Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/d89025-d6f3-4891-9d86-d12f039db2c9/1/VtIIeBXnBTdIIud8OFU2RD1YWsQ.roa
File: VtIIeBXnBTdIIud8OFU2RD1YWsQ.roa (raw, json)
Hash identifier: xKgt2OEUuqLuPWGfdqcEemsXKYomv974sFpHHk3e6KQ=
Subject key identifier: 56:D2:08:78:15:E7:05:37:48:22:E7:7C:38:55:36:44:3D:58:5A:C4
Certificate issuer: /CN=b2bec41bd2f3b179de09514306530bd3fbac707b
Certificate serial: 018F48E101ADC51C64134EE772FEEF344A0E
Authority key identifier: B2:BE:C4:1B:D2:F3:B1:79:DE:09:51:43:06:53:0B:D3:FB:AC:70:7B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sr7EG9LzsXneCVFDBlML0_uscHs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/d89025-d6f3-4891-9d86-d12f039db2c9/1/VtIIeBXnBTdIIud8OFU2RD1YWsQ.roa
Signing time: Sun 05 May 2024 13:10:56 +0000
ROA not before: Sun 05 May 2024 13:10:56 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18f:543:9e41/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:48:e1:01:ad:c5:1c:64:13:4e:e7:72:fe:ef:34:4a:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b2bec41bd2f3b179de09514306530bd3fbac707b
Validity
Not Before: May 5 13:10:56 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=56d2087815e705374822e77c385536443d585ac4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:e9:62:e2:b0:f5:21:e5:b5:c3:02:85:ec:68:
8b:0c:00:90:ff:54:68:b4:80:49:23:c9:b7:01:db:
c8:d4:df:32:70:5b:6e:f0:78:0b:81:03:95:79:18:
30:84:e6:0e:1f:17:1a:a5:91:cd:b2:e7:2d:8a:91:
f9:3c:7d:3d:1e:62:80:bb:04:90:9b:17:b3:d6:dc:
b8:22:94:b5:e5:1f:82:35:7c:1e:02:cc:2c:fa:3c:
75:15:42:d7:51:97:a9:6c:3d:8e:d7:01:75:73:b1:
f6:09:bc:c9:d6:8e:d5:5e:43:9a:20:d1:7a:24:e6:
ac:e9:80:a6:2b:39:36:54:8e:0d:96:56:02:81:4e:
d0:1b:d5:f1:07:29:cc:38:de:38:48:8a:4f:52:98:
07:13:c0:ae:b2:ce:17:c3:0b:60:cc:8f:70:8e:57:
10:df:b0:38:d4:17:49:37:e2:16:1e:09:1d:5a:5c:
d6:31:37:4b:04:5e:ec:b9:b2:e8:0a:eb:f6:f2:63:
52:9e:51:bb:4e:c1:67:cd:b8:9e:f7:2a:20:e9:3d:
4f:9e:6a:09:66:f0:65:d1:49:30:2e:6a:2d:d6:85:
13:a7:ed:c7:a1:1c:d0:76:9d:31:a0:21:6c:0c:72:
c2:67:0b:da:62:76:45:74:02:77:9b:91:ba:44:55:
76:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:D2:08:78:15:E7:05:37:48:22:E7:7C:38:55:36:44:3D:58:5A:C4
X509v3 Authority Key Identifier:
keyid:B2:BE:C4:1B:D2:F3:B1:79:DE:09:51:43:06:53:0B:D3:FB:AC:70:7B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sr7EG9LzsXneCVFDBlML0_uscHs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/d89025-d6f3-4891-9d86-d12f039db2c9/1/VtIIeBXnBTdIIud8OFU2RD1YWsQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/d89025-d6f3-4891-9d86-d12f039db2c9/1/sr7EG9LzsXneCVFDBlML0_uscHs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
28:bc:cb:d3:b6:99:2b:d7:28:5c:02:68:04:f3:2e:5f:a6:56:
8e:5b:7b:28:69:e1:b1:36:a9:c1:17:f1:a9:a1:6d:94:de:d0:
6a:ef:43:fa:a5:36:a1:1d:bd:b3:a2:49:17:06:55:81:6d:17:
c7:e0:b3:01:f3:76:f9:b1:4d:86:07:71:bb:c3:40:0b:c2:a8:
7a:84:e8:82:dc:e7:3d:d3:8f:a0:8f:9c:27:40:c7:93:57:b6:
88:fd:6e:a1:79:67:0e:07:98:5a:f0:66:20:69:f8:f6:75:7d:
c6:6f:31:5f:47:4d:a2:55:01:0d:5c:9f:3c:52:6f:f0:ae:b6:
3a:9a:55:d5:76:5f:66:8c:52:48:27:4e:4e:4e:92:7c:62:a4:
de:7a:0f:bf:69:e6:1a:68:ac:3b:73:0e:2a:27:35:d7:76:d1:
ff:92:8e:07:ba:a1:69:48:d7:f8:c5:8a:0c:27:6f:f6:28:30:
b0:30:d4:5f:fc:9a:7b:c8:26:18:b8:37:f0:79:bd:50:2c:f0:
f7:78:3e:7e:c8:4c:3a:dc:d8:99:5d:cf:5d:b1:87:d0:a9:1b:
ab:a5:8b:b6:7a:5a:71:6b:d0:f1:3f:a5:73:0b:34:5a:c0:c2:
6c:d3:de:78:51:f2:a5:e0:fe:13:2d:e5:de:72:c4:ae:d9:1c:
25:b3:80:98
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAY9I4QGtxRxkE07ncv7vNEoOMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGIyYmVjNDFiZDJmM2IxNzlkZTA5NTE0MzA2NTMwYmQzZmJh
YzcwN2IwHhcNMjQwNTA1MTMxMDU2WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1NmQyMDg3ODE1ZTcwNTM3NDgyMmU3N2MzODU1MzY0NDNkNTg1YWM0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxeli4rD1IeW1wwKF7GiLDACQ/1Ro
tIBJI8m3AdvI1N8ycFtu8HgLgQOVeRgwhOYOHxcapZHNsuctipH5PH09HmKAuwSQ
mxez1ty4IpS15R+CNXweAsws+jx1FULXUZepbD2O1wF1c7H2CbzJ1o7VXkOaINF6
JOas6YCmKzk2VI4NllYCgU7QG9XxBynMON44SIpPUpgHE8Cuss4XwwtgzI9wjlcQ
37A41BdJN+IWHgkdWlzWMTdLBF7subLoCuv28mNSnlG7TsFnzbie9yog6T1PnmoJ
ZvBl0UkwLmot1oUTp+3HoRzQdp0xoCFsDHLCZwvaYnZFdAJ3m5G6RFV2EQIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFFbSCHgV5wU3SCLnfDhVNkQ9WFrEMB8GA1UdIwQY
MBaAFLK+xBvS87F53glRQwZTC9P7rHB7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvc3I3RUc5THpzWG5lQ1ZGREJsTUwwX3VzY0hzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZS9kODkwMjUtZDZmMy00ODkxLTlkODYt
ZDEyZjAzOWRiMmM5LzEvVnRJSWVCWG5CVGRJSXVkOE9GVTJSRDFZV3NRLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yZS9kODkwMjUtZDZmMy00ODkxLTlkODYtZDEyZjAzOWRiMmM5
LzEvc3I3RUc5THpzWG5lQ1ZGREJsTUwwX3VzY0hzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBACi8y9O2mSvXKFwCaATz
Ll+mVo5beyhp4bE2qcEX8amhbZTe0GrvQ/qlNqEdvbOiSRcGVYFtF8fgswHzdvmx
TYYHcbvDQAvCqHqE6ILc5z3Tj6CPnCdAx5NXtoj9bqF5Zw4HmFrwZiBp+PZ1fcZv
MV9HTaJVAQ1cnzxSb/CutjqaVdV2X2aMUkgnTk5OknxipN56D79p5hporDtzDion
Ndd20f+Sjge6oWlI1/jFigwnb/YoMLAw1F/8mnvIJhi4N/B5vVAs8Pd4Pn7ITDrc
2Jldz12xh9CpG6uli7Z6WnFr0PE/pXMLNFrAwmzT3nhR8qXg/hMt5d5yxK7ZHCWz
gJg=
-----END CERTIFICATE-----
Generated at Fri May 9 00:29:11 2025 by rpki-client