Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/dvzNBmFRUiB9-vEaQiVw2k4EmY4.roa
File: dvzNBmFRUiB9-vEaQiVw2k4EmY4.roa (raw, json)
Hash identifier: Eg0mpL6iFdpjp27l/pcny0DtONawTgZWvjy4j1nH9rQ=
Subject key identifier: 76:FC:CD:06:61:51:52:20:7D:FA:F1:1A:42:25:70:DA:4E:04:99:8E
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 018690DD5F81BEC349BA3DE6F4A17A5BC670
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/dvzNBmFRUiB9-vEaQiVw2k4EmY4.roa
Signing time: Mon 27 Feb 2023 03:14:32 +0000
ROA not before: Mon 27 Feb 2023 03:14:32 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:90:dd:5f:81:be:c3:49:ba:3d:e6:f4:a1:7a:5b:c6:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Feb 27 03:14:32 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=76fccd06615152207dfaf11a422570da4e04998e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:fe:54:80:92:92:e3:bb:1c:e9:60:7d:39:a7:
b3:30:16:9d:a3:f8:41:d0:9f:2e:3b:71:50:c9:b0:
36:c3:15:c7:fa:a5:18:b0:94:bc:40:75:6b:90:25:
6f:5e:f9:53:fd:56:35:1d:69:ed:a9:94:fb:50:06:
72:58:9a:7e:24:eb:03:f3:d5:60:8b:5c:e2:c4:dc:
87:45:23:cb:18:81:ec:c8:70:10:af:7b:ba:f2:3e:
f9:49:b5:82:55:46:97:b2:80:a2:6f:ad:81:3b:91:
da:ba:c6:76:93:6b:53:46:a0:54:40:33:40:d7:e4:
85:31:e3:91:28:8c:5e:aa:9d:f0:41:1b:4f:8b:c5:
b8:1e:cc:17:74:7f:a5:14:0c:ba:7c:a6:7d:b0:fa:
64:ff:44:4f:1a:5c:3f:e7:0b:1f:8d:e4:1a:80:df:
40:74:d1:6f:1c:0d:a8:ec:d5:70:20:b9:75:2e:bb:
17:e2:3e:4b:28:60:6a:eb:5a:5f:b0:81:18:2e:a2:
40:12:f9:0f:99:f6:34:4a:b8:ea:c4:a8:7c:9e:15:
33:96:7c:a2:18:6e:81:04:69:27:80:c4:3a:14:58:
bd:df:af:78:08:cd:25:df:e4:80:1b:3f:e5:a8:5f:
b8:53:37:65:09:0b:28:8a:03:ec:6c:f1:e3:2a:05:
30:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:FC:CD:06:61:51:52:20:7D:FA:F1:1A:42:25:70:DA:4E:04:99:8E
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/dvzNBmFRUiB9-vEaQiVw2k4EmY4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
2e:96:af:9f:c7:09:1d:87:93:20:aa:db:62:cb:78:5c:69:48:
8c:ee:99:67:9d:fa:97:4d:95:76:e6:06:b6:78:3a:73:d4:4c:
47:4b:58:b0:df:ab:e5:c5:dc:fe:b4:d7:96:f7:91:e3:42:27:
18:60:fc:0b:06:56:5e:f4:74:17:7f:0d:35:7e:ef:bd:c8:5b:
0f:69:f9:39:0a:10:07:ce:b9:73:1d:06:d4:9f:a1:3c:c9:e7:
12:c3:ef:ed:32:10:31:db:e7:d2:c2:e0:ac:8a:ee:61:fe:80:
fc:bd:54:46:0d:44:3e:36:6a:d2:55:86:93:e3:d2:fc:f8:d4:
7d:ae:51:7c:37:c1:eb:48:bc:b1:54:14:ef:ce:b8:3c:3b:82:
ce:d3:2c:93:2a:fb:ce:17:98:01:45:59:d8:49:b7:a6:c6:31:
c9:7b:90:37:c4:5d:a4:36:ab:87:41:90:bb:0a:6b:4f:64:43:
49:56:8e:b7:59:c4:7b:6e:5d:9b:b6:31:93:59:77:ea:02:c1:
8d:20:ad:37:cc:b9:d4:25:59:f1:3b:12:84:b1:34:f7:63:76:
2a:6e:03:f0:d5:0f:95:8c:d1:24:32:5a:d1:f6:75:b9:96:e5:
2b:6c:95:5a:42:20:db:71:9b:3c:84:a8:ff:ee:8d:13:48:53:
8b:5c:7d:d6
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYaQ3V+BvsNJuj3m9KF6W8ZwMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcyMDQ3YmUxNWIyNzU5MDJkY2Y2MTdkYzNkMGUxNmRjMWYz
MDgwMjIwHhcNMjMwMjI3MDMxNDMyWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3NmZjY2QwNjYxNTE1MjIwN2RmYWYxMWE0MjI1NzBkYTRlMDQ5OThlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqf5UgJKS47sc6WB9OaezMBado/hB
0J8uO3FQybA2wxXH+qUYsJS8QHVrkCVvXvlT/VY1HWntqZT7UAZyWJp+JOsD89Vg
i1zixNyHRSPLGIHsyHAQr3u68j75SbWCVUaXsoCib62BO5HausZ2k2tTRqBUQDNA
1+SFMeORKIxeqp3wQRtPi8W4HswXdH+lFAy6fKZ9sPpk/0RPGlw/5wsfjeQagN9A
dNFvHA2o7NVwILl1LrsX4j5LKGBq61pfsIEYLqJAEvkPmfY0SrjqxKh8nhUzlnyi
GG6BBGkngMQ6FFi93694CM0l3+SAGz/lqF+4UzdlCQsoigPsbPHjKgUwMwIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFHb8zQZhUVIgffrxGkIlcNpOBJmOMB8GA1UdIwQY
MBaAFHIEe+FbJ1kC3PYX3D0OFtwfMIAiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMt
MWFiZTNhYzEwYWE2LzEvZHZ6TkJtRlJVaUI5LXZFYVFpVncyazRFbVk0LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMtMWFiZTNhYzEwYWE2
LzEvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBAC6Wr5/HCR2HkyCq22LL
eFxpSIzumWed+pdNlXbmBrZ4OnPUTEdLWLDfq+XF3P6015b3keNCJxhg/AsGVl70
dBd/DTV+773IWw9p+TkKEAfOuXMdBtSfoTzJ5xLD7+0yEDHb59LC4KyK7mH+gPy9
VEYNRD42atJVhpPj0vz41H2uUXw3wetIvLFUFO/OuDw7gs7TLJMq+84XmAFFWdhJ
t6bGMcl7kDfEXaQ2q4dBkLsKa09kQ0lWjrdZxHtuXZu2MZNZd+oCwY0grTfMudQl
WfE7EoSxNPdjdipuA/DVD5WM0SQyWtH2dbmW5StslVpCINtxmzyEqP/ujRNIU4tc
fdY=
-----END CERTIFICATE-----
Generated at Mon Jun 9 00:06:35 2025 by rpki-client