Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/0EBiP2TgsyalYmE4mm-yQlPOkVk.roa
File: 0EBiP2TgsyalYmE4mm-yQlPOkVk.roa (raw, json)
Hash identifier: E/+B6oIQi3NsH5UhKHqmG24oqu41ZqHcxfpZWPj0tAA=
Subject key identifier: D0:40:62:3F:64:E0:B3:26:A5:62:61:38:9A:6F:B2:42:53:CE:91:59
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 01887ECEF3BA62FF5024427AD20A3481769D
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/0EBiP2TgsyalYmE4mm-yQlPOkVk.roa
Signing time: Sat 03 Jun 2023 01:11:12 +0000
ROA not before: Sat 03 Jun 2023 01:11:12 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:188:5fe2:b396/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:187:4695:a68a/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:188:7858:a003/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64:ffff:0:187:fa9a:b088/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:187:b2b8:a7dd/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:7e:ce:f3:ba:62:ff:50:24:42:7a:d2:0a:34:81:76:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Jun 3 01:11:12 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=d040623f64e0b326a56261389a6fb24253ce9159
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:34:7a:7d:80:14:d7:0b:6b:9c:9f:ae:d4:37:
82:09:66:e8:f9:99:84:fb:7a:4f:5e:c0:0f:22:9a:
17:fe:08:5b:ee:91:57:1f:33:62:d4:cd:41:07:f2:
6d:dc:7e:c9:39:85:c5:23:72:59:76:46:f4:4d:89:
fd:dd:9e:27:d0:cf:4a:25:19:f2:f0:24:da:17:f1:
14:58:58:73:26:62:4b:58:bf:54:74:3a:6e:7c:08:
7d:a4:01:53:7a:94:61:aa:6b:29:f3:bf:74:1c:1d:
b1:84:ed:62:23:2d:52:4a:16:1f:77:13:af:68:ba:
68:b0:49:99:be:4b:01:61:e2:e7:3c:b1:39:29:b1:
ef:7a:1e:6d:4c:36:24:7e:d5:6b:2e:d8:09:90:37:
38:83:37:1e:ac:40:60:07:fa:5b:7e:78:16:5b:54:
11:97:a8:35:d8:99:69:7f:45:c2:e1:41:29:50:54:
60:91:1f:6a:36:ba:bc:4f:71:2e:0b:68:e5:ef:8d:
ec:23:92:b1:44:aa:28:21:ff:0d:ca:8e:a2:24:e1:
15:01:2c:c3:a6:c2:b3:70:09:bd:d6:48:8e:d5:25:
d0:7b:32:83:32:7a:fc:2e:58:8e:ef:da:97:cd:56:
c1:6a:1c:79:ca:0f:c5:f2:98:c4:94:b5:3f:6d:27:
be:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:40:62:3F:64:E0:B3:26:A5:62:61:38:9A:6F:B2:42:53:CE:91:59
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/0EBiP2TgsyalYmE4mm-yQlPOkVk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
97:68:d8:78:47:73:5a:81:28:bd:b8:74:f6:d2:57:32:13:03:
e1:54:b9:50:ba:67:9f:c5:d4:a0:b8:f0:2b:d0:de:2c:4c:bc:
da:7b:b9:54:d2:ab:71:6b:a2:df:c7:4f:41:cb:ad:12:e3:ac:
d7:f9:bc:2c:38:b4:32:f3:9d:6f:84:4c:bf:db:ff:3a:6b:b5:
97:da:2f:ac:96:92:76:fc:ae:5f:65:87:88:76:0b:41:46:57:
1c:39:e0:da:75:89:46:2c:0f:df:40:9d:e6:78:23:4b:34:da:
0b:8f:95:7a:5e:d7:d5:b9:94:9b:17:d4:77:25:ba:4b:68:0d:
ec:55:d2:97:10:2b:21:7a:8e:43:c3:ad:e8:12:f1:14:b9:70:
fe:c8:b3:e3:2b:8e:a8:b3:8c:e7:51:27:f4:94:ed:b0:f2:71:
e4:76:86:f1:1d:46:e6:3c:e6:37:0e:8f:46:0f:c6:d5:8e:4d:
bd:90:b4:94:bd:01:49:36:70:d5:00:28:eb:51:c6:56:97:d6:
02:02:7a:04:b2:f2:38:48:95:8c:19:40:f6:c2:20:12:a4:6b:
fe:cd:39:57:e7:3f:d3:97:5a:cf:4f:6b:74:7e:7f:74:99:67:
48:d9:de:74:d5:09:c0:85:f3:1b:b2:48:ea:c9:14:36:36:8f:
65:d3:a8:1f
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYh+zvO6Yv9QJEJ60go0gXadMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcyMDQ3YmUxNWIyNzU5MDJkY2Y2MTdkYzNkMGUxNmRjMWYz
MDgwMjIwHhcNMjMwNjAzMDExMTEyWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkMDQwNjIzZjY0ZTBiMzI2YTU2MjYxMzg5YTZmYjI0MjUzY2U5MTU5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjDR6fYAU1wtrnJ+u1DeCCWbo+ZmE
+3pPXsAPIpoX/ghb7pFXHzNi1M1BB/Jt3H7JOYXFI3JZdkb0TYn93Z4n0M9KJRny
8CTaF/EUWFhzJmJLWL9UdDpufAh9pAFTepRhqmsp8790HB2xhO1iIy1SShYfdxOv
aLposEmZvksBYeLnPLE5KbHveh5tTDYkftVrLtgJkDc4gzcerEBgB/pbfngWW1QR
l6g12Jlpf0XC4UEpUFRgkR9qNrq8T3EuC2jl743sI5KxRKooIf8Nyo6iJOEVASzD
psKzcAm91kiO1SXQezKDMnr8LliO79qXzVbBahx5yg/F8pjElLU/bSe+VQIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFNBAYj9k4LMmpWJhOJpvskJTzpFZMB8GA1UdIwQY
MBaAFHIEe+FbJ1kC3PYX3D0OFtwfMIAiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMt
MWFiZTNhYzEwYWE2LzEvMEVCaVAyVGdzeWFsWW1FNG1tLXlRbFBPa1ZrLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMtMWFiZTNhYzEwYWE2
LzEvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBAJdo2HhHc1qBKL24dPbS
VzITA+FUuVC6Z5/F1KC48CvQ3ixMvNp7uVTSq3Frot/HT0HLrRLjrNf5vCw4tDLz
nW+ETL/b/zprtZfaL6yWknb8rl9lh4h2C0FGVxw54Np1iUYsD99AneZ4I0s02guP
lXpe19W5lJsX1HcluktoDexV0pcQKyF6jkPDregS8RS5cP7Is+MrjqizjOdRJ/SU
7bDyceR2hvEdRuY85jcOj0YPxtWOTb2QtJS9AUk2cNUAKOtRxlaX1gICegSy8jhI
lYwZQPbCIBKka/7NOVfnP9OXWs9Pa3R+f3SZZ0jZ3nTVCcCF8xuySOrJFDY2j2XT
qB8=
-----END CERTIFICATE-----
Generated at Fri May 2 15:36:06 2025 by rpki-client