Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/vTBqyQUKNZZmKCmXG2LNXakdDow.roa
File: vTBqyQUKNZZmKCmXG2LNXakdDow.roa (raw, json)
Hash identifier: 7YKdWZUjYLgeBd/lBrUzYX5K8H1tMe7RF6BUtkuflTg=
Subject key identifier: BD:30:6A:C9:05:0A:35:96:66:28:29:97:1B:62:CD:5D:A9:1D:0E:8C
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 018246A918834471A0D1E42943B894D5F176
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/vTBqyQUKNZZmKCmXG2LNXakdDow.roa
Signing time: Thu 28 Jul 2022 21:14:23 +0000
ROA not before: Thu 28 Jul 2022 21:14:23 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:182:3f1d:a803/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:182:383f:6b78/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:46:a9:18:83:44:71:a0:d1:e4:29:43:b8:94:d5:f1:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Jul 28 21:14:23 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=bd306ac9050a3596662829971b62cd5da91d0e8c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:71:ef:1e:91:ca:1a:76:a7:8d:c4:84:af:07:
dd:f2:e3:59:5a:84:48:37:2b:ca:5f:0c:4c:f4:fa:
1d:32:01:7b:43:35:95:c1:b3:7b:62:c5:74:bb:0d:
8d:f9:ad:56:2e:cb:67:02:50:22:e2:07:d5:4a:bf:
2c:94:af:a3:ec:92:5b:ef:8d:2c:42:e7:03:3d:54:
97:2c:51:b4:ac:d7:a4:46:56:3a:03:d2:a9:a1:78:
47:89:b6:c1:1f:7e:aa:b7:ef:28:ae:1b:e7:45:7a:
db:bc:f7:7e:d4:d9:f5:53:0a:a9:ec:0d:01:ae:8e:
55:9a:a8:26:19:0a:55:b0:93:ab:c1:a7:90:eb:cf:
42:c1:70:87:27:9c:d5:7b:89:62:d0:35:c7:1d:2b:
83:1e:36:be:ba:f0:4d:cf:20:c9:41:37:f4:af:8d:
b1:bc:4e:db:80:14:a8:77:ec:34:50:f9:fd:38:70:
e0:54:19:bd:6f:69:55:b4:3a:4c:33:78:bf:0d:0b:
4c:cb:9f:b3:0f:e0:d8:ff:f7:6e:84:88:13:2c:f1:
66:64:62:89:ba:49:d2:2a:04:36:c2:96:1f:90:76:
b8:5e:f5:34:84:a1:e5:13:de:f6:1e:de:d6:a1:da:
f5:d2:29:be:be:c8:2a:84:08:d1:e2:8d:83:5c:e5:
49:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:30:6A:C9:05:0A:35:96:66:28:29:97:1B:62:CD:5D:A9:1D:0E:8C
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/vTBqyQUKNZZmKCmXG2LNXakdDow.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
0d:ca:ae:1f:ce:24:1c:46:30:fe:a3:b6:92:0e:f9:20:4d:59:
b2:72:57:91:3f:1b:cc:5c:8a:b7:10:3e:6d:5a:03:3e:e1:7b:
3d:0b:6a:42:c3:8b:c3:06:ad:4c:31:af:67:d9:25:28:93:a5:
76:85:b4:c5:79:51:e9:b5:96:ab:bc:31:6f:2f:36:17:2e:e0:
2a:38:0b:14:9e:4b:05:2a:f4:4c:bf:28:48:31:7a:c3:39:75:
22:22:fe:b9:02:e3:4b:e7:34:55:c3:0f:4f:05:21:ec:ac:99:
90:90:d6:4f:84:2c:b4:88:31:73:e8:58:df:b9:07:07:8a:88:
a6:8f:db:ba:fa:eb:18:34:4d:89:8b:95:d7:80:f3:ac:e9:76:
15:2d:c5:aa:56:68:43:16:59:c1:26:b5:d8:53:e9:5c:ce:aa:
7c:88:b0:ab:4a:24:06:a6:b1:94:0f:ef:4e:61:3a:38:3b:8b:
fd:f0:0d:5e:6d:61:cc:fa:30:94:46:23:35:e5:9d:bc:4a:c1:
e7:6a:55:1a:8c:df:32:1c:48:ac:2f:ea:7a:a6:4d:9b:e2:40:
fe:35:68:0c:80:3d:63:92:c9:c4:56:88:92:12:9e:18:b0:c2:
3e:eb:40:7f:3e:76:06:c5:29:38:84:bd:3b:cc:f4:19:49:a0:
33:df:e4:fd
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYJGqRiDRHGg0eQpQ7iU1fF2MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcyMDQ3YmUxNWIyNzU5MDJkY2Y2MTdkYzNkMGUxNmRjMWYz
MDgwMjIwHhcNMjIwNzI4MjExNDIzWhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiZDMwNmFjOTA1MGEzNTk2NjYyODI5OTcxYjYyY2Q1ZGE5MWQwZThjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr3HvHpHKGnanjcSErwfd8uNZWoRI
NyvKXwxM9PodMgF7QzWVwbN7YsV0uw2N+a1WLstnAlAi4gfVSr8slK+j7JJb740s
QucDPVSXLFG0rNekRlY6A9KpoXhHibbBH36qt+8orhvnRXrbvPd+1Nn1Uwqp7A0B
ro5VmqgmGQpVsJOrwaeQ689CwXCHJ5zVe4li0DXHHSuDHja+uvBNzyDJQTf0r42x
vE7bgBSod+w0UPn9OHDgVBm9b2lVtDpMM3i/DQtMy5+zD+DY//duhIgTLPFmZGKJ
uknSKgQ2wpYfkHa4XvU0hKHlE972Ht7Wodr10im+vsgqhAjR4o2DXOVJfQIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFL0waskFCjWWZigplxtizV2pHQ6MMB8GA1UdIwQY
MBaAFHIEe+FbJ1kC3PYX3D0OFtwfMIAiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMt
MWFiZTNhYzEwYWE2LzEvdlRCcXlRVUtOWlptS0NtWEcyTE5YYWtkRG93LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMtMWFiZTNhYzEwYWE2
LzEvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBAA3Krh/OJBxGMP6jtpIO
+SBNWbJyV5E/G8xcircQPm1aAz7hez0LakLDi8MGrUwxr2fZJSiTpXaFtMV5Uem1
lqu8MW8vNhcu4Co4CxSeSwUq9Ey/KEgxesM5dSIi/rkC40vnNFXDD08FIeysmZCQ
1k+ELLSIMXPoWN+5BweKiKaP27r66xg0TYmLldeA86zpdhUtxapWaEMWWcEmtdhT
6VzOqnyIsKtKJAamsZQP705hOjg7i/3wDV5tYcz6MJRGIzXlnbxKwedqVRqM3zIc
SKwv6nqmTZviQP41aAyAPWOSycRWiJISnhiwwj7rQH8+dgbFKTiEvTvM9BlJoDPf
5P0=
-----END CERTIFICATE-----
Generated at Thu Jun 12 02:54:28 2025 by rpki-client