Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/0EgaNs2Pn9TwTDIFdya3Xip3Rc0.roa
File: 0EgaNs2Pn9TwTDIFdya3Xip3Rc0.roa (raw, json)
Hash identifier: qSIcAwt5wYJ6CaBylRzTp90Z3E56kYPNlfrqPxnlEtI=
Subject key identifier: D0:48:1A:36:CD:8F:9F:D4:F0:4C:32:05:77:26:B7:5E:2A:77:45:CD
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0188CA8C1E10AD93093419A6BE91BD391983
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/0EgaNs2Pn9TwTDIFdya3Xip3Rc0.roa
Signing time: Sat 17 Jun 2023 18:09:20 +0000
ROA not before: Sat 17 Jun 2023 18:09:20 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:188:5fe2:b396/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:187:4695:a68a/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:188:7858:a003/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64:ffff:0:187:fa9a:b088/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:187:b2b8:a7dd/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:ca:8c:1e:10:ad:93:09:34:19:a6:be:91:bd:39:19:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Jun 17 18:09:20 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=d0481a36cd8f9fd4f04c32057726b75e2a7745cd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:dd:7e:fc:8d:74:48:22:8a:e7:72:65:58:34:
33:27:10:5a:48:2b:9d:6d:de:f8:00:36:4d:2d:a2:
62:e2:6b:10:be:ba:05:c9:c4:72:a4:7e:a4:8f:85:
b8:04:48:9e:86:c5:d5:79:89:8e:1d:5b:54:2a:bf:
09:d6:c2:8e:55:37:d5:ea:b9:98:d5:96:01:09:22:
43:70:d4:65:b2:60:5a:bb:91:be:29:b4:57:ea:76:
cd:d8:33:27:86:64:4f:80:af:80:55:24:8c:c6:72:
ae:01:82:bd:b6:6a:cd:12:4f:0f:34:c1:74:23:ea:
2d:2f:6f:62:d6:93:c1:7d:70:95:b0:94:63:9d:20:
83:3f:2f:2e:1f:6e:21:6e:5a:40:3d:ef:90:e5:b9:
aa:ac:0f:a7:e6:ae:eb:f2:48:e6:7d:e6:af:26:49:
09:69:8b:52:fc:72:c8:5b:11:cd:19:12:b0:13:5f:
9c:e0:05:54:d7:3e:3f:bf:75:6c:93:3e:99:31:ac:
30:0c:0b:3c:2a:d6:bd:db:73:d2:5a:e6:da:be:ce:
a4:91:01:e5:6d:72:02:e4:cf:aa:63:03:22:01:72:
50:89:60:58:a1:9e:87:64:45:fb:96:80:6e:47:2c:
a1:fd:29:b9:64:f9:a8:ce:cc:fb:d6:88:e9:23:90:
9b:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:48:1A:36:CD:8F:9F:D4:F0:4C:32:05:77:26:B7:5E:2A:77:45:CD
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/0EgaNs2Pn9TwTDIFdya3Xip3Rc0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
07:2a:36:65:d0:88:63:cf:b2:d3:5f:e1:b2:df:3e:83:32:ec:
49:82:ae:74:b4:b5:48:c1:83:b2:2d:b0:21:a4:f7:0d:1c:42:
d5:03:4c:07:7e:35:d5:ae:2b:01:5b:ae:2b:1c:5d:c4:b1:7a:
bd:22:89:85:20:3b:69:ae:e3:db:d5:26:a4:38:aa:33:d2:c7:
f2:c9:cd:75:fb:bb:5c:9a:d6:d5:63:c4:71:c1:06:bc:3c:24:
84:51:52:f1:ad:fb:fe:af:bf:0d:fc:74:55:7e:b0:fd:7b:87:
5a:9d:5b:06:a2:89:f6:cf:68:4d:fd:ae:9a:dd:67:4a:97:bc:
d2:76:df:9f:c8:90:57:76:8c:93:81:0f:c7:60:15:ea:6b:4f:
67:3a:48:5e:85:8c:87:66:73:09:ac:e4:bc:86:e3:6b:4c:d9:
40:25:8a:76:23:a9:cc:19:ad:fb:96:c0:23:3f:8f:3b:a5:c7:
7e:a7:ad:57:2f:8f:79:98:fd:f4:37:ae:b6:29:f6:26:d8:69:
2e:89:97:3e:0a:5b:17:7a:4e:a5:09:54:b4:b3:07:ed:f2:3d:
52:f8:0c:a9:4b:a2:91:2f:8e:3c:18:ea:2e:e5:25:a5:c6:75:
2b:5d:b8:28:56:87:7b:cb:51:05:f9:81:34:3b:6d:f3:05:b7:
95:70:20:b8
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYjKjB4QrZMJNBmmvpG9ORmDMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcyMDQ3YmUxNWIyNzU5MDJkY2Y2MTdkYzNkMGUxNmRjMWYz
MDgwMjIwHhcNMjMwNjE3MTgwOTIwWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkMDQ4MWEzNmNkOGY5ZmQ0ZjA0YzMyMDU3NzI2Yjc1ZTJhNzc0NWNkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhN1+/I10SCKK53JlWDQzJxBaSCud
bd74ADZNLaJi4msQvroFycRypH6kj4W4BEiehsXVeYmOHVtUKr8J1sKOVTfV6rmY
1ZYBCSJDcNRlsmBau5G+KbRX6nbN2DMnhmRPgK+AVSSMxnKuAYK9tmrNEk8PNMF0
I+otL29i1pPBfXCVsJRjnSCDPy8uH24hblpAPe+Q5bmqrA+n5q7r8kjmfeavJkkJ
aYtS/HLIWxHNGRKwE1+c4AVU1z4/v3Vskz6ZMawwDAs8Kta923PSWubavs6kkQHl
bXIC5M+qYwMiAXJQiWBYoZ6HZEX7loBuRyyh/Sm5ZPmozsz71ojpI5CbsQIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFNBIGjbNj5/U8EwyBXcmt14qd0XNMB8GA1UdIwQY
MBaAFHIEe+FbJ1kC3PYX3D0OFtwfMIAiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMt
MWFiZTNhYzEwYWE2LzEvMEVnYU5zMlBuOVR3VERJRmR5YTNYaXAzUmMwLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMtMWFiZTNhYzEwYWE2
LzEvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBAAcqNmXQiGPPstNf4bLf
PoMy7EmCrnS0tUjBg7ItsCGk9w0cQtUDTAd+NdWuKwFbriscXcSxer0iiYUgO2mu
49vVJqQ4qjPSx/LJzXX7u1ya1tVjxHHBBrw8JIRRUvGt+/6vvw38dFV+sP17h1qd
WwaiifbPaE39rprdZ0qXvNJ235/IkFd2jJOBD8dgFeprT2c6SF6FjIdmcwms5LyG
42tM2UAlinYjqcwZrfuWwCM/jzulx36nrVcvj3mY/fQ3rrYp9ibYaS6Jlz4KWxd6
TqUJVLSzB+3yPVL4DKlLopEvjjwY6i7lJaXGdStduChWh3vLUQX5gTQ7bfMFt5Vw
ILg=
-----END CERTIFICATE-----
Generated at Wed Apr 30 17:41:24 2025 by rpki-client