a8:0e:0c:f6:ec:fa:8c:17:01:6d:c6:a5:9b:a5:3b:
ec:c2:f8:3b:5c:8a:86:25:68:7d:96:21:00:44:91:58:22:e2:
b5:62:50:b6
-----BEGIN CERTIFICATE-----
MIIFATCCA+mgAwIBAgIFAIn/59gwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMo
NzIwNDdiZTE1YjI3NTkwMmRjZjYxN2RjM2QwZTE2ZGMxZjMwODAyMjAeFw0yMjA2
MDUwMTEyMjBaFw0yMzA3MDEwMDAwMDBaMDMxMTAvBgNVBAMTKDU2YWMwYjIyOWY2
YWU1MjEzNjliOWI1MmI1MTAxNDg1OTdhNjM2NjcwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQC5VM5v0dwz7pJsyDRkL6t+2gOv5wOTd7Hi37d+0SZpd2b+
tUf+YIY8DJcRLAmRvv1RiGloIbDpIfh/cR8/vMRVOo03dxsg145y0GQf/Ddk+UnD
cBycAKn5pUSPuHhYwM3uwf7S8U3Ikp4R+cN9JTDzikAKf0arRhMbrV3+UG4Md7Zi
MNVt3vFqpSP+6iLwLfC/k3LBUdfsto7+4IKsUvFIb4YpiU5litwk8Mq422ai4jmc
ZMZ3u3pmQDJwDjnAOZ2OVY7i/1VG2LVnmETGpNdd31Pr0lhpoKKYnu8rx7zze3CI
RtpL9Vr1y4v3wLCZgo5sRFzYOZkNvpS/Sh5Y23a3AgMBAAGjggIaMIICFjAdBgNV
HQ4EFgQUVqwLIp9q5SE2m5tStRAUhZemNmcwHwYDVR0jBBgwFoAUcgR74VsnWQLc
9hfcPQ4W3B8wgCIwDgYDVR0PAQH/BAQDAgeAMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvREVGQVVM
VC9jZ1I3NFZzbldRTGM5aGZjUFE0VzNCOHdnQ0kuY2VyMIGNBggrBgEFBQcBCwSB
gDB+MHwGCCsGAQUFBzALhnByc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9y
eS9ERUZBVUxULzVlLzc5ODQ0Ny0yMWY0LTQ1YWItOTlkYy0xYWJlM2FjMTBhYTYv
MS9WcXdMSXA5cTVTRTJtNXRTdFJBVWhaZW1ObWMucm9hMIGBBgNVHR8EejB4MHag
dKByhnByc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzVl
Lzc5ODQ0Ny0yMWY0LTQ1YWItOTlkYy0xYWJlM2FjMTBhYTYvMS9jZ1I3NFZzbldR
TGM5aGZjUFE0VzNCOHdnQ0kuY3JsMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw
MAYIKwYBBQUHAQcBAf8EITAfMAwEAgABMAYDBAPBABgwDwQCAAIwCQMHACABBnwA
ZDANBgkqhkiG9w0BAQsFAAOCAQEAmtVcH5jPE8X5WjuIL7bkdExWnndqAxbb4ykk
wYynpPfL0cxufi0gpKwkKCe1IIO8lf+C++pa8qd/PBJWnKSpw/pE0xS3WihaKNQJ
CMCNJHi832JvYC4UTixNk7mPG/fN/lfwV+UzcDA+EDjRZyHxMltUXp1ilBjrzdUV
vJxV0kF8UQ/vIrGqxGDvI6e2HK7qeKkSjlRHV6sRYVgLWrQRnJ0o+IszxskBnV8G
cHGeef4u18pH1U6jzciu0fCYQ9ypKwrXWMvInN8dOpVU1fZ0TTbWLUDeSAIg30Mw
qA4M9uz6jBcBbcalm6U77ML4O1yKhiVofZYhAESRWCLitWJQtg==
-----END CERTIFICATE-----
Generated at Wed Apr 30 17:28:20 2025 by rpki-client