Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/vVsn1nl4FW-_7AHA1tgMkZs0HlY.roa
File: vVsn1nl4FW-_7AHA1tgMkZs0HlY.roa (raw, json)
Hash identifier: 7c8LCuY4VMgC2Ri/qDLf3dToJABEKV09uL7DvMpAw8s=
Subject key identifier: BD:5B:27:D6:79:78:15:6F:BF:EC:01:C0:D6:D8:0C:91:9B:34:1E:56
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 800A8AF8
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/vVsn1nl4FW-_7AHA1tgMkZs0HlY.roa
Signing time: Sun 01 May 2022 03:10:49 +0000
ROA not before: Sun 01 May 2022 03:10:49 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:180:466e:42dd/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:180:457:1e3f/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2148174584 (0x800a8af8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: May 1 03:10:49 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=bd5b27d67978156fbfec01c0d6d80c919b341e56
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f8:11:40:8f:f6:cb:37:23:de:e2:aa:c9:b7:43:
39:c9:a3:65:94:c3:92:d4:ce:71:04:0d:4d:84:aa:
80:0d:c4:3e:3a:54:1e:00:27:e1:8e:44:dd:c2:f3:
6d:ae:19:ae:25:88:b6:47:05:1e:8a:60:14:66:8b:
ff:5e:02:bc:a6:15:36:18:51:c3:32:f7:3a:a4:08:
c1:5d:ce:3d:6f:b5:68:86:dd:43:f0:81:42:61:10:
86:37:4c:6f:fb:56:af:2e:e4:fb:d2:a6:57:36:44:
30:51:44:9e:a3:44:3a:40:90:16:19:17:3e:e0:8b:
c8:cb:a6:59:f0:5e:f9:40:78:cb:2e:71:57:78:0f:
2d:8f:ee:25:bd:72:4b:08:e3:9d:65:e9:c8:79:4c:
9c:87:19:ea:fc:bc:b5:c2:a7:2f:af:18:e3:78:80:
64:99:54:53:d3:69:3b:a4:02:1c:80:0c:83:55:2c:
cd:d6:fc:82:e4:7c:b5:15:47:b8:f3:6e:02:c3:d8:
43:c0:21:5c:75:6e:8d:43:fe:d7:2c:e1:ef:7b:c3:
7c:33:46:f4:04:14:ff:3c:09:fc:bf:55:30:4b:19:
d4:ca:f3:97:45:65:2b:2e:fe:df:15:86:f9:06:d6:
44:0f:40:89:91:20:04:f7:bf:70:fb:5e:25:b8:2a:
1b:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:5B:27:D6:79:78:15:6F:BF:EC:01:C0:D6:D8:0C:91:9B:34:1E:56
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/vVsn1nl4FW-_7AHA1tgMkZs0HlY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
28:57:3e:1b:bb:2f:21:67:de:02:5a:b8:80:90:d6:c7:f1:b4:
c8:02:1f:f0:cf:12:fe:6e:31:b1:49:18:36:34:e2:76:b7:db:
e1:c9:01:87:d4:ef:1f:50:b3:69:74:2b:cb:8f:60:b2:93:96:
04:c4:97:4e:5a:af:d0:c7:bd:27:fc:3f:6f:d4:2b:1e:f8:cf:
c6:47:a5:40:5d:03:6c:28:a9:27:e9:10:a4:ea:84:d7:a9:b9:
e2:b8:a2:ac:1c:72:fc:2b:ed:96:08:69:7d:6c:3e:70:97:af:
4b:b4:b8:f3:61:78:a0:65:a1:15:9b:0f:11:75:65:5c:08:1a:
e3:96:41:a6:3b:53:66:ac:a4:fa:c9:75:3d:77:29:7d:40:05:
0b:37:d7:c3:fd:81:0d:1c:df:3f:e1:de:1c:45:95:8c:54:1d:
5d:32:cb:df:c3:d7:b9:8e:ff:ca:12:05:ec:15:1a:fb:10:1f:
7b:3b:59:eb:d0:af:c0:95:84:a6:69:36:f7:37:88:47:4b:dc:
4a:a5:91:76:f2:ea:43:89:2c:1b:01:15:d6:59:91:77:be:b1:
c8:aa:36:65:4f:93:2f:f2:f2:6d:ab:1b:dc:7b:2f:f5:12:b8:
8f:8c:f3:28:dc:47:f5:5a:f9:4e:6b:c2:8b:7c:c6:f9:07:ff:
c3:6c:72:92
-----BEGIN CERTIFICATE-----
MIIFATCCA+mgAwIBAgIFAIAKivgwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMo
NzIwNDdiZTE1YjI3NTkwMmRjZjYxN2RjM2QwZTE2ZGMxZjMwODAyMjAeFw0yMjA1
MDEwMzEwNDlaFw0yMzA3MDEwMDAwMDBaMDMxMTAvBgNVBAMTKGJkNWIyN2Q2Nzk3
ODE1NmZiZmVjMDFjMGQ2ZDgwYzkxOWIzNDFlNTYwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQD4EUCP9ss3I97iqsm3QznJo2WUw5LUznEEDU2EqoANxD46
VB4AJ+GORN3C822uGa4liLZHBR6KYBRmi/9eArymFTYYUcMy9zqkCMFdzj1vtWiG
3UPwgUJhEIY3TG/7Vq8u5PvSplc2RDBRRJ6jRDpAkBYZFz7gi8jLplnwXvlAeMsu
cVd4Dy2P7iW9cksI451l6ch5TJyHGer8vLXCpy+vGON4gGSZVFPTaTukAhyADINV
LM3W/ILkfLUVR7jzbgLD2EPAIVx1bo1D/tcs4e97w3wzRvQEFP88Cfy/VTBLGdTK
85dFZSsu/t8VhvkG1kQPQImRIAT3v3D7XiW4KhstAgMBAAGjggIaMIICFjAdBgNV
HQ4EFgQUvVsn1nl4FW+/7AHA1tgMkZs0HlYwHwYDVR0jBBgwFoAUcgR74VsnWQLc
9hfcPQ4W3B8wgCIwDgYDVR0PAQH/BAQDAgeAMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvREVGQVVM
VC9jZ1I3NFZzbldRTGM5aGZjUFE0VzNCOHdnQ0kuY2VyMIGNBggrBgEFBQcBCwSB
gDB+MHwGCCsGAQUFBzALhnByc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9y
eS9ERUZBVUxULzVlLzc5ODQ0Ny0yMWY0LTQ1YWItOTlkYy0xYWJlM2FjMTBhYTYv
MS92VnNuMW5sNEZXLV83QUhBMXRnTWtaczBIbFkucm9hMIGBBgNVHR8EejB4MHag
dKByhnByc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzVl
Lzc5ODQ0Ny0yMWY0LTQ1YWItOTlkYy0xYWJlM2FjMTBhYTYvMS9jZ1I3NFZzbldR
TGM5aGZjUFE0VzNCOHdnQ0kuY3JsMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw
MAYIKwYBBQUHAQcBAf8EITAfMAwEAgABMAYDBAPBABgwDwQCAAIwCQMHACABBnwA
ZDANBgkqhkiG9w0BAQsFAAOCAQEAKFc+G7svIWfeAlq4gJDWx/G0yAIf8M8S/m4x
sUkYNjTidrfb4ckBh9TvH1CzaXQry49gspOWBMSXTlqv0Me9J/w/b9QrHvjPxkel
QF0DbCipJ+kQpOqE16m54riirBxy/CvtlghpfWw+cJevS7S482F4oGWhFZsPEXVl
XAga45ZBpjtTZqyk+sl1PXcpfUAFCzfXw/2BDRzfP+HeHEWVjFQdXTLL38PXuY7/
yhIF7BUa+xAfeztZ69CvwJWEpmk29zeIR0vcSqWRdvLqQ4ksGwEV1lmRd76xyKo2
ZU+TL/Lybasb3Hsv9RK4j4zzKNxH9Vr5TmvCi3zG+Qf/w2xykg==
-----END CERTIFICATE-----
Generated at Mon Jun 9 17:28:13 2025 by rpki-client