Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/vWo3-XOWzAr2NjDJ_mvlBDMcbks.roa
File: vWo3-XOWzAr2NjDJ_mvlBDMcbks.roa (raw, json)
Hash identifier: 0qWBppYXVuBOLEDz85tqYiPvtUkgZlCkLa7uf1rpE+0=
Subject key identifier: BD:6A:37:F9:73:96:CC:0A:F6:36:30:C9:FE:6B:E5:04:33:1C:6E:4B
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0186646DB81EDA82A37D3EFDDD81E57B5BCA
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/vWo3-XOWzAr2NjDJ_mvlBDMcbks.roa
Signing time: Sat 18 Feb 2023 12:09:17 +0000
ROA not before: Sat 18 Feb 2023 12:09:17 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:64:6d:b8:1e:da:82:a3:7d:3e:fd:dd:81:e5:7b:5b:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Feb 18 12:09:17 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=bd6a37f97396cc0af63630c9fe6be504331c6e4b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:cd:12:9c:9b:41:e8:50:fa:00:93:84:87:c8:
c2:0e:88:58:fc:82:ae:4b:80:1e:d7:14:63:1d:ee:
8f:a3:b2:aa:b5:26:16:11:75:77:0b:bf:ce:2d:69:
8f:61:7e:2c:2b:64:94:df:08:29:9b:64:2f:9f:b4:
54:65:44:9b:a2:d6:cf:cc:5f:12:60:51:3e:cf:98:
a4:1a:1f:1a:a5:96:b6:17:6a:63:7c:f8:d0:b6:11:
09:42:2c:30:7b:78:3d:d2:4f:b3:8a:91:e1:de:e2:
e9:b2:84:01:d7:e1:da:0e:f4:fd:f6:a9:5d:6c:19:
38:56:1e:9d:d0:0e:cd:bc:2e:02:21:6e:cb:41:e6:
7f:fe:4e:41:84:26:d9:1c:e4:d0:97:0b:48:8a:d3:
96:a5:66:19:46:4d:76:b9:f4:80:9b:09:d5:1d:b8:
20:85:56:8d:81:80:f9:e5:8c:9a:b0:f6:d0:50:8a:
15:c3:8b:94:6c:1c:fe:6e:70:6f:92:4e:d1:2e:0c:
98:30:f1:99:6a:ac:e3:28:e9:27:c3:2c:48:22:89:
42:e0:3d:ad:7b:e9:5f:f1:c0:5f:47:7b:ce:56:db:
ec:b4:bf:2e:a9:d2:01:c1:8f:93:04:58:bd:8f:9c:
44:fd:94:58:57:a3:2e:f7:0e:45:79:81:22:51:7b:
16:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:6A:37:F9:73:96:CC:0A:F6:36:30:C9:FE:6B:E5:04:33:1C:6E:4B
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/vWo3-XOWzAr2NjDJ_mvlBDMcbks.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
91:65:8d:4d:6b:f2:99:7f:1a:d6:e7:29:62:58:b1:e3:a7:c5:
4f:d1:6f:72:af:ea:9b:31:80:67:56:d7:3d:e6:35:3e:9b:c2:
a1:75:6e:b6:21:27:12:f6:df:01:e6:92:ff:cc:68:e5:c4:81:
70:68:6a:c4:94:20:f0:86:99:de:97:98:d7:1d:e8:6f:52:66:
85:66:af:ea:37:8a:55:83:be:e4:8a:38:e4:4a:55:14:61:de:
04:71:81:8d:78:8a:ba:75:b4:96:38:8a:44:84:b6:4b:2a:51:
3a:91:5d:f7:6f:1d:bd:99:eb:c0:e0:33:bd:b1:85:62:ca:bd:
e0:db:fa:5e:9e:26:4e:10:7f:c9:52:32:c0:60:97:65:42:a3:
e5:74:39:69:77:55:14:fb:16:16:3c:73:4b:09:98:ab:dc:ed:
97:2e:4c:b0:35:88:e5:e0:10:dd:0f:96:28:47:99:5f:41:11:
dd:5f:f6:ad:2e:a0:40:6c:60:e0:22:5d:2d:aa:3e:1c:02:b0:
81:37:dd:96:8d:59:ae:8a:ad:9b:ea:b2:fb:b1:96:c0:e9:1d:
16:b8:75:3b:92:9d:20:ff:8a:4d:21:78:b3:87:1a:70:59:ae:
a5:e6:e7:f0:a8:97:1f:78:9c:d6:5a:13:75:98:71:ab:df:d0:
04:2e:f6:55
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYZkbbge2oKjfT793YHle1vKMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcyMDQ3YmUxNWIyNzU5MDJkY2Y2MTdkYzNkMGUxNmRjMWYz
MDgwMjIwHhcNMjMwMjE4MTIwOTE3WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiZDZhMzdmOTczOTZjYzBhZjYzNjMwYzlmZTZiZTUwNDMzMWM2ZTRiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu80SnJtB6FD6AJOEh8jCDohY/IKu
S4Ae1xRjHe6Po7KqtSYWEXV3C7/OLWmPYX4sK2SU3wgpm2Qvn7RUZUSbotbPzF8S
YFE+z5ikGh8apZa2F2pjfPjQthEJQiwwe3g90k+zipHh3uLpsoQB1+HaDvT99qld
bBk4Vh6d0A7NvC4CIW7LQeZ//k5BhCbZHOTQlwtIitOWpWYZRk12ufSAmwnVHbgg
hVaNgYD55YyasPbQUIoVw4uUbBz+bnBvkk7RLgyYMPGZaqzjKOknwyxIIolC4D2t
e+lf8cBfR3vOVtvstL8uqdIBwY+TBFi9j5xE/ZRYV6Mu9w5FeYEiUXsWhQIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFL1qN/lzlswK9jYwyf5r5QQzHG5LMB8GA1UdIwQY
MBaAFHIEe+FbJ1kC3PYX3D0OFtwfMIAiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMt
MWFiZTNhYzEwYWE2LzEvdldvMy1YT1d6QXIyTmpESl9tdmxCRE1jYmtzLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMtMWFiZTNhYzEwYWE2
LzEvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBAJFljU1r8pl/GtbnKWJY
seOnxU/Rb3Kv6psxgGdW1z3mNT6bwqF1brYhJxL23wHmkv/MaOXEgXBoasSUIPCG
md6XmNcd6G9SZoVmr+o3ilWDvuSKOORKVRRh3gRxgY14irp1tJY4ikSEtksqUTqR
XfdvHb2Z68DgM72xhWLKveDb+l6eJk4Qf8lSMsBgl2VCo+V0OWl3VRT7FhY8c0sJ
mKvc7ZcuTLA1iOXgEN0PlihHmV9BEd1f9q0uoEBsYOAiXS2qPhwCsIE33ZaNWa6K
rZvqsvuxlsDpHRa4dTuSnSD/ik0heLOHGnBZrqXm5/Colx94nNZaE3WYcavf0AQu
9lU=
-----END CERTIFICATE-----
Generated at Thu May 1 17:56:28 2025 by rpki-client