Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/VUuT1yk6dXJq0QegsMOkzrz_DDg.roa
File: VUuT1yk6dXJq0QegsMOkzrz_DDg.roa (raw, json)
Hash identifier: WRQdCBqGMxSUbFM1sulAcwQBQ5A1c3/29+i41skaBAs=
Subject key identifier: 55:4B:93:D7:29:3A:75:72:6A:D1:07:A0:B0:C3:A4:CE:BC:FF:0C:38
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 018513BE8E5F2F117FF935B21EB30925BEC6
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/VUuT1yk6dXJq0QegsMOkzrz_DDg.roa
Signing time: Thu 15 Dec 2022 03:05:33 +0000
ROA not before: Thu 15 Dec 2022 03:05:33 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:185:13bd:bd63/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:13:be:8e:5f:2f:11:7f:f9:35:b2:1e:b3:09:25:be:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Dec 15 03:05:33 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=554b93d7293a75726ad107a0b0c3a4cebcff0c38
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:19:49:9e:f1:e1:05:2a:b7:78:f9:b5:11:a2:
27:ce:07:09:73:1a:d6:fb:2d:ab:d7:ca:e9:34:c2:
41:ba:4c:9d:6c:22:4c:f3:54:aa:1b:fc:9a:60:bb:
43:a1:c6:b3:42:15:c3:4c:1d:ad:53:76:ea:fc:83:
53:67:68:bf:6c:c7:b0:36:00:4f:a6:91:58:50:82:
dc:41:3c:e5:53:74:83:a9:51:1b:b7:3c:f0:c7:7b:
5a:31:7d:4c:87:2d:fe:79:66:1e:66:3e:d7:30:cf:
e3:37:17:d3:b3:6b:87:e0:0e:17:61:94:52:1c:b5:
c2:20:6f:1c:dc:66:7d:aa:f3:e8:e6:32:95:75:96:
44:a6:67:a5:e7:c1:1d:81:e3:00:cf:5c:76:ed:c9:
01:c2:7e:b7:32:86:c3:eb:ac:e2:c8:df:ec:a8:7a:
e5:f8:7e:a2:32:ef:51:35:5e:69:52:d3:c8:b1:76:
23:f3:af:63:5e:bc:38:24:03:15:c8:2b:73:71:6d:
74:1b:be:31:ea:9b:85:06:9c:79:ba:06:1c:e8:9b:
86:57:b8:48:27:d6:6f:e1:bd:30:76:af:52:b1:26:
0d:ce:71:6b:bd:b4:e8:9c:c1:be:c9:5b:3b:9a:32:
a3:3a:47:73:7b:9e:66:7a:01:7a:63:11:a9:42:12:
e4:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:4B:93:D7:29:3A:75:72:6A:D1:07:A0:B0:C3:A4:CE:BC:FF:0C:38
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/VUuT1yk6dXJq0QegsMOkzrz_DDg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
41:62:41:62:5c:85:a4:d6:fd:80:f4:68:80:10:03:cb:68:6b:
d6:42:51:77:5a:c2:5f:8c:72:6f:c0:3b:4d:d0:15:b9:41:26:
f8:c4:aa:04:95:89:05:1e:49:b3:ec:18:f9:dd:c8:ba:f6:c2:
84:9e:b0:17:1d:e3:c7:5f:de:02:ca:0f:e5:1e:fb:5c:da:5e:
73:3f:af:f8:87:9a:b7:b4:57:a4:3a:2d:23:f3:0d:f3:57:dd:
43:63:48:c6:99:a2:be:68:ec:79:97:0f:0b:3b:ad:31:d0:8e:
a8:63:3d:2c:94:98:fd:a4:a1:45:d9:dc:6c:31:e2:b5:89:0e:
1c:e0:95:37:80:f7:03:2b:53:e4:13:ff:07:14:09:41:60:33:
70:bd:2d:8e:31:e2:5b:92:d7:1c:88:48:68:36:6c:a2:87:79:
5b:8c:cd:35:ea:b6:7d:06:61:dd:5e:b9:d1:2f:f5:3c:0a:9c:
b7:5e:2d:12:59:5d:fb:c9:6e:3a:74:bb:43:30:b2:2a:f9:ab:
f8:4a:33:c0:8c:cc:d6:3c:6a:5e:65:c0:5d:35:d1:b8:bb:43:
19:7e:18:a3:38:c3:e9:4f:29:5b:94:38:64:dd:ad:a6:4b:63:
da:00:61:57:4c:89:29:1a:ca:ac:97:d0:59:a4:58:fe:22:ca:
a9:25:9f:2f
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYUTvo5fLxF/+TWyHrMJJb7GMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcyMDQ3YmUxNWIyNzU5MDJkY2Y2MTdkYzNkMGUxNmRjMWYz
MDgwMjIwHhcNMjIxMjE1MDMwNTMzWhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1NTRiOTNkNzI5M2E3NTcyNmFkMTA3YTBiMGMzYTRjZWJjZmYwYzM4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAghlJnvHhBSq3ePm1EaInzgcJcxrW
+y2r18rpNMJBukydbCJM81SqG/yaYLtDocazQhXDTB2tU3bq/INTZ2i/bMewNgBP
ppFYUILcQTzlU3SDqVEbtzzwx3taMX1Mhy3+eWYeZj7XMM/jNxfTs2uH4A4XYZRS
HLXCIG8c3GZ9qvPo5jKVdZZEpmel58EdgeMAz1x27ckBwn63MobD66ziyN/sqHrl
+H6iMu9RNV5pUtPIsXYj869jXrw4JAMVyCtzcW10G74x6puFBpx5ugYc6JuGV7hI
J9Zv4b0wdq9SsSYNznFrvbTonMG+yVs7mjKjOkdze55megF6YxGpQhLk5wIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFFVLk9cpOnVyatEHoLDDpM68/ww4MB8GA1UdIwQY
MBaAFHIEe+FbJ1kC3PYX3D0OFtwfMIAiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMt
MWFiZTNhYzEwYWE2LzEvVlV1VDF5azZkWEpxMFFlZ3NNT2t6cnpfRERnLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMtMWFiZTNhYzEwYWE2
LzEvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBAEFiQWJchaTW/YD0aIAQ
A8toa9ZCUXdawl+Mcm/AO03QFblBJvjEqgSViQUeSbPsGPndyLr2woSesBcd48df
3gLKD+Ue+1zaXnM/r/iHmre0V6Q6LSPzDfNX3UNjSMaZor5o7HmXDws7rTHQjqhj
PSyUmP2koUXZ3Gwx4rWJDhzglTeA9wMrU+QT/wcUCUFgM3C9LY4x4luS1xyISGg2
bKKHeVuMzTXqtn0GYd1eudEv9TwKnLdeLRJZXfvJbjp0u0Mwsir5q/hKM8CMzNY8
al5lwF010bi7Qxl+GKM4w+lPKVuUOGTdraZLY9oAYVdMiSkayqyX0FmkWP4iyqkl
ny8=
-----END CERTIFICATE-----
Generated at Mon Jun 9 09:38:42 2025 by rpki-client