Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/aa03ad-510c-450e-b7e3-24ce74ee7633/1/vc_qtbmFPqBQgbCoXkp-eYP7R7o.roa
File: vc_qtbmFPqBQgbCoXkp-eYP7R7o.roa (raw, json)
Hash identifier: HNNzTvPQ88ADUoOOnwsk+7zesVSWFAAFont5a3t3skU=
Subject key identifier: BD:CF:EA:B5:B9:85:3E:A0:50:81:B0:A8:5E:4A:7E:79:83:FB:47:BA
Certificate issuer: /CN=b629abc8a764d7591ce8e0cbd0637ab54ddb41fc
Certificate serial: 01856D13C49667874A0E8C1A9A2B49796FE9
Authority key identifier: B6:29:AB:C8:A7:64:D7:59:1C:E8:E0:CB:D0:63:7A:B5:4D:DB:41:FC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/timryKdk11kc6ODL0GN6tU3bQfw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/72/aa03ad-510c-450e-b7e3-24ce74ee7633/1/vc_qtbmFPqBQgbCoXkp-eYP7R7o.roa
Signing time: Sun 01 Jan 2023 11:24:50 +0000
ROA not before: Sun 01 Jan 2023 11:24:50 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 202448
IP address blocks: 193.201.15.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:13:c4:96:67:87:4a:0e:8c:1a:9a:2b:49:79:6f:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b629abc8a764d7591ce8e0cbd0637ab54ddb41fc
Validity
Not Before: Jan 1 11:24:50 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=bdcfeab5b9853ea05081b0a85e4a7e7983fb47ba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:09:1f:21:c2:2e:bc:f7:98:64:9e:50:b5:2b:
cf:63:f5:66:48:06:3e:18:40:84:3f:19:0a:5c:8d:
1b:10:dd:b7:f4:c4:bf:53:86:5a:07:66:07:4e:60:
48:47:61:e5:57:60:30:0e:2d:fd:13:e3:98:85:31:
f3:8f:0b:53:89:64:ee:85:72:85:47:48:50:6b:1c:
b8:71:dd:4b:bd:59:ec:12:97:5c:10:d6:e1:b0:c5:
15:e2:6c:c5:2d:a1:7d:6b:57:c8:a9:51:c2:17:03:
e5:47:7a:c1:44:d2:2d:bf:39:64:c7:47:6e:9e:0d:
0c:60:b7:9a:b8:b2:b2:37:cc:76:94:5e:f8:0f:0e:
44:1f:b3:e0:ca:2e:00:a8:53:e8:32:87:7f:0e:1d:
be:09:43:db:02:60:39:39:c1:75:2a:2f:8e:ee:27:
bf:70:e8:81:db:da:68:39:96:f1:a9:21:2c:94:ba:
c4:26:cf:e1:25:96:32:bd:66:ce:20:dc:72:74:03:
a9:1e:d3:fa:f1:34:4c:0a:71:68:38:b4:8f:4d:13:
11:6b:5c:be:95:de:de:55:5e:5e:24:ea:6c:ed:0a:
1c:24:95:db:fe:d1:af:0a:b8:e4:8a:d5:5c:a3:72:
01:5d:fb:7d:41:5e:5f:52:4a:13:a7:99:50:ab:2f:
90:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:CF:EA:B5:B9:85:3E:A0:50:81:B0:A8:5E:4A:7E:79:83:FB:47:BA
X509v3 Authority Key Identifier:
keyid:B6:29:AB:C8:A7:64:D7:59:1C:E8:E0:CB:D0:63:7A:B5:4D:DB:41:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/timryKdk11kc6ODL0GN6tU3bQfw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/aa03ad-510c-450e-b7e3-24ce74ee7633/1/vc_qtbmFPqBQgbCoXkp-eYP7R7o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/72/aa03ad-510c-450e-b7e3-24ce74ee7633/1/timryKdk11kc6ODL0GN6tU3bQfw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.201.15.0/24
Signature Algorithm: sha256WithRSAEncryption
75:aa:21:84:3e:45:e0:ca:71:e2:be:c5:5c:17:ed:02:62:95:
b7:34:44:0d:6b:36:42:13:2c:e3:51:8b:13:6b:dd:a2:7f:42:
88:3c:e5:d7:63:de:21:63:aa:5e:3c:53:90:cc:41:35:26:ca:
8b:06:08:1c:83:25:c7:98:c6:3b:30:e2:63:69:a5:5e:16:cd:
ae:56:f1:20:ae:d2:6c:7c:f4:ac:33:c9:90:68:e2:f6:52:9f:
c6:9f:33:75:f8:b1:6c:b9:11:d7:2c:f6:ee:3e:90:b8:90:1a:
a3:70:10:9d:88:9b:71:cb:07:cd:3e:44:d6:75:07:ad:48:5f:
72:3f:79:af:01:d2:41:02:25:94:6e:a6:fb:66:31:c2:4f:67:
92:de:80:ba:5a:47:40:50:06:04:62:2c:e7:ff:97:fd:08:1f:
8f:f4:8b:17:52:1a:89:17:cd:72:f0:33:23:5c:56:58:1b:d6:
10:56:c0:88:ef:c4:ff:05:60:4f:30:01:c6:31:c4:1b:8b:17:
d4:56:26:01:b7:04:e5:b3:26:e1:d9:0b:64:10:f4:89:51:dd:
2f:c0:fd:0b:dc:8c:7d:d0:f6:45:fd:11:ea:f9:28:e3:29:31:
2d:08:25:45:62:68:ae:f9:2c:9d:61:b5:64:7e:76:5a:42:e5:
eb:ae:7b:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 12:36:07 2025 by rpki-client