Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/Vs2-KdUZbNQqJXMsgCJ_eLqCT2U.roa
File: Vs2-KdUZbNQqJXMsgCJ_eLqCT2U.roa (raw, json)
Hash identifier: /NgSXeUQTF8AszhwjeRzIMROPhaojjJ1VcXBvaYeM3s=
Subject key identifier: 56:CD:BE:29:D5:19:6C:D4:2A:25:73:2C:80:22:7F:78:BA:82:4F:65
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 74B80E5E
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/Vs2-KdUZbNQqJXMsgCJ_eLqCT2U.roa
Signing time: Tue 22 Mar 2022 10:11:49 +0000
ROA not before: Tue 22 Mar 2022 10:11:49 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:17f:1bf4:40b5/128 maxlen: 128
2001:67c:64:ffff:0:17f:20ac:a2bd/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:17f:87e3:2531/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1958219358 (0x74b80e5e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Mar 22 10:11:49 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=56cdbe29d5196cd42a25732c80227f78ba824f65
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:d1:e1:f5:3c:ad:37:d6:71:77:dc:78:e4:aa:
45:3e:97:3c:7a:87:a2:6d:d7:67:55:05:8c:88:ff:
2d:ae:d2:93:65:4b:06:e8:3e:90:d9:e8:38:66:95:
bb:94:e7:87:00:df:f0:a7:18:47:cb:2f:46:8a:15:
74:a3:62:5b:65:43:a3:9a:42:3e:0e:62:07:d1:6a:
a3:46:db:be:ac:86:7f:c8:70:ef:43:29:be:4c:6d:
d8:32:05:b1:f8:13:0a:18:58:47:ad:12:48:88:db:
96:5c:c7:a5:66:30:72:68:87:31:57:9b:2d:a3:bb:
25:0e:43:c5:1d:af:25:98:b5:ab:9a:76:25:d6:86:
2a:06:14:9f:b4:fe:c8:d4:80:61:76:35:46:fa:d6:
8c:cc:ca:08:32:95:d8:80:42:39:79:13:95:d7:7c:
8a:6d:57:cf:a3:ee:14:96:d0:8b:8e:07:92:47:e9:
19:01:07:e0:c6:b2:65:0c:a0:58:9b:9e:2a:d8:28:
37:8b:4a:b9:ba:dd:ee:49:52:24:e6:14:e2:f9:a9:
7f:d8:a4:cf:33:d9:a8:eb:05:1d:0c:c1:22:8a:1d:
8b:fb:1b:50:c8:12:f1:d3:85:8d:18:55:7c:58:ca:
e6:6b:27:8b:fa:34:a9:6e:56:5e:d0:9d:e8:72:bb:
16:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:CD:BE:29:D5:19:6C:D4:2A:25:73:2C:80:22:7F:78:BA:82:4F:65
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/Vs2-KdUZbNQqJXMsgCJ_eLqCT2U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
8e:e7:cc:0e:e3:7b:0d:c1:b6:18:1c:53:38:4f:d6:61:06:ff:
73:54:49:47:d2:cd:3c:80:7a:f1:6c:3a:3c:13:09:6f:4c:8d:
51:c6:2f:e2:fa:f7:d5:4f:ae:a2:c2:09:ef:0a:25:d7:00:81:
44:a4:30:d6:c8:00:23:ec:e1:80:3e:57:fd:d4:9b:dd:72:50:
25:9b:1c:31:1a:aa:16:e4:dc:06:95:d9:0b:95:9e:ff:a7:67:
3c:87:17:37:16:4f:3e:13:83:da:b8:b5:6b:9b:36:8a:a7:36:
ce:83:55:85:a8:56:6d:be:d1:87:83:78:68:21:98:bc:67:15:
48:7d:e0:13:8f:12:36:87:b3:6b:3d:92:24:36:f7:08:e0:3c:
53:40:21:06:f0:95:11:17:44:b7:53:12:2b:56:4f:36:be:3e:
d3:03:cd:ca:60:79:50:0c:b2:8e:7b:5c:9d:5d:89:2a:0c:db:
86:85:88:fb:38:d6:3f:65:66:50:be:2e:d4:ba:2a:11:32:0f:
4e:2c:fa:86:fc:73:a5:58:e0:93:f3:c0:d7:d6:3b:b7:52:26:
af:db:08:e9:95:62:fa:43:f7:e8:80:39:ad:7d:e0:df:ec:05:
60:86:de:4d:d4:83:6d:f1:a1:1b:7b:10:76:f1:cd:f3:5a:98:
0a:e3:4b:04
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgIEdLgOXjANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg3
MjA0N2JlMTViMjc1OTAyZGNmNjE3ZGMzZDBlMTZkYzFmMzA4MDIyMB4XDTIyMDMy
MjEwMTE0OVoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoNTZjZGJlMjlkNTE5
NmNkNDJhMjU3MzJjODAyMjdmNzhiYTgyNGY2NTCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBANXR4fU8rTfWcXfceOSqRT6XPHqHom3XZ1UFjIj/La7Sk2VL
Bug+kNnoOGaVu5TnhwDf8KcYR8svRooVdKNiW2VDo5pCPg5iB9Fqo0bbvqyGf8hw
70Mpvkxt2DIFsfgTChhYR60SSIjbllzHpWYwcmiHMVebLaO7JQ5DxR2vJZi1q5p2
JdaGKgYUn7T+yNSAYXY1RvrWjMzKCDKV2IBCOXkTldd8im1Xz6PuFJbQi44Hkkfp
GQEH4MayZQygWJueKtgoN4tKubrd7klSJOYU4vmpf9ikzzPZqOsFHQzBIoodi/sb
UMgS8dOFjRhVfFjK5msni/o0qW5WXtCd6HK7FjkCAwEAAaOCAhowggIWMB0GA1Ud
DgQWBBRWzb4p1Rls1ColcyyAIn94uoJPZTAfBgNVHSMEGDAWgBRyBHvhWydZAtz2
F9w9DhbcHzCAIjAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L2NnUjc0VnNuV1FMYzloZmNQUTRXM0I4d2dDSS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvNWUvNzk4NDQ3LTIxZjQtNDVhYi05OWRjLTFhYmUzYWMxMGFhNi8x
L1ZzMi1LZFVaYk5RcUpYTXNnQ0pfZUxxQ1QyVS5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNWUv
Nzk4NDQ3LTIxZjQtNDVhYi05OWRjLTFhYmUzYWMxMGFhNi8xL2NnUjc0VnNuV1FM
YzloZmNQUTRXM0I4d2dDSS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAw
BggrBgEFBQcBBwEB/wQhMB8wDAQCAAEwBgMEA8EAGDAPBAIAAjAJAwcAIAEGfABk
MA0GCSqGSIb3DQEBCwUAA4IBAQCO58wO43sNwbYYHFM4T9ZhBv9zVElH0s08gHrx
bDo8EwlvTI1Rxi/i+vfVT66iwgnvCiXXAIFEpDDWyAAj7OGAPlf91JvdclAlmxwx
GqoW5NwGldkLlZ7/p2c8hxc3Fk8+E4PauLVrmzaKpzbOg1WFqFZtvtGHg3hoIZi8
ZxVIfeATjxI2h7NrPZIkNvcI4DxTQCEG8JURF0S3UxIrVk82vj7TA83KYHlQDLKO
e1ydXYkqDNuGhYj7ONY/ZWZQvi7UuioRMg9OLPqG/HOlWOCT88DX1ju3Uiav2wjp
lWL6Q/fogDmtfeDf7AVght5N1INt8aEbexB28c3zWpgK40sE
-----END CERTIFICATE-----
Generated at Mon Jun 9 00:29:31 2025 by rpki-client