Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/vtyicd2PnAgdK-sRuqZu27MyZbA.roa
File: vtyicd2PnAgdK-sRuqZu27MyZbA.roa (raw, json)
Hash identifier: gw0kX4nVsDHGmfjPooOLOecgAmal97igQfXG+jFpkbQ=
Subject key identifier: BE:DC:A2:71:DD:8F:9C:08:1D:2B:EB:11:BA:A6:6E:DB:B3:32:65:B0
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 01884A3FA40F10D54D03ECA9C40A45E337FC
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/vtyicd2PnAgdK-sRuqZu27MyZbA.roa
Signing time: Tue 23 May 2023 20:14:24 +0000
ROA not before: Tue 23 May 2023 20:14:24 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:187:4695:a68a/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64:ffff:0:187:fa9a:b088/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:187:b2b8:a7dd/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:4a:3f:a4:0f:10:d5:4d:03:ec:a9:c4:0a:45:e3:37:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: May 23 20:14:24 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=bedca271dd8f9c081d2beb11baa66edbb33265b0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:c8:18:79:00:44:84:62:ba:69:ad:a9:c2:d1:
6c:67:36:e3:0d:a7:15:51:32:76:4e:25:4e:94:c1:
20:5d:31:d4:b6:91:06:73:c2:93:be:d1:ba:8f:0b:
2c:b1:73:5a:62:e4:0e:62:27:5e:a6:e8:e3:3d:28:
7c:45:0f:a6:b4:e4:8e:22:f9:6e:77:70:74:c7:ac:
e6:b0:84:39:4a:fe:dc:5a:e2:9f:af:89:d9:af:29:
20:38:c6:83:75:89:e4:d0:eb:bf:31:d7:95:8a:18:
f1:79:de:82:f2:42:83:79:a3:04:df:23:e7:40:1b:
94:24:1d:cc:cf:76:34:0b:9e:5c:3e:d3:e2:39:79:
f3:c0:56:35:22:47:0b:ad:bc:1e:cb:26:76:22:05:
00:bb:35:6c:00:a8:e6:f6:2b:ad:73:29:9f:1b:4d:
32:27:65:14:65:e3:db:8f:54:2f:d7:44:b3:30:49:
3c:cd:50:0f:ff:76:2d:45:cd:6b:7e:2c:33:e5:34:
55:94:d7:ba:79:f6:15:1b:f7:2e:c2:8c:07:b4:1b:
0b:25:a9:9f:64:d6:91:ca:0c:9d:9d:53:25:46:78:
35:bf:a6:be:be:2a:ca:75:bd:da:2c:e2:a6:c5:06:
29:ca:27:36:b2:db:16:af:f8:bc:84:11:a3:6b:90:
f5:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:DC:A2:71:DD:8F:9C:08:1D:2B:EB:11:BA:A6:6E:DB:B3:32:65:B0
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/vtyicd2PnAgdK-sRuqZu27MyZbA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
16:73:49:dc:00:dd:ab:0c:0d:0f:92:4a:fc:86:b6:56:da:0d:
d2:e4:e4:eb:10:b3:07:70:55:ed:0e:95:2b:b7:23:c5:b4:f5:
76:5e:c1:f4:52:68:e7:cf:fd:f8:6a:9c:de:3f:ca:3f:79:ea:
dc:dc:6d:90:79:c5:3e:a2:9f:47:a6:7b:4e:d6:1d:36:70:4d:
11:02:ed:e2:e4:1c:33:6e:83:f0:80:76:1b:3c:5b:85:d4:0b:
42:b9:75:2d:87:5f:ca:5e:67:30:7b:7b:5f:e5:eb:f5:11:ad:
d0:ce:fe:57:d5:4d:2f:15:53:8a:82:72:46:ab:49:bc:d8:09:
a5:c7:96:22:bc:be:d4:6a:f8:55:29:be:74:ec:fc:46:89:e1:
7e:ce:14:67:76:9b:33:73:d1:d3:25:b8:99:16:77:9b:7e:a4:
a6:63:c5:7e:77:50:f4:a1:a1:bb:5c:d4:8f:00:20:cf:d4:b0:
15:b2:39:12:45:38:e0:c1:c8:20:c8:bf:b2:dc:78:a4:68:66:
97:2c:42:f1:0a:11:f6:28:e3:c4:bb:39:fc:c0:84:15:2d:18:
2d:d4:86:80:09:03:89:d2:99:83:4f:53:68:fa:40:58:20:ab:
b9:e7:23:54:b3:bf:69:ea:1b:99:8b:39:84:69:47:6f:04:26:
be:27:2d:f4
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYhKP6QPENVNA+ypxApF4zf8MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcyMDQ3YmUxNWIyNzU5MDJkY2Y2MTdkYzNkMGUxNmRjMWYz
MDgwMjIwHhcNMjMwNTIzMjAxNDI0WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiZWRjYTI3MWRkOGY5YzA4MWQyYmViMTFiYWE2NmVkYmIzMzI2NWIwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApMgYeQBEhGK6aa2pwtFsZzbjDacV
UTJ2TiVOlMEgXTHUtpEGc8KTvtG6jwsssXNaYuQOYidepujjPSh8RQ+mtOSOIvlu
d3B0x6zmsIQ5Sv7cWuKfr4nZrykgOMaDdYnk0Ou/MdeVihjxed6C8kKDeaME3yPn
QBuUJB3Mz3Y0C55cPtPiOXnzwFY1IkcLrbweyyZ2IgUAuzVsAKjm9iutcymfG00y
J2UUZePbj1Qv10SzMEk8zVAP/3YtRc1rfiwz5TRVlNe6efYVG/cuwowHtBsLJamf
ZNaRygydnVMlRng1v6a+virKdb3aLOKmxQYpyic2stsWr/i8hBGja5D1bQIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFL7conHdj5wIHSvrEbqmbtuzMmWwMB8GA1UdIwQY
MBaAFHIEe+FbJ1kC3PYX3D0OFtwfMIAiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMt
MWFiZTNhYzEwYWE2LzEvdnR5aWNkMlBuQWdkSy1zUnVxWnUyN015WmJBLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMtMWFiZTNhYzEwYWE2
LzEvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBABZzSdwA3asMDQ+SSvyG
tlbaDdLk5OsQswdwVe0OlSu3I8W09XZewfRSaOfP/fhqnN4/yj956tzcbZB5xT6i
n0eme07WHTZwTREC7eLkHDNug/CAdhs8W4XUC0K5dS2HX8peZzB7e1/l6/URrdDO
/lfVTS8VU4qCckarSbzYCaXHliK8vtRq+FUpvnTs/EaJ4X7OFGd2mzNz0dMluJkW
d5t+pKZjxX53UPShobtc1I8AIM/UsBWyORJFOODByCDIv7LceKRoZpcsQvEKEfYo
48S7OfzAhBUtGC3UhoAJA4nSmYNPU2j6QFggq7nnI1Szv2nqG5mLOYRpR28EJr4n
LfQ=
-----END CERTIFICATE-----
Generated at Thu May 1 01:29:56 2025 by rpki-client