Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/vRCCTP-DY5Ao2z_TtbZ_uG0Fpk4.roa
File: vRCCTP-DY5Ao2z_TtbZ_uG0Fpk4.roa (raw, json)
Hash identifier: +kNTKgu76Dn4MA2kXBaYItDKvRO/ZyGqiWEOiwrB7OE=
Subject key identifier: BD:10:82:4C:FF:83:63:90:28:DB:3F:D3:B5:B6:7F:B8:6D:05:A6:4E
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 018764006E6EF3F79CF3EBD29588B73AFE2C
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/vRCCTP-DY5Ao2z_TtbZ_uG0Fpk4.roa
Signing time: Sun 09 Apr 2023 03:12:42 +0000
ROA not before: Sun 09 Apr 2023 03:12:42 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:187:4695:a68a/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:64:00:6e:6e:f3:f7:9c:f3:eb:d2:95:88:b7:3a:fe:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Apr 9 03:12:42 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=bd10824cff83639028db3fd3b5b67fb86d05a64e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:f6:e4:7f:53:b3:a5:97:f1:83:57:f3:18:27:
52:59:88:58:2b:ec:6a:f3:88:f4:32:fc:bd:12:13:
35:27:33:7f:4a:20:73:38:ba:f8:1c:4c:4c:3a:62:
aa:ab:58:c9:41:0e:dd:55:5b:59:57:33:f2:70:7f:
4f:88:ca:8f:ae:14:7e:82:2e:45:c9:92:7a:bc:62:
a8:13:a9:20:d5:68:66:7b:5c:99:f0:8d:0f:9a:7f:
90:06:1f:30:cb:2f:46:78:17:b5:82:00:e4:14:0e:
4e:36:c2:69:97:6c:59:27:b6:8b:95:36:49:36:a6:
3f:68:ff:e6:d3:d0:f5:dd:7b:f5:29:46:51:54:df:
40:78:99:c7:2a:78:88:3f:96:28:67:ff:07:a6:c7:
0e:47:c0:36:45:29:c6:e5:45:41:b2:5c:d0:1e:78:
52:38:29:94:b3:1e:b3:df:29:ba:e5:14:12:f9:09:
64:43:25:fb:25:75:ed:6a:eb:4d:5c:89:d1:bc:17:
d5:e0:02:9c:46:c6:f2:9b:41:a8:71:6b:8b:e1:5b:
a5:8d:bd:94:55:b5:df:70:70:c5:a6:69:85:ab:e7:
ca:4a:c5:59:15:1f:d2:dd:b2:64:d2:e3:6b:42:1e:
a1:35:f8:05:fe:99:78:fb:c4:bf:d3:20:41:a7:17:
cf:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:10:82:4C:FF:83:63:90:28:DB:3F:D3:B5:B6:7F:B8:6D:05:A6:4E
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/vRCCTP-DY5Ao2z_TtbZ_uG0Fpk4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
89:c8:6e:a9:a4:45:78:16:c5:e9:7f:b1:68:1f:d8:11:ac:35:
67:26:c1:a6:f7:b0:ed:02:7b:ae:67:c5:9e:c6:7d:66:d3:00:
7d:d0:2f:c6:97:e8:ef:fb:7c:40:47:23:73:26:46:36:52:c5:
60:06:3f:9d:02:4f:02:71:a0:b9:23:78:7d:6c:bd:43:4e:0d:
70:91:f0:be:65:68:40:37:fe:80:11:35:11:88:d9:2e:27:2d:
36:25:b0:19:9d:33:86:6b:c1:03:e8:86:b8:09:3c:85:a5:8a:
3b:d0:24:39:99:84:38:c3:65:3a:cb:e4:d7:09:74:95:8e:fe:
fc:d8:d2:29:3e:ea:8f:e3:9d:71:bc:c9:d5:e9:8a:86:9b:b1:
c3:23:85:58:63:72:a5:c5:c5:e6:00:ff:b2:c2:9b:f9:1d:98:
36:29:dc:0a:b6:aa:7f:49:94:b2:38:8a:f4:8b:29:bb:60:79:
e4:32:2a:31:db:1b:94:77:6e:0e:19:8e:16:a4:04:0d:23:f4:
f0:a3:0f:b9:b3:e2:c6:96:cc:68:20:08:fd:7f:3a:be:32:ce:
b1:79:a9:e0:ff:fb:eb:d7:d1:c3:e5:21:b9:5b:af:c9:12:4d:
eb:4b:30:5e:46:cc:f1:c8:9b:cf:f6:08:6b:29:bf:0f:e6:fc:
e3:0f:8d:a8
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYdkAG5u8/ec8+vSlYi3Ov4sMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcyMDQ3YmUxNWIyNzU5MDJkY2Y2MTdkYzNkMGUxNmRjMWYz
MDgwMjIwHhcNMjMwNDA5MDMxMjQyWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiZDEwODI0Y2ZmODM2MzkwMjhkYjNmZDNiNWI2N2ZiODZkMDVhNjRlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvPbkf1OzpZfxg1fzGCdSWYhYK+xq
84j0Mvy9EhM1JzN/SiBzOLr4HExMOmKqq1jJQQ7dVVtZVzPycH9PiMqPrhR+gi5F
yZJ6vGKoE6kg1Whme1yZ8I0Pmn+QBh8wyy9GeBe1ggDkFA5ONsJpl2xZJ7aLlTZJ
NqY/aP/m09D13Xv1KUZRVN9AeJnHKniIP5YoZ/8HpscOR8A2RSnG5UVBslzQHnhS
OCmUsx6z3ym65RQS+QlkQyX7JXXtautNXInRvBfV4AKcRsbym0GocWuL4Vuljb2U
VbXfcHDFpmmFq+fKSsVZFR/S3bJk0uNrQh6hNfgF/pl4+8S/0yBBpxfP+QIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFL0Qgkz/g2OQKNs/07W2f7htBaZOMB8GA1UdIwQY
MBaAFHIEe+FbJ1kC3PYX3D0OFtwfMIAiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMt
MWFiZTNhYzEwYWE2LzEvdlJDQ1RQLURZNUFvMnpfVHRiWl91RzBGcGs0LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMtMWFiZTNhYzEwYWE2
LzEvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBAInIbqmkRXgWxel/sWgf
2BGsNWcmwab3sO0Ce65nxZ7GfWbTAH3QL8aX6O/7fEBHI3MmRjZSxWAGP50CTwJx
oLkjeH1svUNODXCR8L5laEA3/oARNRGI2S4nLTYlsBmdM4ZrwQPohrgJPIWlijvQ
JDmZhDjDZTrL5NcJdJWO/vzY0ik+6o/jnXG8ydXpioabscMjhVhjcqXFxeYA/7LC
m/kdmDYp3Aq2qn9JlLI4ivSLKbtgeeQyKjHbG5R3bg4ZjhakBA0j9PCjD7mz4saW
zGggCP1/Or4yzrF5qeD/++vX0cPlIblbr8kSTetLMF5GzPHIm8/2CGspvw/m/OMP
jag=
-----END CERTIFICATE-----
Generated at Thu May 1 08:04:13 2025 by rpki-client