Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/vDW-YxopbLF9SqWCFhkdOmISeKA.roa
File: vDW-YxopbLF9SqWCFhkdOmISeKA.roa (raw, json)
Hash identifier: G9/xuMH5+tY0n3vD6kwwoDF4adxUjOEAkKcvUTOEcaA=
Subject key identifier: BC:35:BE:63:1A:29:6C:B1:7D:4A:A5:82:16:19:1D:3A:62:12:78:A0
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0183F961666B1A1103CA757AA866D97485AE
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/vDW-YxopbLF9SqWCFhkdOmISeKA.roa
Signing time: Fri 21 Oct 2022 07:10:53 +0000
ROA not before: Fri 21 Oct 2022 07:10:53 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:f9:61:66:6b:1a:11:03:ca:75:7a:a8:66:d9:74:85:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Oct 21 07:10:53 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=bc35be631a296cb17d4aa58216191d3a621278a0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f5:78:2f:0d:20:e4:62:47:88:e2:7a:ca:cb:4e:
79:09:12:47:67:c7:82:21:d6:7c:cc:db:e8:68:8a:
5e:2a:36:80:30:74:f7:58:c0:6f:1e:f3:2f:b1:3b:
f5:7e:7b:dc:55:5a:85:d6:22:03:1a:90:5d:24:b2:
24:ce:86:e2:ed:cf:58:48:f5:aa:cd:76:4d:b5:fb:
db:27:71:1d:f8:f6:06:b7:7c:c2:36:39:bd:f8:4a:
e7:4e:0d:d2:b4:2b:bb:a6:d3:8d:7a:36:93:66:3a:
aa:e9:02:31:ef:06:20:17:43:8e:42:d8:21:17:78:
9b:83:d7:81:cb:b9:c6:5a:b8:01:24:19:f9:65:b4:
11:1d:e8:20:77:a9:2b:41:63:74:c4:de:c5:3d:9d:
02:94:a6:4d:9c:f5:66:ce:a3:29:d1:22:c4:72:4e:
ed:30:d6:13:9d:7b:f9:07:46:2c:d9:5e:54:ef:e0:
12:b2:d5:f4:a0:70:21:ed:10:de:c7:7e:f3:c3:5f:
88:5f:d2:43:40:fb:8b:a8:3a:dc:f4:81:e5:35:dd:
78:78:e4:7e:97:4b:e6:3c:ea:b7:80:5c:fa:8d:c4:
d3:a3:69:01:3a:1f:04:ee:a1:9d:be:fb:2d:41:4d:
c4:91:bd:21:d4:00:7c:7a:58:b8:56:d7:d0:4d:2e:
37:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:35:BE:63:1A:29:6C:B1:7D:4A:A5:82:16:19:1D:3A:62:12:78:A0
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/vDW-YxopbLF9SqWCFhkdOmISeKA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
20:e7:39:6f:a3:f4:54:82:4c:37:15:0f:8c:b4:ae:7e:95:dd:
dd:0c:8a:17:c8:e6:0d:f0:5c:a5:a4:0b:04:51:1f:1d:ee:90:
d4:5d:fe:21:f4:9a:d7:d8:43:35:b8:8c:28:16:9b:33:95:61:
07:f1:5d:61:2d:3b:9f:fe:a8:68:7b:15:99:31:44:3d:e0:dc:
79:4c:12:2c:94:4c:3e:95:b9:7e:4e:23:ed:c7:11:66:8a:27:
ca:d5:2c:06:96:42:1b:b2:fd:3a:91:45:5e:a5:86:bf:93:81:
55:30:5a:56:6f:0d:0b:ae:a7:e2:13:1f:d4:f3:4b:32:c4:98:
73:20:f1:5f:ac:f5:04:89:a3:8b:ec:41:3c:aa:df:c4:2c:ff:
1a:19:2f:9b:01:4a:67:fd:83:a2:38:f4:2a:fb:55:b4:dc:53:
db:be:ce:e3:bf:49:13:b2:6f:e7:a8:3f:af:cb:63:bb:fe:77:
5a:2c:d5:25:72:17:59:7c:01:fa:2d:51:8b:aa:e4:73:19:ba:
d1:3c:e3:05:ff:20:09:e5:29:e5:a7:59:18:61:6c:00:f1:ed:
e0:07:69:4e:ea:29:b6:20:63:1c:2f:13:6e:44:30:6f:f0:6e:
4e:96:16:18:e7:98:e3:bb:4f:ed:f7:fc:32:8f:cc:6a:5e:0b:
8d:76:7f:71
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYP5YWZrGhEDynV6qGbZdIWuMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcyMDQ3YmUxNWIyNzU5MDJkY2Y2MTdkYzNkMGUxNmRjMWYz
MDgwMjIwHhcNMjIxMDIxMDcxMDUzWhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiYzM1YmU2MzFhMjk2Y2IxN2Q0YWE1ODIxNjE5MWQzYTYyMTI3OGEwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9XgvDSDkYkeI4nrKy055CRJHZ8eC
IdZ8zNvoaIpeKjaAMHT3WMBvHvMvsTv1fnvcVVqF1iIDGpBdJLIkzobi7c9YSPWq
zXZNtfvbJ3Ed+PYGt3zCNjm9+ErnTg3StCu7ptONejaTZjqq6QIx7wYgF0OOQtgh
F3ibg9eBy7nGWrgBJBn5ZbQRHeggd6krQWN0xN7FPZ0ClKZNnPVmzqMp0SLEck7t
MNYTnXv5B0Ys2V5U7+ASstX0oHAh7RDex37zw1+IX9JDQPuLqDrc9IHlNd14eOR+
l0vmPOq3gFz6jcTTo2kBOh8E7qGdvvstQU3Ekb0h1AB8eli4VtfQTS43PQIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFLw1vmMaKWyxfUqlghYZHTpiEnigMB8GA1UdIwQY
MBaAFHIEe+FbJ1kC3PYX3D0OFtwfMIAiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMt
MWFiZTNhYzEwYWE2LzEvdkRXLVl4b3BiTEY5U3FXQ0Zoa2RPbUlTZUtBLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMtMWFiZTNhYzEwYWE2
LzEvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBACDnOW+j9FSCTDcVD4y0
rn6V3d0MihfI5g3wXKWkCwRRHx3ukNRd/iH0mtfYQzW4jCgWmzOVYQfxXWEtO5/+
qGh7FZkxRD3g3HlMEiyUTD6VuX5OI+3HEWaKJ8rVLAaWQhuy/TqRRV6lhr+TgVUw
WlZvDQuup+ITH9TzSzLEmHMg8V+s9QSJo4vsQTyq38Qs/xoZL5sBSmf9g6I49Cr7
VbTcU9u+zuO/SROyb+eoP6/LY7v+d1os1SVyF1l8AfotUYuq5HMZutE84wX/IAnl
KeWnWRhhbADx7eAHaU7qKbYgYxwvE25EMG/wbk6WFhjnmOO7T+33/DKPzGpeC412
f3E=
-----END CERTIFICATE-----
Generated at Mon Jun 9 00:08:14 2025 by rpki-client