Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/vsJQtUTEWWJMTmgPIvPIvJj5GAc.roa
File: vsJQtUTEWWJMTmgPIvPIvJj5GAc.roa (raw, json)
Hash identifier: XRMIHfDWIfSBjznPPteSYHRVWetnZxwvWJg5YvD50oY=
Subject key identifier: BE:C2:50:B5:44:C4:59:62:4C:4E:68:0F:22:F3:C8:BC:98:F9:18:07
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0182C27055DEB6FF8E9BC1A894700802FC79
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/vsJQtUTEWWJMTmgPIvPIvJj5GAc.roa
Signing time: Sun 21 Aug 2022 22:05:18 +0000
ROA not before: Sun 21 Aug 2022 22:05:18 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:182:3f1d:a803/128 maxlen: 128
2001:67c:64:ffff:0:182:c26f:96a6/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:182:7cb2:99d4/128 maxlen: 128
2001:67c:64:ffff:0:182:383f:6b78/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:c2:70:55:de:b6:ff:8e:9b:c1:a8:94:70:08:02:fc:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Aug 21 22:05:18 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=bec250b544c459624c4e680f22f3c8bc98f91807
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:a1:15:ef:72:5b:14:90:92:bf:fe:39:cf:7f:
75:eb:7f:b0:c6:4a:3a:8d:26:b9:60:10:4e:92:f7:
5f:2f:d3:da:2d:78:a4:57:4c:2d:d6:65:d6:7a:b5:
8f:32:60:d6:d5:9f:a2:d0:86:d3:d7:97:c9:4b:29:
67:2c:04:b8:64:ac:48:57:5a:bd:df:a6:db:aa:d2:
6d:18:a6:c7:46:a5:b7:bd:a5:82:d2:db:ba:63:20:
55:55:ae:91:81:78:d8:9d:84:09:87:63:e2:ce:24:
f9:48:fc:8d:a4:7f:f8:03:37:cc:27:0f:25:38:c1:
22:eb:a5:0f:18:a0:f0:aa:f1:85:06:5e:eb:8d:e0:
2b:f7:3f:a4:e7:cc:bd:c1:92:22:8b:cd:c2:2b:fc:
ee:34:67:77:fd:18:9e:0c:24:cd:85:24:77:0e:62:
a5:a0:13:bf:69:3e:65:61:50:a0:81:72:d2:d5:4b:
af:a1:16:a5:da:80:f9:5e:2e:31:5d:80:e6:42:78:
1a:e3:93:60:bf:73:cd:58:70:a2:b4:3e:d2:a2:fc:
95:60:fb:64:a0:a9:fb:9d:4a:98:2f:7c:58:ff:d1:
5e:9b:b3:0d:48:52:c8:ce:3c:db:50:83:11:e4:af:
c6:94:ea:3a:3f:2f:75:8f:b3:4c:2c:cb:c5:96:12:
9c:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:C2:50:B5:44:C4:59:62:4C:4E:68:0F:22:F3:C8:BC:98:F9:18:07
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/vsJQtUTEWWJMTmgPIvPIvJj5GAc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
33:fc:50:c8:8d:da:37:c8:4d:45:71:c3:7e:e5:0d:12:85:df:
11:46:64:96:e4:39:4e:73:67:69:83:9d:2b:6f:24:a0:5a:4a:
0d:d0:6a:de:54:98:9c:11:a6:9c:e2:64:44:77:be:97:83:7d:
20:0b:b6:b6:ff:e1:49:75:02:97:d7:4c:d8:f1:c0:d8:d6:08:
17:98:a1:e6:6d:41:4e:96:5f:c7:09:ac:19:aa:0f:a3:98:6b:
de:6b:7f:86:91:db:0b:ea:52:14:6a:91:c0:71:6d:12:f8:04:
32:02:47:b4:0e:30:db:06:9b:5c:bb:98:b9:6b:0e:03:7a:02:
1d:f0:8f:45:fa:c9:10:d2:e1:90:66:ec:73:01:2f:38:96:fa:
7b:66:64:07:20:93:82:c5:31:37:8e:71:c3:67:4d:33:55:4d:
64:f2:bd:2e:4d:25:c9:90:d8:18:6b:81:26:bb:6b:30:7d:f8:
9d:78:d0:e2:47:0a:91:2d:27:60:e2:0c:15:8e:e4:46:2e:b1:
0f:d1:63:12:2f:96:83:4c:6d:f2:bf:c4:96:08:aa:be:69:ae:
81:d1:3c:6c:4c:14:04:4f:8e:84:2e:97:66:1f:0e:2c:90:99:
1c:dc:0f:26:46:f2:91:cd:05:bb:3d:10:c5:8e:92:0d:65:81:
0e:ee:32:3e
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYLCcFXetv+Om8GolHAIAvx5MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcyMDQ3YmUxNWIyNzU5MDJkY2Y2MTdkYzNkMGUxNmRjMWYz
MDgwMjIwHhcNMjIwODIxMjIwNTE4WhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiZWMyNTBiNTQ0YzQ1OTYyNGM0ZTY4MGYyMmYzYzhiYzk4ZjkxODA3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwaEV73JbFJCSv/45z39163+wxko6
jSa5YBBOkvdfL9PaLXikV0wt1mXWerWPMmDW1Z+i0IbT15fJSylnLAS4ZKxIV1q9
36bbqtJtGKbHRqW3vaWC0tu6YyBVVa6RgXjYnYQJh2PiziT5SPyNpH/4AzfMJw8l
OMEi66UPGKDwqvGFBl7rjeAr9z+k58y9wZIii83CK/zuNGd3/RieDCTNhSR3DmKl
oBO/aT5lYVCggXLS1UuvoRal2oD5Xi4xXYDmQnga45Ngv3PNWHCitD7SovyVYPtk
oKn7nUqYL3xY/9Fem7MNSFLIzjzbUIMR5K/GlOo6Py91j7NMLMvFlhKc1wIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFL7CULVExFliTE5oDyLzyLyY+RgHMB8GA1UdIwQY
MBaAFHIEe+FbJ1kC3PYX3D0OFtwfMIAiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMt
MWFiZTNhYzEwYWE2LzEvdnNKUXRVVEVXV0pNVG1nUEl2UEl2Smo1R0FjLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMtMWFiZTNhYzEwYWE2
LzEvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBADP8UMiN2jfITUVxw37l
DRKF3xFGZJbkOU5zZ2mDnStvJKBaSg3Qat5UmJwRppziZER3vpeDfSALtrb/4Ul1
ApfXTNjxwNjWCBeYoeZtQU6WX8cJrBmqD6OYa95rf4aR2wvqUhRqkcBxbRL4BDIC
R7QOMNsGm1y7mLlrDgN6Ah3wj0X6yRDS4ZBm7HMBLziW+ntmZAcgk4LFMTeOccNn
TTNVTWTyvS5NJcmQ2BhrgSa7azB9+J140OJHCpEtJ2DiDBWO5EYusQ/RYxIvloNM
bfK/xJYIqr5proHRPGxMFARPjoQul2YfDiyQmRzcDyZG8pHNBbs9EMWOkg1lgQ7u
Mj4=
-----END CERTIFICATE-----
Generated at Wed Apr 30 18:35:37 2025 by rpki-client