Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/VuQ7Z8mhih1BcFgCGsxmHq1bwGs.roa
File: VuQ7Z8mhih1BcFgCGsxmHq1bwGs.roa (raw, json)
Hash identifier: 99DWdP/05IGvxyEbxvnHs7fL/Ysv7OAVC0dwvdrEPN8=
Subject key identifier: 56:E4:3B:67:C9:A1:8A:1D:41:70:58:02:1A:CC:66:1E:AD:5B:C0:6B
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0188C452DB2C62F077AAEBD2612FF3C06338
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/VuQ7Z8mhih1BcFgCGsxmHq1bwGs.roa
Signing time: Fri 16 Jun 2023 13:09:04 +0000
ROA not before: Fri 16 Jun 2023 13:09:04 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:188:5fe2:b396/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:187:4695:a68a/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:188:7858:a003/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64:ffff:0:187:fa9a:b088/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:187:b2b8:a7dd/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:c4:52:db:2c:62:f0:77:aa:eb:d2:61:2f:f3:c0:63:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Jun 16 13:09:04 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=56e43b67c9a18a1d417058021acc661ead5bc06b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:62:8e:21:9e:ae:78:74:bf:b5:43:d9:d0:4f:
29:0f:51:fd:9e:1e:d9:ea:5b:1e:f2:40:08:b8:4b:
26:b1:7c:74:8f:70:02:67:60:dd:e8:27:a2:4e:e5:
07:57:00:5d:8e:5a:f4:65:76:a6:9c:cb:84:66:25:
d9:86:2e:34:a6:25:c6:b8:57:70:d5:39:68:92:0f:
d1:cb:aa:66:2e:fd:09:7a:de:9a:ac:26:83:90:96:
c0:d9:6e:1f:de:e3:39:7f:d7:02:cd:36:0f:dd:0f:
1d:17:89:8b:e3:3f:70:b7:58:25:a5:1f:0c:af:31:
1b:bf:7d:61:9c:c7:17:89:a4:c2:07:06:5b:bf:4a:
7d:6e:52:2b:e5:50:e7:6e:2b:37:ec:6f:e3:bd:74:
41:97:15:c5:29:00:48:0c:70:cf:65:93:ff:56:c4:
19:ee:de:01:70:c2:50:ff:50:25:08:71:fd:bd:44:
ec:99:e6:0d:16:2a:02:5a:5b:fc:65:5a:86:30:50:
9e:93:31:57:4b:c7:cb:c9:fa:19:8e:61:f4:de:eb:
08:66:7c:94:a2:9f:19:6f:41:5b:c5:a1:a2:72:c7:
a7:e1:59:f0:4c:b5:85:63:a8:96:64:24:ae:d9:16:
ee:c4:2f:ea:b1:45:e5:fc:46:01:a6:73:e2:ed:91:
25:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:E4:3B:67:C9:A1:8A:1D:41:70:58:02:1A:CC:66:1E:AD:5B:C0:6B
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/VuQ7Z8mhih1BcFgCGsxmHq1bwGs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
a3:e6:f3:cd:e9:f5:f0:79:1f:13:4b:17:ec:da:78:ca:49:2c:
f1:ce:c0:6e:dc:f2:67:99:1e:e6:e0:4e:73:d3:b9:0d:48:13:
05:85:0c:2c:82:6a:33:d3:fe:42:3d:05:66:c7:72:38:15:f2:
2c:d9:e9:36:0c:6d:06:ad:3d:bc:b6:a8:d8:93:eb:fb:a5:d8:
0b:f8:57:84:97:08:e1:38:cd:5e:fe:14:6d:e8:a9:7f:ec:d2:
72:aa:bf:3e:7e:70:b6:8a:e0:b4:a5:73:15:65:09:2e:35:9d:
c4:f3:d8:5b:03:c1:52:cf:51:e7:e7:8d:72:14:1e:68:d6:91:
6a:e7:1b:eb:b0:e4:14:21:4b:a9:2c:3a:8a:a8:cc:5f:c2:71:
84:b8:2e:c4:2a:52:d1:59:8d:aa:14:4f:b7:b7:f1:77:ae:45:
ba:be:a3:11:8e:d0:15:7a:cf:ed:e9:85:64:74:b9:d7:80:24:
6b:0b:ff:2d:5a:6e:71:54:0b:fd:43:e1:f2:e0:4e:69:bd:02:
36:a3:9f:32:d6:68:b9:2d:81:c7:c3:1f:88:14:68:cf:dc:90:
49:22:50:47:28:54:2e:1a:ac:04:ff:e7:d5:e4:c2:45:1a:8b:
ea:6f:89:c3:a7:4f:bd:74:7d:99:43:15:2a:5e:cc:c9:43:0a:
75:c9:99:df
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYjEUtssYvB3quvSYS/zwGM4MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcyMDQ3YmUxNWIyNzU5MDJkY2Y2MTdkYzNkMGUxNmRjMWYz
MDgwMjIwHhcNMjMwNjE2MTMwOTA0WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1NmU0M2I2N2M5YTE4YTFkNDE3MDU4MDIxYWNjNjYxZWFkNWJjMDZiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAomKOIZ6ueHS/tUPZ0E8pD1H9nh7Z
6lse8kAIuEsmsXx0j3ACZ2Dd6CeiTuUHVwBdjlr0ZXamnMuEZiXZhi40piXGuFdw
1Tlokg/Ry6pmLv0Jet6arCaDkJbA2W4f3uM5f9cCzTYP3Q8dF4mL4z9wt1glpR8M
rzEbv31hnMcXiaTCBwZbv0p9blIr5VDnbis37G/jvXRBlxXFKQBIDHDPZZP/VsQZ
7t4BcMJQ/1AlCHH9vUTsmeYNFioCWlv8ZVqGMFCekzFXS8fLyfoZjmH03usIZnyU
op8Zb0FbxaGicsen4VnwTLWFY6iWZCSu2RbuxC/qsUXl/EYBpnPi7ZEldQIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFFbkO2fJoYodQXBYAhrMZh6tW8BrMB8GA1UdIwQY
MBaAFHIEe+FbJ1kC3PYX3D0OFtwfMIAiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMt
MWFiZTNhYzEwYWE2LzEvVnVRN1o4bWhpaDFCY0ZnQ0dzeG1IcTFid0dzLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMtMWFiZTNhYzEwYWE2
LzEvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBAKPm883p9fB5HxNLF+za
eMpJLPHOwG7c8meZHubgTnPTuQ1IEwWFDCyCajPT/kI9BWbHcjgV8izZ6TYMbQat
Pby2qNiT6/ul2Av4V4SXCOE4zV7+FG3oqX/s0nKqvz5+cLaK4LSlcxVlCS41ncTz
2FsDwVLPUefnjXIUHmjWkWrnG+uw5BQhS6ksOoqozF/CcYS4LsQqUtFZjaoUT7e3
8XeuRbq+oxGO0BV6z+3phWR0udeAJGsL/y1abnFUC/1D4fLgTmm9AjajnzLWaLkt
gcfDH4gUaM/ckEkiUEcoVC4arAT/59XkwkUai+pvicOnT710fZlDFSpezMlDCnXJ
md8=
-----END CERTIFICATE-----
Generated at Fri May 2 16:15:15 2025 by rpki-client