Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/vgtcvO3ES4N6_RNEI0kwElfKOMU.roa
File: vgtcvO3ES4N6_RNEI0kwElfKOMU.roa (raw, json)
Hash identifier: jl8an2CUIo1IqJcYBQXkJYP06q8XlTKqVwTWYWQQeLI=
Subject key identifier: BE:0B:5C:BC:ED:C4:4B:83:7A:FD:13:44:23:49:30:12:57:CA:38:C5
Certificate issuer: /CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Certificate serial: 018CFC8408F339AD5E17299CD70085FCA4F9
Authority key identifier: D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/vgtcvO3ES4N6_RNEI0kwElfKOMU.roa
Signing time: Fri 12 Jan 2024 07:12:40 +0000
ROA not before: Fri 12 Jan 2024 07:12:40 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:fc:84:08:f3:39:ad:5e:17:29:9c:d7:00:85:fc:a4:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Validity
Not Before: Jan 12 07:12:40 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=be0b5cbcedc44b837afd13442349301257ca38c5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:c5:2f:9f:da:42:5d:dd:b6:b6:24:f0:c3:18:
b8:3a:2d:49:93:22:f5:8d:86:77:46:9f:f3:60:2b:
ee:02:4a:d7:c3:33:a0:91:17:9d:5b:93:be:6d:f5:
77:e8:6d:10:e6:94:30:6a:d1:10:d8:79:f1:6d:67:
ad:18:68:89:20:a5:71:13:ca:2b:a5:59:e7:10:23:
18:ab:70:8f:fb:94:37:a3:b0:ba:37:36:37:82:5c:
9c:a1:f0:24:af:5b:0a:e2:08:46:4f:e6:4b:ba:59:
ae:77:e4:9e:54:78:b9:19:b6:df:54:55:62:10:da:
aa:fd:53:0e:ba:28:f7:29:bd:dd:fe:e1:b9:72:ff:
15:27:92:7c:f4:5a:77:90:b3:89:a7:22:66:d1:b3:
ef:af:91:26:23:4e:ed:f2:5c:b7:bf:4b:19:8d:22:
32:48:5f:b2:58:6b:03:22:4c:d3:15:5b:ed:1b:b9:
46:9e:06:f6:ee:46:a4:d0:52:4f:43:d2:6f:ec:54:
de:22:96:18:10:7c:fa:34:5f:b7:31:cb:2a:fa:c2:
3f:bf:86:f2:d3:61:2e:d8:56:c5:b0:ae:0a:db:47:
8e:4f:a2:bd:cf:84:b2:0f:79:f2:23:53:84:dc:8e:
39:4a:05:87:5b:38:fa:ee:e2:31:01:c0:a8:0a:8f:
06:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:0B:5C:BC:ED:C4:4B:83:7A:FD:13:44:23:49:30:12:57:CA:38:C5
X509v3 Authority Key Identifier:
keyid:D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/vgtcvO3ES4N6_RNEI0kwElfKOMU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/07PaPsuKfUM944M4Zns15o33P4w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
99:86:77:e8:bd:e7:a1:19:4d:83:b3:49:a2:fc:02:b0:0e:ba:
8f:7d:b2:b4:98:33:04:9f:c8:0a:3b:75:d7:54:d5:80:71:89:
c5:98:82:d9:9f:ef:93:be:14:72:ff:46:7f:d6:03:4f:a0:3e:
9d:3c:4b:b4:c9:e1:ae:e2:be:0e:0a:8b:22:05:25:e0:8a:3b:
ef:51:2b:68:bb:35:9b:98:b6:bb:98:73:da:92:80:ac:dc:de:
bc:e5:82:4d:30:d6:49:26:da:f7:91:d1:e4:82:a2:06:3f:85:
78:34:10:15:bb:8d:8c:11:90:16:88:3a:f5:ec:b2:bd:f6:ca:
4d:ae:63:4c:d6:25:f3:c8:82:79:89:18:d7:86:92:c0:1b:5d:
e2:3f:e7:34:f9:9f:6e:df:bd:9e:80:12:49:61:bc:5c:1c:9c:
35:8a:64:22:22:d0:d2:86:43:56:ae:07:b9:a6:64:e2:b3:9d:
80:aa:26:14:b9:de:c5:5e:15:7a:41:c5:7d:1a:81:bd:78:e7:
9e:b3:0f:a8:d7:04:94:ed:de:79:fa:2c:50:97:7f:54:20:97:
2f:e0:fc:c8:29:7a:2f:ed:14:8e:b0:8f:cd:d0:d6:32:7b:90:
56:58:41:e4:72:f1:31:f2:31:1b:fe:d1:da:fc:1f:2f:3d:e8:
ba:bf:ef:00
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYz8hAjzOa1eFymc1wCF/KT5MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQzYjNkYTNlY2I4YTdkNDMzZGUzODMzODY2N2IzNWU2OGRm
NzNmOGMwHhcNMjQwMTEyMDcxMjQwWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiZTBiNWNiY2VkYzQ0YjgzN2FmZDEzNDQyMzQ5MzAxMjU3Y2EzOGM1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkcUvn9pCXd22tiTwwxi4Oi1JkyL1
jYZ3Rp/zYCvuAkrXwzOgkRedW5O+bfV36G0Q5pQwatEQ2HnxbWetGGiJIKVxE8or
pVnnECMYq3CP+5Q3o7C6NzY3glycofAkr1sK4ghGT+ZLulmud+SeVHi5GbbfVFVi
ENqq/VMOuij3Kb3d/uG5cv8VJ5J89Fp3kLOJpyJm0bPvr5EmI07t8ly3v0sZjSIy
SF+yWGsDIkzTFVvtG7lGngb27kak0FJPQ9Jv7FTeIpYYEHz6NF+3Mcsq+sI/v4by
02Eu2FbFsK4K20eOT6K9z4SyD3nyI1OE3I45SgWHWzj67uIxAcCoCo8G1QIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFL4LXLztxEuDev0TRCNJMBJXyjjFMB8GA1UdIwQY
MBaAFNOz2j7Lin1DPeODOGZ7NeaN9z+MMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMDdQYVBzdUtmVU05NDRNNFpuczE1bzMzUDR3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Yi9lMDUyMGQtOWJhNi00MWEzLThmODct
YzUzOTc5ZDY2Y2E1LzEvdmd0Y3ZPM0VTNE42X1JORUkwa3dFbGZLT01VLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Yi9lMDUyMGQtOWJhNi00MWEzLThmODctYzUzOTc5ZDY2Y2E1
LzEvMDdQYVBzdUtmVU05NDRNNFpuczE1bzMzUDR3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBAJmGd+i956EZTYOzSaL8
ArAOuo99srSYMwSfyAo7dddU1YBxicWYgtmf75O+FHL/Rn/WA0+gPp08S7TJ4a7i
vg4KiyIFJeCKO+9RK2i7NZuYtruYc9qSgKzc3rzlgk0w1kkm2veR0eSCogY/hXg0
EBW7jYwRkBaIOvXssr32yk2uY0zWJfPIgnmJGNeGksAbXeI/5zT5n27fvZ6AEklh
vFwcnDWKZCIi0NKGQ1auB7mmZOKznYCqJhS53sVeFXpBxX0agb14556zD6jXBJTt
3nn6LFCXf1Qgly/g/Mgpei/tFI6wj83Q1jJ7kFZYQeRy8THyMRv+0dr8Hy896Lq/
7wA=
-----END CERTIFICATE-----
Generated at Sat Jun 7 22:30:14 2025 by rpki-client