Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/vvES6wo58ale6fw0oNvdcMekxgA.roa
File: vvES6wo58ale6fw0oNvdcMekxgA.roa (raw, json)
Hash identifier: 7IFEhAthHh+nRosXNOToXxSYo4YFU3WMkdhiSHXw9OQ=
Subject key identifier: BE:F1:12:EB:0A:39:F1:A9:5E:E9:FC:34:A0:DB:DD:70:C7:A4:C6:00
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 018898FD8749FBB10AA92B845C592DD83174
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/vvES6wo58ale6fw0oNvdcMekxgA.roa
Signing time: Thu 08 Jun 2023 03:12:12 +0000
ROA not before: Thu 08 Jun 2023 03:12:12 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:188:5fe2:b396/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:187:4695:a68a/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:188:7858:a003/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64:ffff:0:187:fa9a:b088/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:187:b2b8:a7dd/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:98:fd:87:49:fb:b1:0a:a9:2b:84:5c:59:2d:d8:31:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Jun 8 03:12:12 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=bef112eb0a39f1a95ee9fc34a0dbdd70c7a4c600
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:f4:bd:7e:a7:ea:93:17:14:56:38:77:d3:ad:
17:37:76:9d:51:89:86:44:59:fd:05:86:aa:c2:79:
a2:79:20:36:9a:e3:0c:b5:e7:e2:ec:c1:69:ae:4f:
0a:4e:91:01:f6:f5:69:ca:54:f4:43:dd:65:7c:48:
7b:81:f3:11:87:dc:6c:d6:2a:b6:0b:43:25:6f:a7:
02:7d:f2:44:60:cf:5c:48:eb:75:4d:50:4a:cb:ed:
44:bb:85:41:48:b2:ce:cd:9e:3f:70:02:10:f8:cb:
e8:f3:91:7e:c5:f3:bf:4d:11:b9:ef:76:7e:56:09:
a8:58:d4:0f:4d:27:4e:8e:7d:48:6b:8e:c4:c5:1f:
c1:57:c3:bf:36:fe:ae:e4:f1:0d:62:cc:dd:ca:a4:
d0:25:04:36:03:62:b4:0b:9b:55:1b:6f:63:45:31:
10:79:44:22:ce:57:1b:ae:37:50:29:aa:3e:01:66:
3d:62:bd:89:98:2a:02:79:ba:5c:35:ab:73:de:fa:
fb:bd:b5:02:b3:3d:79:ee:28:a5:4a:01:34:17:fe:
28:47:d0:2f:d4:14:46:84:42:f4:ed:42:a4:05:10:
ee:0f:7f:ca:98:68:d8:76:33:d2:a2:78:2e:ba:26:
8e:82:1c:1c:81:3d:ed:bc:8d:0c:e0:9b:a8:e7:6b:
3e:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:F1:12:EB:0A:39:F1:A9:5E:E9:FC:34:A0:DB:DD:70:C7:A4:C6:00
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/vvES6wo58ale6fw0oNvdcMekxgA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
54:94:79:7d:b0:95:db:36:31:87:aa:39:a3:d7:79:f2:3d:d5:
ce:3d:ef:68:b6:ca:60:87:0a:e8:cb:1d:b7:fd:44:89:11:a5:
00:d1:24:b3:44:28:e9:10:a2:fd:58:c0:db:0c:54:cf:8e:37:
76:d9:81:ad:b7:5b:0d:a2:a3:ef:4e:24:c4:24:f1:d6:24:f4:
3b:55:e3:67:5d:83:ca:3e:39:39:52:6a:30:98:68:b3:5a:6e:
3f:e4:1c:86:da:04:ff:6d:18:cc:c8:c1:d0:50:f3:bb:0b:bd:
b1:3a:4e:85:84:5c:e1:50:92:0d:0b:31:8a:f1:3a:b2:0c:80:
30:53:45:4f:1b:46:3b:a9:98:d9:f7:3d:f3:87:82:1c:85:09:
9b:e0:92:f9:cf:ee:5e:38:a3:bb:68:aa:e2:6c:c7:0a:81:d9:
aa:8e:0f:e0:a1:5d:f9:78:8c:67:e6:91:c0:a8:6d:cb:e4:b2:
98:c5:6e:4e:2e:93:ca:a5:ab:ce:c3:7d:6a:0b:a2:27:89:e9:
5e:0d:c6:c8:2d:c8:04:92:28:4d:1a:42:99:12:4b:d3:2b:32:
16:57:0c:6e:3f:4d:ea:c8:8a:e2:19:cb:0d:63:08:93:05:04:
09:53:bc:9b:5b:39:5e:e9:bf:6d:a9:d2:67:fa:bb:34:ee:44:
44:87:f1:7a
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYiY/YdJ+7EKqSuEXFkt2DF0MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcyMDQ3YmUxNWIyNzU5MDJkY2Y2MTdkYzNkMGUxNmRjMWYz
MDgwMjIwHhcNMjMwNjA4MDMxMjEyWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiZWYxMTJlYjBhMzlmMWE5NWVlOWZjMzRhMGRiZGQ3MGM3YTRjNjAwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArvS9fqfqkxcUVjh3060XN3adUYmG
RFn9BYaqwnmieSA2muMMtefi7MFprk8KTpEB9vVpylT0Q91lfEh7gfMRh9xs1iq2
C0Mlb6cCffJEYM9cSOt1TVBKy+1Eu4VBSLLOzZ4/cAIQ+Mvo85F+xfO/TRG573Z+
VgmoWNQPTSdOjn1Ia47ExR/BV8O/Nv6u5PENYszdyqTQJQQ2A2K0C5tVG29jRTEQ
eUQizlcbrjdQKao+AWY9Yr2JmCoCebpcNatz3vr7vbUCsz157iilSgE0F/4oR9Av
1BRGhEL07UKkBRDuD3/KmGjYdjPSonguuiaOghwcgT3tvI0M4Juo52s+SQIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFL7xEusKOfGpXun8NKDb3XDHpMYAMB8GA1UdIwQY
MBaAFHIEe+FbJ1kC3PYX3D0OFtwfMIAiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMt
MWFiZTNhYzEwYWE2LzEvdnZFUzZ3bzU4YWxlNmZ3MG9OdmRjTWVreGdBLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMtMWFiZTNhYzEwYWE2
LzEvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBAFSUeX2wlds2MYeqOaPX
efI91c4972i2ymCHCujLHbf9RIkRpQDRJLNEKOkQov1YwNsMVM+ON3bZga23Ww2i
o+9OJMQk8dYk9DtV42ddg8o+OTlSajCYaLNabj/kHIbaBP9tGMzIwdBQ87sLvbE6
ToWEXOFQkg0LMYrxOrIMgDBTRU8bRjupmNn3PfOHghyFCZvgkvnP7l44o7toquJs
xwqB2aqOD+ChXfl4jGfmkcCobcvkspjFbk4uk8qlq87DfWoLoieJ6V4NxsgtyASS
KE0aQpkSS9MrMhZXDG4/TerIiuIZyw1jCJMFBAlTvJtbOV7pv22p0mf6uzTuRESH
8Xo=
-----END CERTIFICATE-----
Generated at Thu Jun 12 21:58:18 2025 by rpki-client