Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/vuQ3JoHqZ8ZH_DVCCCTPVWEyXY8.roa
File: vuQ3JoHqZ8ZH_DVCCCTPVWEyXY8.roa (raw, json)
Hash identifier: NSs/h7n0C32YH6uaXsDk56s7+uCEHbSor/L6F4aQ6wk=
Subject key identifier: BE:E4:37:26:81:EA:67:C6:47:FC:35:42:08:24:CF:55:61:32:5D:8F
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 01849FAEB1A1BC695B27F1B66242292D20EF
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/vuQ3JoHqZ8ZH_DVCCCTPVWEyXY8.roa
Signing time: Tue 22 Nov 2022 14:12:16 +0000
ROA not before: Tue 22 Nov 2022 14:12:16 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:184:9f03:9814/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:9f:ae:b1:a1:bc:69:5b:27:f1:b6:62:42:29:2d:20:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Nov 22 14:12:16 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=bee4372681ea67c647fc35420824cf5561325d8f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:2a:bb:59:21:3f:8d:a2:ca:22:d4:29:87:4a:
dd:bc:31:e9:9a:8a:25:c6:c4:24:9f:98:2d:21:1a:
10:a2:84:2e:19:52:74:c7:13:37:aa:7a:a7:b0:3e:
99:c4:c4:cf:b5:6d:12:ac:8e:e6:2c:8c:fd:20:5a:
d4:24:b2:45:d0:93:98:aa:ae:d9:ae:e6:f2:fd:a7:
5b:eb:d2:bd:c9:ca:96:77:28:de:60:02:d7:43:a0:
8a:75:a0:0c:7d:27:2c:32:c9:f1:10:94:8e:ae:83:
29:ff:dd:ea:b1:a4:e6:13:59:17:21:f1:0a:b2:fc:
e4:ec:95:91:2a:a5:7b:c3:32:b5:40:ce:8f:f1:ab:
2b:b2:67:c9:6f:33:c3:90:1f:3c:78:7d:63:16:c1:
1c:9f:90:33:6d:49:62:bc:db:67:5a:04:a3:8f:86:
14:c8:be:1b:a5:2e:24:94:61:70:16:f3:cf:54:27:
68:d3:fd:2d:88:88:0c:26:9c:20:63:b7:21:89:c0:
12:e4:b5:d4:79:03:1d:73:0e:dd:74:96:f1:ee:eb:
67:a3:3f:49:1c:73:03:52:37:1e:df:de:44:8f:b3:
6c:4a:ee:96:49:6f:72:8c:c8:e7:52:66:33:0f:53:
e2:fa:aa:18:b1:e8:f6:20:7d:cd:75:27:43:d3:cc:
d2:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:E4:37:26:81:EA:67:C6:47:FC:35:42:08:24:CF:55:61:32:5D:8F
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/vuQ3JoHqZ8ZH_DVCCCTPVWEyXY8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
52:57:4e:4a:90:36:94:5d:0f:97:78:44:0c:8f:6a:50:d0:ef:
f3:3e:2e:ac:74:30:7f:b6:73:f0:ae:88:99:d1:7e:79:41:44:
a8:e0:64:5b:86:6b:60:45:61:04:f1:b3:95:9b:6b:55:87:de:
f1:cc:83:31:79:90:9e:c1:a5:d9:69:11:32:8e:65:65:d8:40:
b8:42:4f:c8:09:b7:69:c0:18:9c:cd:85:cc:58:d7:70:c8:d7:
be:99:43:0c:60:02:33:4f:a1:0c:5c:4b:cd:28:09:2c:97:9f:
f9:96:9e:95:2d:9f:8a:87:40:d2:48:8e:4d:6b:9e:02:ef:b6:
46:3f:ae:30:dc:f6:09:3f:03:fc:4e:18:29:05:61:32:21:e9:
d5:71:2a:37:99:df:38:b0:0d:a2:d3:59:cf:37:db:48:7e:2c:
90:0c:6f:e3:10:9f:1b:77:a9:da:5c:c9:7b:e6:da:ea:c2:31:
1b:32:44:e4:5c:33:6e:af:63:98:84:0b:68:40:f2:c6:e9:e5:
be:0e:95:08:66:ba:db:29:fc:ab:5a:73:fc:b0:ff:45:eb:0e:
ed:51:98:8c:18:29:a0:18:54:b2:6d:18:a2:fd:c9:01:29:b4:
ea:45:67:bd:d2:ad:42:be:f6:13:94:3f:b8:ae:91:db:7c:93:
b5:8f:26:fc
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYSfrrGhvGlbJ/G2YkIpLSDvMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcyMDQ3YmUxNWIyNzU5MDJkY2Y2MTdkYzNkMGUxNmRjMWYz
MDgwMjIwHhcNMjIxMTIyMTQxMjE2WhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiZWU0MzcyNjgxZWE2N2M2NDdmYzM1NDIwODI0Y2Y1NTYxMzI1ZDhmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyiq7WSE/jaLKItQph0rdvDHpmool
xsQkn5gtIRoQooQuGVJ0xxM3qnqnsD6ZxMTPtW0SrI7mLIz9IFrUJLJF0JOYqq7Z
ruby/adb69K9ycqWdyjeYALXQ6CKdaAMfScsMsnxEJSOroMp/93qsaTmE1kXIfEK
svzk7JWRKqV7wzK1QM6P8asrsmfJbzPDkB88eH1jFsEcn5AzbUlivNtnWgSjj4YU
yL4bpS4klGFwFvPPVCdo0/0tiIgMJpwgY7chicAS5LXUeQMdcw7ddJbx7utnoz9J
HHMDUjce395Ej7NsSu6WSW9yjMjnUmYzD1Pi+qoYsej2IH3NdSdD08zScQIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFL7kNyaB6mfGR/w1Qggkz1VhMl2PMB8GA1UdIwQY
MBaAFHIEe+FbJ1kC3PYX3D0OFtwfMIAiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMt
MWFiZTNhYzEwYWE2LzEvdnVRM0pvSHFaOFpIX0RWQ0NDVFBWV0V5WFk4LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMtMWFiZTNhYzEwYWE2
LzEvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBAFJXTkqQNpRdD5d4RAyP
alDQ7/M+Lqx0MH+2c/CuiJnRfnlBRKjgZFuGa2BFYQTxs5Wba1WH3vHMgzF5kJ7B
pdlpETKOZWXYQLhCT8gJt2nAGJzNhcxY13DI176ZQwxgAjNPoQxcS80oCSyXn/mW
npUtn4qHQNJIjk1rngLvtkY/rjDc9gk/A/xOGCkFYTIh6dVxKjeZ3ziwDaLTWc83
20h+LJAMb+MQnxt3qdpcyXvm2urCMRsyRORcM26vY5iEC2hA8sbp5b4OlQhmutsp
/Ktac/yw/0XrDu1RmIwYKaAYVLJtGKL9yQEptOpFZ73SrUK+9hOUP7iukdt8k7WP
Jvw=
-----END CERTIFICATE-----
Generated at Fri May 2 01:15:54 2025 by rpki-client