Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/aeea10-7208-4d5c-85b9-9e35089fa78f/1/vBlyAZnsFSnwcEmZ2kKtEaF6ZCQ.roa
File: vBlyAZnsFSnwcEmZ2kKtEaF6ZCQ.roa (raw, json)
Hash identifier: 5ZyZlVnGgW9xsYNctsCk9H/GPm68PQQmbJFd9C52MHU=
Subject key identifier: BC:19:72:01:99:EC:15:29:F0:70:49:99:DA:42:AD:11:A1:7A:64:24
Certificate issuer: /CN=727b4876a2d11058c2e6a779fceac5f04083b4c2
Certificate serial: 0181F46D4512D996EFDD51CEB154DEBE1402
Authority key identifier: 72:7B:48:76:A2:D1:10:58:C2:E6:A7:79:FC:EA:C5:F0:40:83:B4:C2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cntIdqLREFjC5qd5_OrF8ECDtMI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/aeea10-7208-4d5c-85b9-9e35089fa78f/1/vBlyAZnsFSnwcEmZ2kKtEaF6ZCQ.roa
Signing time: Tue 12 Jul 2022 22:00:10 +0000
ROA not before: Tue 12 Jul 2022 22:00:10 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 12722
IP address blocks: 5.182.116.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:81:f4:6d:45:12:d9:96:ef:dd:51:ce:b1:54:de:be:14:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=727b4876a2d11058c2e6a779fceac5f04083b4c2
Validity
Not Before: Jul 12 22:00:10 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=bc19720199ec1529f0704999da42ad11a17a6424
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:b1:da:43:aa:aa:bc:6e:30:7f:c0:76:74:45:
3d:b3:c1:ff:4c:84:ee:e0:1f:65:90:89:38:70:af:
b4:3e:99:4d:58:d7:e4:da:f7:fd:5a:17:9f:a9:c9:
e7:07:bf:7e:81:2a:97:90:50:45:f5:14:44:e1:57:
a7:0c:f1:f3:21:e6:9c:d0:54:ee:d2:3e:02:f2:97:
87:0a:8b:7a:53:6e:00:06:fc:af:cf:41:24:4c:52:
1f:13:22:23:0d:67:cc:85:34:19:5a:94:01:a3:5f:
84:b5:17:f5:73:fc:d9:c3:aa:6d:51:8f:19:bd:7a:
58:35:1a:ca:39:09:60:c6:dc:c4:db:c8:27:24:c3:
3d:13:b5:8f:c5:72:4b:07:4e:a4:ce:e3:2e:24:eb:
f7:92:27:c2:55:85:f3:aa:68:6c:e6:3a:1d:ef:6e:
5d:2d:87:3e:22:04:26:5d:9a:1b:52:e8:16:f4:75:
95:05:55:12:76:8c:ab:d9:da:2f:60:cd:1a:5e:75:
b7:33:b5:c5:86:76:6c:bd:2b:19:fd:10:97:c6:82:
d3:e5:c6:06:08:20:11:60:48:ca:00:dd:04:15:95:
69:9f:36:e4:41:16:69:cf:79:9a:7d:0f:96:d3:eb:
32:f4:17:75:44:b4:98:2f:85:6f:92:b2:ce:f9:23:
27:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:19:72:01:99:EC:15:29:F0:70:49:99:DA:42:AD:11:A1:7A:64:24
X509v3 Authority Key Identifier:
keyid:72:7B:48:76:A2:D1:10:58:C2:E6:A7:79:FC:EA:C5:F0:40:83:B4:C2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cntIdqLREFjC5qd5_OrF8ECDtMI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/aeea10-7208-4d5c-85b9-9e35089fa78f/1/vBlyAZnsFSnwcEmZ2kKtEaF6ZCQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/aeea10-7208-4d5c-85b9-9e35089fa78f/1/cntIdqLREFjC5qd5_OrF8ECDtMI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.182.116.0/24
Signature Algorithm: sha256WithRSAEncryption
b2:22:9e:06:e8:cb:5d:20:9d:b2:95:05:f2:22:6a:fa:2e:3d:
8f:d8:0c:82:b3:3d:c8:f5:82:cf:6e:3b:bd:f0:bd:fd:6c:63:
c3:52:eb:a6:a9:47:55:a8:f0:54:ce:ed:29:87:8a:89:b4:86:
9f:90:8d:1b:9c:ea:ae:ea:bf:2a:0c:54:b4:a1:51:c0:90:e6:
44:98:0e:44:08:6a:c3:04:35:1f:a7:0d:22:4e:50:a2:5b:8b:
97:3b:13:4d:c5:8e:4b:eb:15:4c:b9:9a:73:b0:40:3e:85:40:
48:26:d5:21:32:15:49:ff:1c:26:a5:40:56:ab:a2:51:14:63:
b3:c0:75:21:05:4a:53:30:b3:7a:c4:fc:01:94:d3:bc:fc:49:
54:bf:dc:2c:92:18:83:2b:6c:72:95:a2:fb:ae:20:9f:c1:fc:
e3:29:91:42:fa:21:e3:f3:e7:cc:b5:6b:17:70:95:d1:7d:ef:
19:ca:94:45:91:95:7a:2c:56:5a:1e:74:ac:ef:6f:b9:1a:b8:
46:12:f5:d9:1e:50:6b:3e:97:e2:f7:94:83:51:92:b8:f8:df:
29:7b:e7:e5:7f:b1:52:dd:e9:50:ec:ec:20:7c:cb:a3:bc:8e:
11:6d:f9:fa:a0:d8:89:51:9d:9b:fc:22:d6:58:9a:d3:36:9c:
27:a0:cc:97
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYH0bUUS2Zbv3VHOsVTevhQCMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcyN2I0ODc2YTJkMTEwNThjMmU2YTc3OWZjZWFjNWYwNDA4
M2I0YzIwHhcNMjIwNzEyMjIwMDEwWhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiYzE5NzIwMTk5ZWMxNTI5ZjA3MDQ5OTlkYTQyYWQxMWExN2E2NDI0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuLHaQ6qqvG4wf8B2dEU9s8H/TITu
4B9lkIk4cK+0PplNWNfk2vf9WhefqcnnB79+gSqXkFBF9RRE4VenDPHzIeac0FTu
0j4C8peHCot6U24ABvyvz0EkTFIfEyIjDWfMhTQZWpQBo1+EtRf1c/zZw6ptUY8Z
vXpYNRrKOQlgxtzE28gnJMM9E7WPxXJLB06kzuMuJOv3kifCVYXzqmhs5jod725d
LYc+IgQmXZobUugW9HWVBVUSdoyr2dovYM0aXnW3M7XFhnZsvSsZ/RCXxoLT5cYG
CCARYEjKAN0EFZVpnzbkQRZpz3mafQ+W0+sy9Bd1RLSYL4VvkrLO+SMnGQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFLwZcgGZ7BUp8HBJmdpCrRGhemQkMB8GA1UdIwQY
MBaAFHJ7SHai0RBYwuanefzqxfBAg7TCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY250SWRxTFJFRmpDNXFkNV9PckY4RUNEdE1JLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lOC9hZWVhMTAtNzIwOC00ZDVjLTg1Yjkt
OWUzNTA4OWZhNzhmLzEvdkJseUFabnNGU253Y0VtWjJrS3RFYUY2WkNRLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lOC9hZWVhMTAtNzIwOC00ZDVjLTg1YjktOWUzNTA4OWZhNzhm
LzEvY250SWRxTFJFRmpDNXFkNV9PckY4RUNEdE1JLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQABbZ0MA0G
CSqGSIb3DQEBCwUAA4IBAQCyIp4G6MtdIJ2ylQXyImr6Lj2P2AyCsz3I9YLPbju9
8L39bGPDUuumqUdVqPBUzu0ph4qJtIafkI0bnOqu6r8qDFS0oVHAkOZEmA5ECGrD
BDUfpw0iTlCiW4uXOxNNxY5L6xVMuZpzsEA+hUBIJtUhMhVJ/xwmpUBWq6JRFGOz
wHUhBUpTMLN6xPwBlNO8/ElUv9wskhiDK2xylaL7riCfwfzjKZFC+iHj8+fMtWsX
cJXRfe8ZypRFkZV6LFZaHnSs72+5GrhGEvXZHlBrPpfi95SDUZK4+N8pe+flf7FS
3elQ7OwgfMujvI4Rbfn6oNiJUZ2b/CLWWJrTNpwnoMyX
-----END CERTIFICATE-----
Generated at Sun Jun 8 12:23:21 2025 by rpki-client