Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/5-86Emj-SDIqoaMB5W80iNENKqE.roa
File: 5-86Emj-SDIqoaMB5W80iNENKqE.roa (raw, json)
Hash identifier: Mci/VggeLiT1yMy2/NYPZgDDNs25RhWDfT76frOWbBw=
Subject key identifier: E7:EF:3A:12:68:FE:48:32:2A:A1:A3:01:E5:6F:34:88:D1:0D:2A:A1
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 018870A3D35D5665B1CCD7FFA4FCDB8896CE
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/5-86Emj-SDIqoaMB5W80iNENKqE.roa
Signing time: Wed 31 May 2023 07:09:24 +0000
ROA not before: Wed 31 May 2023 07:09:24 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:188:5fe2:b396/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:187:4695:a68a/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64:ffff:0:187:fa9a:b088/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:187:b2b8:a7dd/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:70:a3:d3:5d:56:65:b1:cc:d7:ff:a4:fc:db:88:96:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: May 31 07:09:24 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=e7ef3a1268fe48322aa1a301e56f3488d10d2aa1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:e0:b4:21:db:fe:4e:2e:9b:04:5e:9f:63:92:
89:e5:78:e5:e5:ec:0d:81:55:96:53:a9:71:80:44:
f5:09:52:24:26:ce:42:13:06:87:37:55:21:c5:5e:
b7:7f:2b:fd:2a:22:1b:e9:ff:d1:fa:99:07:5e:61:
96:1b:de:ce:61:6e:bd:0d:01:b0:f8:b8:f9:ee:ef:
05:cf:3e:5c:96:10:c6:ea:f0:22:f0:97:c0:26:18:
e9:1c:40:99:92:12:7b:34:ed:72:1e:0c:0a:72:0c:
be:01:fc:c7:9c:bf:12:10:74:72:28:22:96:97:d6:
6b:5f:17:9b:06:ed:14:10:40:6b:d9:c1:b1:b9:7c:
ca:57:63:6c:4e:b9:a6:59:60:e6:a1:ab:af:65:72:
13:a5:7d:c2:94:60:cc:7a:41:97:0a:09:b0:38:9f:
67:8c:a1:93:53:df:00:7a:c8:ce:c4:b9:29:1d:27:
8a:a1:3d:fe:e5:d8:0b:a9:64:1b:28:eb:d3:8d:40:
95:65:c7:0f:2f:3e:97:8a:94:bb:05:43:0d:93:e8:
e8:64:ac:0f:32:fa:b4:af:6f:9a:90:17:20:45:4a:
8d:3e:06:b7:8e:14:e4:6b:96:f4:65:85:1d:93:db:
0f:98:5a:3b:2c:66:f4:07:f1:90:35:15:33:6b:c0:
5c:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:EF:3A:12:68:FE:48:32:2A:A1:A3:01:E5:6F:34:88:D1:0D:2A:A1
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/5-86Emj-SDIqoaMB5W80iNENKqE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
53:c5:11:60:3d:da:c1:40:74:d9:0a:3d:bb:c5:0b:3e:bf:93:
10:c0:2c:79:da:63:b0:30:60:fd:81:b4:86:3e:dd:cb:2c:69:
a1:f7:4e:1c:47:55:f7:3f:70:cc:1d:51:cf:2f:48:7f:77:d3:
7b:d9:9b:41:3b:d6:13:3b:eb:9c:d1:8a:e2:4b:f5:14:ee:1e:
d8:fb:19:26:3b:ba:02:23:11:b6:cd:82:f4:2a:b3:3d:ce:60:
d8:f3:f9:e6:29:13:9e:b9:86:d7:52:93:44:57:f5:65:67:2b:
70:13:7b:30:cf:e9:29:1b:db:90:ae:19:e7:3e:fe:db:79:bf:
0e:d2:53:a4:c6:b4:03:1c:47:18:c9:ab:ef:d0:07:28:e6:10:
ef:2d:f3:f9:95:40:77:88:3a:cd:f2:58:41:da:71:2e:71:68:
47:13:65:95:f1:67:89:f5:c6:73:bf:d2:8a:b9:fe:5b:0c:f9:
11:7c:1a:f9:04:61:89:65:fe:ea:8c:ea:c7:4e:44:e6:79:98:
f1:1e:27:ce:cc:e0:ed:2d:a7:1d:4d:c5:7a:de:73:ab:2f:ae:
c3:a0:89:45:3e:17:89:d2:1f:45:a2:74:5b:c6:f3:89:68:b1:
ca:eb:67:85:82:96:8a:3d:14:c0:96:a2:6f:4f:dc:4b:09:39:
2c:2e:d3:d8
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYhwo9NdVmWxzNf/pPzbiJbOMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcyMDQ3YmUxNWIyNzU5MDJkY2Y2MTdkYzNkMGUxNmRjMWYz
MDgwMjIwHhcNMjMwNTMxMDcwOTI0WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlN2VmM2ExMjY4ZmU0ODMyMmFhMWEzMDFlNTZmMzQ4OGQxMGQyYWExMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7uC0Idv+Ti6bBF6fY5KJ5Xjl5ewN
gVWWU6lxgET1CVIkJs5CEwaHN1UhxV63fyv9KiIb6f/R+pkHXmGWG97OYW69DQGw
+Lj57u8Fzz5clhDG6vAi8JfAJhjpHECZkhJ7NO1yHgwKcgy+AfzHnL8SEHRyKCKW
l9ZrXxebBu0UEEBr2cGxuXzKV2NsTrmmWWDmoauvZXITpX3ClGDMekGXCgmwOJ9n
jKGTU98AesjOxLkpHSeKoT3+5dgLqWQbKOvTjUCVZccPLz6XipS7BUMNk+joZKwP
Mvq0r2+akBcgRUqNPga3jhTka5b0ZYUdk9sPmFo7LGb0B/GQNRUza8BcxwIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFOfvOhJo/kgyKqGjAeVvNIjRDSqhMB8GA1UdIwQY
MBaAFHIEe+FbJ1kC3PYX3D0OFtwfMIAiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMt
MWFiZTNhYzEwYWE2LzEvNS04NkVtai1TRElxb2FNQjVXODBpTkVOS3FFLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMtMWFiZTNhYzEwYWE2
LzEvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBAFPFEWA92sFAdNkKPbvF
Cz6/kxDALHnaY7AwYP2BtIY+3cssaaH3ThxHVfc/cMwdUc8vSH9303vZm0E71hM7
65zRiuJL9RTuHtj7GSY7ugIjEbbNgvQqsz3OYNjz+eYpE565htdSk0RX9WVnK3AT
ezDP6Skb25CuGec+/tt5vw7SU6TGtAMcRxjJq+/QByjmEO8t8/mVQHeIOs3yWEHa
cS5xaEcTZZXxZ4n1xnO/0oq5/lsM+RF8GvkEYYll/uqM6sdOROZ5mPEeJ87M4O0t
px1NxXrec6svrsOgiUU+F4nSH0WidFvG84loscrrZ4WCloo9FMCWom9P3EsJOSwu
09g=
-----END CERTIFICATE-----
Generated at Wed Apr 30 18:23:01 2025 by rpki-client