Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/vd8vL7ilCpYqw-qcDha5OO4wXwU.roa
File: vd8vL7ilCpYqw-qcDha5OO4wXwU.roa (raw, json)
Hash identifier: +pKllPIiRaRlT3fUeWocfVmV2+9/mzD5CVtD07tnvHY=
Subject key identifier: BD:DF:2F:2F:B8:A5:0A:96:2A:C3:EA:9C:0E:16:B9:38:EE:30:5F:05
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0189A9B7E1E11E8E22A9202284D5E96AFD89
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/vd8vL7ilCpYqw-qcDha5OO4wXwU.roa
Signing time: Mon 31 Jul 2023 02:12:27 +0000
ROA not before: Mon 31 Jul 2023 02:12:27 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:188:7858:a003/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:189:a0e4:5c7d/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:a9:b7:e1:e1:1e:8e:22:a9:20:22:84:d5:e9:6a:fd:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Jul 31 02:12:27 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=bddf2f2fb8a50a962ac3ea9c0e16b938ee305f05
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:1e:ac:5f:e4:5e:e4:02:3f:be:cb:fa:f5:11:
37:8d:99:4e:bb:de:46:83:58:9b:38:1f:75:b0:d8:
95:89:33:6b:91:8e:58:10:28:f4:a8:0e:21:90:b3:
56:ba:12:b4:d9:48:6c:14:79:88:e8:41:4d:b4:cf:
40:57:71:9a:18:22:a8:35:20:61:7f:c4:98:96:f5:
06:c0:ea:6f:b9:d6:77:e7:89:94:25:ad:d7:f9:5b:
de:62:dc:84:48:69:ab:20:d3:5f:54:c0:9a:06:dd:
a4:b7:15:2d:af:fe:e0:e6:0f:28:71:a2:c8:05:2d:
9c:e2:a3:f3:be:01:7f:06:5f:13:e6:9e:cd:1c:58:
7a:25:10:2c:55:3d:8f:77:c4:0b:88:84:3b:c1:9a:
77:d9:c8:7c:d5:8f:20:08:ad:0d:7b:cf:bc:a0:20:
85:9e:83:7e:f7:71:b0:e7:ee:d4:48:38:78:43:83:
5b:d2:cb:3e:88:47:da:d5:9e:6c:cb:26:a1:0e:61:
68:ff:d7:db:8c:56:03:a5:a3:42:42:dd:ff:a0:4f:
07:49:ec:88:ea:79:61:aa:d9:40:f9:03:e4:35:43:
1c:5d:c0:53:15:6c:0b:99:38:df:b6:e4:92:44:38:
ba:cd:47:96:73:76:7c:4a:53:37:54:6a:a4:2a:0b:
e2:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:DF:2F:2F:B8:A5:0A:96:2A:C3:EA:9C:0E:16:B9:38:EE:30:5F:05
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/vd8vL7ilCpYqw-qcDha5OO4wXwU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
40:f8:14:06:dd:7f:69:83:c0:45:93:c4:51:18:73:b3:11:4d:
9e:17:03:f6:1d:a5:81:fe:51:e9:0f:b8:db:0c:e6:ec:57:c6:
69:6f:bc:fd:94:5d:4a:6a:7e:dc:8a:6e:47:11:10:47:e8:5b:
5d:12:3a:d6:21:a1:9c:2c:20:de:cf:8a:d8:63:02:a1:aa:85:
05:9f:cc:2a:b9:0c:3f:97:31:e1:90:b8:e7:78:c3:31:a1:bb:
6c:1d:f6:7f:20:7a:30:77:d5:f8:dc:e9:f4:a4:f3:be:9b:e8:
ba:52:02:55:3e:1e:d7:32:c4:6b:69:00:2f:a4:86:1a:79:cc:
d5:58:ca:83:9c:d7:1b:8b:de:aa:72:db:d8:42:f7:5f:92:6f:
e9:89:41:2c:00:86:a2:3c:c4:a5:5b:62:96:e0:b1:41:d4:99:
c4:d6:64:c1:3e:cc:b3:75:61:53:04:cd:36:8d:ff:55:8f:fd:
8a:a4:4e:00:29:28:6f:13:37:a3:0f:d8:17:8f:13:70:fe:e8:
03:14:68:7f:8d:db:41:6c:c8:e9:24:9e:82:59:00:e1:ef:8c:
93:56:17:83:21:48:ba:fd:45:5e:13:fc:ca:ac:1d:fa:9a:ec:
17:2a:86:48:ea:29:52:3b:8a:5b:d8:53:80:0b:eb:27:e8:e1:
f7:ba:5d:a5
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYmpt+HhHo4iqSAihNXpav2JMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcyMDQ3YmUxNWIyNzU5MDJkY2Y2MTdkYzNkMGUxNmRjMWYz
MDgwMjIwHhcNMjMwNzMxMDIxMjI3WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiZGRmMmYyZmI4YTUwYTk2MmFjM2VhOWMwZTE2YjkzOGVlMzA1ZjA1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsh6sX+Re5AI/vsv69RE3jZlOu95G
g1ibOB91sNiViTNrkY5YECj0qA4hkLNWuhK02UhsFHmI6EFNtM9AV3GaGCKoNSBh
f8SYlvUGwOpvudZ354mUJa3X+VveYtyESGmrINNfVMCaBt2ktxUtr/7g5g8ocaLI
BS2c4qPzvgF/Bl8T5p7NHFh6JRAsVT2Pd8QLiIQ7wZp32ch81Y8gCK0Ne8+8oCCF
noN+93Gw5+7USDh4Q4Nb0ss+iEfa1Z5syyahDmFo/9fbjFYDpaNCQt3/oE8HSeyI
6nlhqtlA+QPkNUMcXcBTFWwLmTjftuSSRDi6zUeWc3Z8SlM3VGqkKgviHwIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFL3fLy+4pQqWKsPqnA4WuTjuMF8FMB8GA1UdIwQY
MBaAFHIEe+FbJ1kC3PYX3D0OFtwfMIAiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMt
MWFiZTNhYzEwYWE2LzEvdmQ4dkw3aWxDcFlxdy1xY0RoYTVPTzR3WHdVLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMtMWFiZTNhYzEwYWE2
LzEvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBAED4FAbdf2mDwEWTxFEY
c7MRTZ4XA/YdpYH+UekPuNsM5uxXxmlvvP2UXUpqftyKbkcREEfoW10SOtYhoZws
IN7PithjAqGqhQWfzCq5DD+XMeGQuOd4wzGhu2wd9n8gejB31fjc6fSk876b6LpS
AlU+HtcyxGtpAC+khhp5zNVYyoOc1xuL3qpy29hC91+Sb+mJQSwAhqI8xKVbYpbg
sUHUmcTWZME+zLN1YVMEzTaN/1WP/YqkTgApKG8TN6MP2BePE3D+6AMUaH+N20Fs
yOkknoJZAOHvjJNWF4MhSLr9RV4T/MqsHfqa7BcqhkjqKVI7ilvYU4AL6yfo4fe6
XaU=
-----END CERTIFICATE-----
Generated at Wed Apr 30 17:38:11 2025 by rpki-client