Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/vbSjEsA6h5JsV33Vf5SR4hCJHXY.roa
File: vbSjEsA6h5JsV33Vf5SR4hCJHXY.roa (raw, json)
Hash identifier: ow9PM+mhXmxlN9UsAqfBKOsJyXp0LdrxvK8mMlmR1DQ=
Subject key identifier: BD:B4:A3:12:C0:3A:87:92:6C:57:7D:D5:7F:94:91:E2:10:89:1D:76
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 018656455C46138B807E1DE3CC2C8A832732
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/vbSjEsA6h5JsV33Vf5SR4hCJHXY.roa
Signing time: Wed 15 Feb 2023 18:10:31 +0000
ROA not before: Wed 15 Feb 2023 18:10:31 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:56:45:5c:46:13:8b:80:7e:1d:e3:cc:2c:8a:83:27:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Feb 15 18:10:31 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=bdb4a312c03a87926c577dd57f9491e210891d76
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:98:a8:da:ee:0a:64:e9:1f:75:6e:bc:81:34:
27:a7:32:82:d9:0d:b3:6f:72:13:10:d5:c3:86:2b:
3d:5a:7d:be:e8:f4:9a:af:9f:ed:41:d3:bf:10:5d:
1f:03:f2:0e:09:c7:b8:df:78:3b:75:02:78:da:c9:
fb:fa:0e:50:58:7a:69:f9:28:da:96:ea:12:88:6c:
f4:13:fe:db:4f:95:c0:f1:5b:bb:a6:ff:a7:03:fc:
38:c3:ef:b5:a4:9a:b8:c3:de:05:97:b7:ae:a3:8e:
9e:7d:fc:73:36:8a:f7:55:d2:72:0a:28:86:bc:9f:
ed:ea:fe:88:1b:c7:56:cb:b1:97:8b:f3:7d:cf:42:
b9:70:db:5a:c2:76:9c:50:0d:db:33:b1:96:8d:ad:
32:83:68:09:58:6d:e1:f2:d1:3f:06:3f:60:5d:13:
be:6e:d6:34:3a:ba:c4:d2:0e:cf:31:3c:8c:36:e9:
6e:cf:dd:ba:7d:12:98:00:e9:72:70:07:3b:5f:0a:
79:13:a9:9b:de:69:1a:2c:58:fc:ee:bb:e2:31:70:
de:4f:bc:67:08:49:27:7e:37:76:15:c3:d5:03:9e:
4f:9b:91:6e:d3:35:1f:de:37:2e:2f:ad:52:7a:4a:
40:c7:b8:43:88:1b:82:1c:d4:40:b2:bd:f6:06:28:
ca:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:B4:A3:12:C0:3A:87:92:6C:57:7D:D5:7F:94:91:E2:10:89:1D:76
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/vbSjEsA6h5JsV33Vf5SR4hCJHXY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
12:28:f0:c9:2d:6d:45:45:18:85:bf:5b:6d:ec:4f:d6:1f:2c:
01:d0:b0:81:9b:ba:0e:61:7a:84:9b:af:4b:89:01:d8:ca:ac:
d0:5f:11:c2:eb:96:fb:dc:cb:95:36:5c:be:87:b0:2d:29:e1:
23:e2:23:dc:28:fb:81:3c:78:0f:fe:8a:6d:ce:65:5c:10:f2:
4e:83:4c:a1:7e:19:b8:f6:18:36:df:48:43:b6:8c:0c:12:85:
f3:a8:3f:e2:6c:6d:20:33:05:0e:51:67:55:b5:65:98:77:54:
fb:94:87:fe:ab:9d:f1:0b:62:47:b5:68:b2:de:75:b7:a9:26:
c1:94:6b:b3:f5:87:48:38:d7:0b:cf:ca:1e:b6:2d:a9:c1:5f:
77:19:3a:26:2e:6d:49:08:80:9d:1e:60:66:9c:8b:f0:c5:bf:
5c:6f:2f:cb:24:fb:22:a2:1a:39:c1:4e:6d:68:77:91:76:be:
03:62:44:65:c9:18:31:58:ae:f2:51:e1:e8:69:62:53:5c:4a:
21:f3:24:8c:20:1c:ae:37:7c:8b:b7:cb:4b:83:99:3a:48:b3:
bb:30:91:82:57:7e:d6:db:ba:c2:ac:7a:26:85:ae:8f:a5:95:
aa:85:52:6d:aa:96:5e:e6:bb:db:7c:15:cc:1b:d4:c7:84:ef:
d3:92:9e:e8
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYZWRVxGE4uAfh3jzCyKgycyMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcyMDQ3YmUxNWIyNzU5MDJkY2Y2MTdkYzNkMGUxNmRjMWYz
MDgwMjIwHhcNMjMwMjE1MTgxMDMxWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiZGI0YTMxMmMwM2E4NzkyNmM1NzdkZDU3Zjk0OTFlMjEwODkxZDc2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo5io2u4KZOkfdW68gTQnpzKC2Q2z
b3ITENXDhis9Wn2+6PSar5/tQdO/EF0fA/IOCce433g7dQJ42sn7+g5QWHpp+Sja
luoSiGz0E/7bT5XA8Vu7pv+nA/w4w++1pJq4w94Fl7euo46effxzNor3VdJyCiiG
vJ/t6v6IG8dWy7GXi/N9z0K5cNtawnacUA3bM7GWja0yg2gJWG3h8tE/Bj9gXRO+
btY0OrrE0g7PMTyMNuluz926fRKYAOlycAc7Xwp5E6mb3mkaLFj87rviMXDeT7xn
CEknfjd2FcPVA55Pm5Fu0zUf3jcuL61SekpAx7hDiBuCHNRAsr32BijK1wIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFL20oxLAOoeSbFd91X+UkeIQiR12MB8GA1UdIwQY
MBaAFHIEe+FbJ1kC3PYX3D0OFtwfMIAiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMt
MWFiZTNhYzEwYWE2LzEvdmJTakVzQTZoNUpzVjMzVmY1U1I0aENKSFhZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMtMWFiZTNhYzEwYWE2
LzEvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBABIo8MktbUVFGIW/W23s
T9YfLAHQsIGbug5heoSbr0uJAdjKrNBfEcLrlvvcy5U2XL6HsC0p4SPiI9wo+4E8
eA/+im3OZVwQ8k6DTKF+Gbj2GDbfSEO2jAwShfOoP+JsbSAzBQ5RZ1W1ZZh3VPuU
h/6rnfELYke1aLLedbepJsGUa7P1h0g41wvPyh62LanBX3cZOiYubUkIgJ0eYGac
i/DFv1xvL8sk+yKiGjnBTm1od5F2vgNiRGXJGDFYrvJR4ehpYlNcSiHzJIwgHK43
fIu3y0uDmTpIs7swkYJXftbbusKseiaFro+llaqFUm2qll7mu9t8Fcwb1MeE79OS
nug=
-----END CERTIFICATE-----
Generated at Wed Apr 30 17:39:32 2025 by rpki-client