Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/_vVCN7cVUSAOMODwaeKmGdMeSUE.roa
File: _vVCN7cVUSAOMODwaeKmGdMeSUE.roa (raw, json)
Hash identifier: n9pkgwGGaewVg4Hy4y2vxcoqfXtJDiqPuQDmV4lP87c=
Subject key identifier: FE:F5:42:37:B7:15:51:20:0E:30:E0:F0:69:E2:A6:19:D3:1E:49:41
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 8886A663
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/_vVCN7cVUSAOMODwaeKmGdMeSUE.roa
Signing time: Mon 30 May 2022 19:09:13 +0000
ROA not before: Mon 30 May 2022 19:09:13 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:181:22f:7a99/128 maxlen: 128
2001:67c:64:ffff:0:180:ff9c:1e7a/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2290525795 (0x8886a663)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: May 30 19:09:13 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=fef54237b71551200e30e0f069e2a619d31e4941
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:a5:6b:15:0b:8a:38:cb:57:ff:1e:4a:74:05:
96:a6:3f:c1:8f:c7:91:a9:d5:7e:76:1f:2b:2e:c4:
88:57:3a:df:3a:84:5a:1d:cf:17:fc:0f:92:25:5d:
44:1f:7d:4c:ac:d5:d7:fc:96:0d:46:c0:b3:9b:9a:
1a:3b:52:93:8c:c6:87:ca:e3:78:fc:45:a4:c1:85:
3c:d4:cb:ef:02:1e:3e:d2:c0:da:b5:cd:a4:33:80:
ef:d2:f0:07:c6:64:46:fa:d2:5f:61:a6:b6:d5:8f:
5f:8b:02:aa:a3:e7:7a:6b:8b:91:9b:5a:59:2d:c2:
17:35:12:9a:76:a7:43:a2:6f:53:10:e0:68:65:ed:
30:a8:0e:ee:fb:51:13:e4:d0:67:34:70:85:56:ff:
5e:0f:a2:76:d0:59:7a:8e:2a:3b:c6:33:12:70:a2:
59:6a:a9:c6:35:04:68:bf:98:f4:87:54:51:66:18:
8b:4a:12:a9:be:80:98:52:02:f3:b7:6c:d9:56:43:
5a:8d:62:62:33:3a:22:c8:ad:a3:74:36:fc:73:22:
a4:7e:6e:5c:76:9a:fd:4e:23:24:ea:59:40:cb:b1:
71:c5:70:38:d6:1f:02:26:c7:da:d5:0f:1c:ba:c6:
47:1f:09:53:69:17:b7:79:7f:e3:04:68:ad:d8:f1:
07:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:F5:42:37:B7:15:51:20:0E:30:E0:F0:69:E2:A6:19:D3:1E:49:41
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/_vVCN7cVUSAOMODwaeKmGdMeSUE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
04:93:e3:54:64:1b:aa:7e:02:82:94:60:d0:9d:ef:10:bc:ec:
82:cf:c4:cd:ea:82:c6:2d:0c:94:30:c3:a0:8d:3e:a5:55:01:
90:f0:d6:6f:56:47:37:13:72:11:20:e8:75:3d:99:00:ca:65:
06:0a:76:76:98:f9:04:4f:6b:d1:92:a4:ab:9e:cb:70:49:73:
ee:47:70:bd:fa:77:f8:82:cd:fb:ba:45:cf:48:96:61:83:62:
80:11:d1:a7:43:ec:79:de:f0:c5:e3:65:57:21:d8:e2:58:e2:
de:81:e2:a7:97:41:5b:5e:51:8f:c5:16:61:39:c3:44:e3:41:
0c:2f:80:8d:2d:04:6e:3b:a9:65:4e:b7:a6:6b:ca:9b:62:c4:
aa:2a:06:47:81:8d:42:f9:1e:96:d3:63:02:1e:05:e9:fb:0c:
ac:26:8e:41:e0:63:ad:91:94:9b:b4:f9:52:79:84:f6:a0:ca:
61:b7:a6:9e:60:9b:97:5e:1e:26:7e:95:8f:36:62:80:22:91:
ee:d1:70:0e:36:69:65:33:c4:0d:0e:6b:4e:fc:53:3d:d6:f5:
bb:b9:78:d2:bb:b3:e5:ff:46:36:de:31:71:03:0d:2d:73:0a:
ba:97:0d:9c:1a:e6:37:b6:f0:b3:ab:15:37:f1:54:2a:ce:40:
60:0f:cf:bd
-----BEGIN CERTIFICATE-----
MIIFATCCA+mgAwIBAgIFAIiGpmMwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMo
NzIwNDdiZTE1YjI3NTkwMmRjZjYxN2RjM2QwZTE2ZGMxZjMwODAyMjAeFw0yMjA1
MzAxOTA5MTNaFw0yMzA3MDEwMDAwMDBaMDMxMTAvBgNVBAMTKGZlZjU0MjM3Yjcx
NTUxMjAwZTMwZTBmMDY5ZTJhNjE5ZDMxZTQ5NDEwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQDHpWsVC4o4y1f/Hkp0BZamP8GPx5Gp1X52HysuxIhXOt86
hFodzxf8D5IlXUQffUys1df8lg1GwLObmho7UpOMxofK43j8RaTBhTzUy+8CHj7S
wNq1zaQzgO/S8AfGZEb60l9hprbVj1+LAqqj53pri5GbWlktwhc1Epp2p0Oib1MQ
4Ghl7TCoDu77URPk0Gc0cIVW/14PonbQWXqOKjvGMxJwollqqcY1BGi/mPSHVFFm
GItKEqm+gJhSAvO3bNlWQ1qNYmIzOiLIraN0NvxzIqR+blx2mv1OIyTqWUDLsXHF
cDjWHwImx9rVDxy6xkcfCVNpF7d5f+MEaK3Y8QdrAgMBAAGjggIaMIICFjAdBgNV
HQ4EFgQU/vVCN7cVUSAOMODwaeKmGdMeSUEwHwYDVR0jBBgwFoAUcgR74VsnWQLc
9hfcPQ4W3B8wgCIwDgYDVR0PAQH/BAQDAgeAMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvREVGQVVM
VC9jZ1I3NFZzbldRTGM5aGZjUFE0VzNCOHdnQ0kuY2VyMIGNBggrBgEFBQcBCwSB
gDB+MHwGCCsGAQUFBzALhnByc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9y
eS9ERUZBVUxULzVlLzc5ODQ0Ny0yMWY0LTQ1YWItOTlkYy0xYWJlM2FjMTBhYTYv
MS9fdlZDTjdjVlVTQU9NT0R3YWVLbUdkTWVTVUUucm9hMIGBBgNVHR8EejB4MHag
dKByhnByc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzVl
Lzc5ODQ0Ny0yMWY0LTQ1YWItOTlkYy0xYWJlM2FjMTBhYTYvMS9jZ1I3NFZzbldR
TGM5aGZjUFE0VzNCOHdnQ0kuY3JsMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw
MAYIKwYBBQUHAQcBAf8EITAfMAwEAgABMAYDBAPBABgwDwQCAAIwCQMHACABBnwA
ZDANBgkqhkiG9w0BAQsFAAOCAQEABJPjVGQbqn4CgpRg0J3vELzsgs/EzeqCxi0M
lDDDoI0+pVUBkPDWb1ZHNxNyESDodT2ZAMplBgp2dpj5BE9r0ZKkq57LcElz7kdw
vfp3+ILN+7pFz0iWYYNigBHRp0Psed7wxeNlVyHY4lji3oHip5dBW15Rj8UWYTnD
RONBDC+AjS0EbjupZU63pmvKm2LEqioGR4GNQvkeltNjAh4F6fsMrCaOQeBjrZGU
m7T5UnmE9qDKYbemnmCbl14eJn6VjzZigCKR7tFwDjZpZTPEDQ5rTvxTPdb1u7l4
0ruz5f9GNt4xcQMNLXMKupcNnBrmN7bws6sVN/FUKs5AYA/PvQ==
-----END CERTIFICATE-----
Generated at Wed Apr 30 21:27:31 2025 by rpki-client