Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/vmrPdk96TaFR8K7VgiVroQ50lr4.roa
File: vmrPdk96TaFR8K7VgiVroQ50lr4.roa (raw, json)
Hash identifier: 632Nv5HiNnT2ilnACxDIw/Vs5iVO/fBFtvTqZ2JAWIc=
Subject key identifier: BE:6A:CF:76:4F:7A:4D:A1:51:F0:AE:D5:82:25:6B:A1:0E:74:96:BE
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 7E3CAC91
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/vmrPdk96TaFR8K7VgiVroQ50lr4.roa
Signing time: Mon 25 Apr 2022 02:10:39 +0000
ROA not before: Mon 25 Apr 2022 02:10:39 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:180:466e:42dd/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:180:457:1e3f/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2117905553 (0x7e3cac91)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Apr 25 02:10:39 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=be6acf764f7a4da151f0aed582256ba10e7496be
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:93:31:bc:4e:71:78:1c:8d:0a:bc:bb:6f:22:
09:0c:8c:9c:73:13:91:da:42:04:d4:b8:80:68:62:
66:0f:37:d7:ae:3e:20:33:bd:ba:fb:57:b4:0a:dc:
56:f6:f8:00:67:2d:b8:30:ff:4c:00:80:94:ce:ad:
33:ba:f7:14:f6:02:a9:55:1f:4a:b8:b5:66:1d:91:
e5:51:8c:b9:21:94:15:18:d7:ff:08:ba:7b:8e:7a:
ea:89:68:df:65:60:12:ff:4e:89:16:db:3d:c7:d9:
87:8e:18:2c:78:e0:29:25:94:13:13:6a:d5:48:73:
d5:9c:77:44:ec:dc:4c:12:48:34:c9:b7:0c:73:69:
36:29:60:37:ea:a4:14:cd:db:eb:96:bd:83:0a:ef:
1f:a3:3f:01:05:c0:0a:6b:13:39:d9:23:9b:a5:1f:
b8:d5:6b:fe:7e:40:cd:d3:02:8a:22:ae:60:3f:66:
ad:61:af:55:5f:da:c4:4e:67:cf:36:94:b5:72:4f:
ca:9c:bd:99:fa:77:e5:ae:57:16:8d:44:80:d6:a6:
50:9b:44:8a:e3:d8:9d:ad:8b:2f:1a:b4:a5:0d:7c:
07:a7:d5:ae:06:f2:0e:74:ee:1c:12:6a:f8:25:a0:
ca:db:72:b5:57:f4:50:4e:c5:8c:67:5b:5e:50:bc:
3b:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:6A:CF:76:4F:7A:4D:A1:51:F0:AE:D5:82:25:6B:A1:0E:74:96:BE
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/vmrPdk96TaFR8K7VgiVroQ50lr4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
5c:70:70:41:9e:7e:33:0f:e4:6b:3d:82:4c:e3:a4:94:7c:62:
2f:89:27:1f:53:3e:b6:91:f3:59:63:be:d7:01:62:fe:36:08:
f8:6d:a4:88:7f:88:c1:57:2f:1a:a4:b8:a6:4c:63:36:46:e8:
27:e8:c6:4e:51:77:66:89:f9:bb:56:2f:91:27:9e:66:9a:f6:
11:4c:a2:ba:42:68:88:aa:b2:21:80:56:70:2e:09:e1:ec:8f:
ed:d9:ba:dc:fe:ba:69:a8:e6:d1:16:62:2e:da:7e:0b:c9:08:
89:30:f9:87:ee:c8:ad:9d:da:c7:7c:03:ee:83:7c:95:d0:e7:
e0:33:88:b2:e5:a5:f1:80:63:18:53:44:19:76:12:11:d1:95:
eb:ad:95:ff:b5:a7:09:dc:4a:c5:e2:c8:4a:cd:55:be:9f:6c:
bd:fb:09:c6:44:27:c6:62:8d:b3:18:f6:0a:9e:25:60:c3:38:
60:6e:3e:42:5c:d3:9b:44:1b:e5:93:f3:4f:0c:ec:09:de:74:
97:8a:a7:59:d1:73:23:19:b3:2e:da:b2:a8:ec:ae:35:02:1f:
31:17:14:c7:0b:30:8f:be:fe:d8:51:47:bd:77:ce:93:18:5b:
af:ed:f0:79:bb:77:7a:d7:af:c8:33:65:ea:6e:eb:99:11:22:
cc:58:ef:ab
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgIEfjyskTANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg3
MjA0N2JlMTViMjc1OTAyZGNmNjE3ZGMzZDBlMTZkYzFmMzA4MDIyMB4XDTIyMDQy
NTAyMTAzOVoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoYmU2YWNmNzY0Zjdh
NGRhMTUxZjBhZWQ1ODIyNTZiYTEwZTc0OTZiZTCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBANOTMbxOcXgcjQq8u28iCQyMnHMTkdpCBNS4gGhiZg83164+
IDO9uvtXtArcVvb4AGctuDD/TACAlM6tM7r3FPYCqVUfSri1Zh2R5VGMuSGUFRjX
/wi6e4566olo32VgEv9OiRbbPcfZh44YLHjgKSWUExNq1Uhz1Zx3ROzcTBJINMm3
DHNpNilgN+qkFM3b65a9gwrvH6M/AQXACmsTOdkjm6UfuNVr/n5AzdMCiiKuYD9m
rWGvVV/axE5nzzaUtXJPypy9mfp35a5XFo1EgNamUJtEiuPYna2LLxq0pQ18B6fV
rgbyDnTuHBJq+CWgyttytVf0UE7FjGdbXlC8O28CAwEAAaOCAhowggIWMB0GA1Ud
DgQWBBS+as92T3pNoVHwrtWCJWuhDnSWvjAfBgNVHSMEGDAWgBRyBHvhWydZAtz2
F9w9DhbcHzCAIjAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L2NnUjc0VnNuV1FMYzloZmNQUTRXM0I4d2dDSS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvNWUvNzk4NDQ3LTIxZjQtNDVhYi05OWRjLTFhYmUzYWMxMGFhNi8x
L3ZtclBkazk2VGFGUjhLN1ZnaVZyb1E1MGxyNC5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNWUv
Nzk4NDQ3LTIxZjQtNDVhYi05OWRjLTFhYmUzYWMxMGFhNi8xL2NnUjc0VnNuV1FM
YzloZmNQUTRXM0I4d2dDSS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAw
BggrBgEFBQcBBwEB/wQhMB8wDAQCAAEwBgMEA8EAGDAPBAIAAjAJAwcAIAEGfABk
MA0GCSqGSIb3DQEBCwUAA4IBAQBccHBBnn4zD+RrPYJM46SUfGIviScfUz62kfNZ
Y77XAWL+Ngj4baSIf4jBVy8apLimTGM2Rugn6MZOUXdmifm7Vi+RJ55mmvYRTKK6
QmiIqrIhgFZwLgnh7I/t2brc/rppqObRFmIu2n4LyQiJMPmH7sitndrHfAPug3yV
0OfgM4iy5aXxgGMYU0QZdhIR0ZXrrZX/tacJ3ErF4shKzVW+n2y9+wnGRCfGYo2z
GPYKniVgwzhgbj5CXNObRBvlk/NPDOwJ3nSXiqdZ0XMjGbMu2rKo7K41Ah8xFxTH
CzCPvv7YUUe9d86TGFuv7fB5u3d616/IM2XqbuuZESLMWO+r
-----END CERTIFICATE-----
Generated at Thu May 1 17:08:07 2025 by rpki-client