Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/vPyNbfF2jF-4znQFqQaRe00gUHk.roa
File: vPyNbfF2jF-4znQFqQaRe00gUHk.roa (raw, json)
Hash identifier: f5r+JMzVkx//0CJHCBYpG1aSQgSCXkKTHr6MTSVtIqU=
Subject key identifier: BC:FC:8D:6D:F1:76:8C:5F:B8:CE:74:05:A9:06:91:7B:4D:20:50:79
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 018975FE9A9590CFAF1322C201E5D54E14CC
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/vPyNbfF2jF-4znQFqQaRe00gUHk.roa
Signing time: Fri 21 Jul 2023 01:09:27 +0000
ROA not before: Fri 21 Jul 2023 01:09:27 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:188:5fe2:b396/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:187:4695:a68a/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:188:7858:a003/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64:ffff:0:187:fa9a:b088/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:187:b2b8:a7dd/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:75:fe:9a:95:90:cf:af:13:22:c2:01:e5:d5:4e:14:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Jul 21 01:09:27 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=bcfc8d6df1768c5fb8ce7405a906917b4d205079
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:0d:95:6f:1b:b3:70:f3:46:54:7c:71:18:8b:
18:55:e9:2b:69:a5:fd:26:2a:a0:c8:67:39:d3:f2:
6e:80:c4:20:de:ba:6b:37:49:b4:ca:73:4f:06:2b:
80:d6:a7:ac:5a:c4:82:1f:ef:a4:35:72:6e:cc:d1:
e0:70:65:02:72:d2:b6:61:2f:4d:c4:f2:ac:20:3c:
72:bb:17:1b:bd:c7:e4:44:09:0a:71:6d:0a:6a:6f:
7e:0a:94:7f:53:84:c7:79:84:2d:1e:dd:2f:4c:eb:
97:a0:4a:95:be:6d:fb:1d:6c:52:e2:76:6b:ce:12:
73:7e:94:f7:d8:0f:25:9d:2f:0f:95:8d:af:76:54:
c6:7c:2b:45:ef:e9:19:25:fc:f3:e7:73:20:f8:b3:
aa:05:65:26:62:8c:79:ad:90:69:c6:37:88:85:5c:
9b:0b:97:9b:d9:64:11:88:2f:44:37:af:89:f9:f9:
7b:d3:5e:f8:54:c2:b7:2d:a2:46:23:6f:9c:b0:01:
86:52:7e:fe:3d:e5:d6:0c:3c:de:b5:2f:bf:c7:de:
36:23:78:4a:0b:a0:38:e9:5c:a0:aa:bd:f3:dc:fb:
77:da:9f:2e:c5:62:cd:21:1a:fc:83:f6:4b:18:73:
dd:2c:67:a3:d4:78:ce:27:9a:3d:35:71:27:cf:9e:
76:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:FC:8D:6D:F1:76:8C:5F:B8:CE:74:05:A9:06:91:7B:4D:20:50:79
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/vPyNbfF2jF-4znQFqQaRe00gUHk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
4f:73:47:39:cf:96:2a:c0:40:53:f2:7a:84:82:b5:0c:27:d3:
7d:a8:7e:2e:e4:19:8d:68:8c:b6:bd:30:e0:dd:63:58:7b:3f:
0d:c0:fb:e2:76:68:52:25:94:8a:5b:2b:8a:2c:89:48:66:93:
01:3b:c0:26:29:66:6d:c6:6e:09:67:96:e7:ad:ab:aa:80:8b:
fb:f0:57:ea:a2:81:5e:f3:69:40:0c:dd:12:97:d0:3b:0b:62:
6f:ce:fa:1c:fe:0c:b3:37:b1:03:5f:94:e0:c4:6c:fd:d5:38:
c5:e0:51:3f:cd:53:4c:95:b0:48:cf:85:3a:a0:e3:9f:0d:e4:
17:c1:89:d1:ad:eb:18:ad:48:c5:db:9c:f0:ca:41:67:da:d2:
65:74:09:f2:2a:60:bd:93:23:93:7a:45:d1:fb:d9:cf:b5:57:
08:0f:50:c3:0f:fe:81:35:d9:06:f5:09:b8:27:86:be:83:37:
13:9f:d0:9a:a3:51:3d:af:38:8c:4c:fb:b1:d5:e2:d3:5e:d4:
e9:84:90:c4:eb:c1:cd:18:7a:bb:7b:a5:ec:8a:90:d5:54:35:
57:40:8a:8e:e9:16:3f:b8:19:3e:dd:a4:a5:89:f3:0f:c1:15:
98:22:8a:30:bc:72:95:6e:9c:48:cf:1e:c4:90:fe:d2:64:7e:
b9:37:c7:0b
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYl1/pqVkM+vEyLCAeXVThTMMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcyMDQ3YmUxNWIyNzU5MDJkY2Y2MTdkYzNkMGUxNmRjMWYz
MDgwMjIwHhcNMjMwNzIxMDEwOTI3WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiY2ZjOGQ2ZGYxNzY4YzVmYjhjZTc0MDVhOTA2OTE3YjRkMjA1MDc5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgg2VbxuzcPNGVHxxGIsYVekraaX9
JiqgyGc50/JugMQg3rprN0m0ynNPBiuA1qesWsSCH++kNXJuzNHgcGUCctK2YS9N
xPKsIDxyuxcbvcfkRAkKcW0Kam9+CpR/U4THeYQtHt0vTOuXoEqVvm37HWxS4nZr
zhJzfpT32A8lnS8PlY2vdlTGfCtF7+kZJfzz53Mg+LOqBWUmYox5rZBpxjeIhVyb
C5eb2WQRiC9EN6+J+fl70174VMK3LaJGI2+csAGGUn7+PeXWDDzetS+/x942I3hK
C6A46Vygqr3z3Pt32p8uxWLNIRr8g/ZLGHPdLGej1HjOJ5o9NXEnz552awIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFLz8jW3xdoxfuM50BakGkXtNIFB5MB8GA1UdIwQY
MBaAFHIEe+FbJ1kC3PYX3D0OFtwfMIAiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMt
MWFiZTNhYzEwYWE2LzEvdlB5TmJmRjJqRi00em5RRnFRYVJlMDBnVUhrLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMtMWFiZTNhYzEwYWE2
LzEvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBAE9zRznPlirAQFPyeoSC
tQwn032ofi7kGY1ojLa9MODdY1h7Pw3A++J2aFIllIpbK4osiUhmkwE7wCYpZm3G
bglnluetq6qAi/vwV+qigV7zaUAM3RKX0DsLYm/O+hz+DLM3sQNflODEbP3VOMXg
UT/NU0yVsEjPhTqg458N5BfBidGt6xitSMXbnPDKQWfa0mV0CfIqYL2TI5N6RdH7
2c+1VwgPUMMP/oE12Qb1Cbgnhr6DNxOf0JqjUT2vOIxM+7HV4tNe1OmEkMTrwc0Y
ert7peyKkNVUNVdAio7pFj+4GT7dpKWJ8w/BFZgiijC8cpVunEjPHsSQ/tJkfrk3
xws=
-----END CERTIFICATE-----
Generated at Mon Jun 9 06:02:17 2025 by rpki-client