Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/5rE4gym0rvZb33-FraE9s9rQFVE.roa
File: 5rE4gym0rvZb33-FraE9s9rQFVE.roa (raw, json)
Hash identifier: tEm5TDPf8vXvFJaQsuQLaRmXNmLbu+e0wHdqg9TrPe8=
Subject key identifier: E6:B1:38:83:29:B4:AE:F6:5B:DF:7F:85:AD:A1:3D:B3:DA:D0:15:51
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0187F24474A76CA97B9766DE395615803B1C
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/5rE4gym0rvZb33-FraE9s9rQFVE.roa
Signing time: Sat 06 May 2023 18:13:05 +0000
ROA not before: Sat 06 May 2023 18:13:05 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:187:4695:a68a/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:187:b2b8:a7dd/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:f2:44:74:a7:6c:a9:7b:97:66:de:39:56:15:80:3b:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: May 6 18:13:05 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=e6b1388329b4aef65bdf7f85ada13db3dad01551
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:cb:fc:5f:08:cd:3e:87:cd:37:d1:10:09:89:
0b:05:47:16:c3:62:12:ee:44:75:33:4a:43:d7:d4:
82:09:e4:37:5c:4e:e4:09:dd:72:11:14:db:23:18:
de:b3:06:f0:17:ab:3f:8f:08:63:3f:3f:e6:67:f7:
5b:c1:c9:12:e7:db:bc:44:8e:bf:18:ea:c8:6e:58:
d0:98:cd:cf:3c:94:0e:2b:a5:a3:d7:1e:39:18:46:
fe:a6:20:0c:81:1c:a7:55:3c:f8:e0:f0:ec:b2:27:
bc:49:43:74:d6:cb:38:89:c1:7b:65:dc:28:15:08:
26:d8:c2:6c:46:d9:4c:64:3a:ef:5d:df:fb:f4:88:
bc:c1:0c:42:97:76:a3:1a:c3:0d:34:f4:ae:09:17:
25:91:80:36:ec:45:01:65:a5:ae:68:12:8c:28:33:
11:2a:4b:91:bd:e5:58:16:f2:b5:71:43:78:3d:7f:
27:35:15:bd:32:53:16:16:d3:c9:60:ca:40:3b:56:
b5:64:59:eb:10:e2:5a:be:b6:00:0d:3a:55:2e:90:
98:a2:f9:2d:cf:fb:c5:c7:7c:82:29:d7:41:97:7d:
58:84:0b:b9:c0:c5:f0:0e:d3:9b:da:84:3d:5a:6e:
33:f5:c5:b1:12:02:c9:6c:4f:a1:ce:89:d0:7c:03:
44:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:B1:38:83:29:B4:AE:F6:5B:DF:7F:85:AD:A1:3D:B3:DA:D0:15:51
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/5rE4gym0rvZb33-FraE9s9rQFVE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
30:92:a8:b1:8f:75:99:c9:ec:61:55:22:ba:f4:a9:4b:dc:a6:
36:94:82:c9:8c:eb:35:60:76:74:95:db:5f:79:cf:35:f9:92:
a2:0d:29:5d:b8:02:d5:fa:58:83:df:35:a7:be:1e:57:84:27:
19:2f:ec:12:88:dc:20:41:7b:f2:aa:d0:1d:ae:5e:13:42:7c:
d5:9f:30:a5:68:d4:c2:fa:66:19:89:aa:c8:d4:4c:1a:95:6b:
66:03:54:4c:aa:66:f0:a7:1c:7c:23:04:eb:2a:36:e5:c1:ed:
d3:14:75:49:14:bf:09:dc:48:74:96:27:7d:a4:16:1a:3f:0d:
e1:c8:10:61:ab:bd:16:0a:88:fe:7d:9e:00:01:0f:c2:a1:bd:
3a:0c:ed:78:dd:9b:15:08:f8:aa:9d:24:c0:da:b7:22:a3:b5:
6b:9b:83:cd:4e:4b:0e:ca:34:0c:bd:a1:06:a5:53:54:25:63:
26:01:a4:d0:60:59:28:77:a3:2c:be:4f:7d:7a:94:f5:b6:bb:
66:2a:1e:e0:2d:d8:71:e6:22:3a:89:8a:2a:cf:c8:c9:cb:02:
34:6f:c7:84:13:f4:fc:12:b7:84:88:d4:f7:3a:e1:48:cf:c6:
83:40:23:b8:8b:27:2c:ff:0e:ab:b4:44:bf:80:a6:9e:6f:84:
75:97:28:6f
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYfyRHSnbKl7l2beOVYVgDscMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcyMDQ3YmUxNWIyNzU5MDJkY2Y2MTdkYzNkMGUxNmRjMWYz
MDgwMjIwHhcNMjMwNTA2MTgxMzA1WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlNmIxMzg4MzI5YjRhZWY2NWJkZjdmODVhZGExM2RiM2RhZDAxNTUxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAscv8XwjNPofNN9EQCYkLBUcWw2IS
7kR1M0pD19SCCeQ3XE7kCd1yERTbIxjeswbwF6s/jwhjPz/mZ/dbwckS59u8RI6/
GOrIbljQmM3PPJQOK6Wj1x45GEb+piAMgRynVTz44PDssie8SUN01ss4icF7Zdwo
FQgm2MJsRtlMZDrvXd/79Ii8wQxCl3ajGsMNNPSuCRclkYA27EUBZaWuaBKMKDMR
KkuRveVYFvK1cUN4PX8nNRW9MlMWFtPJYMpAO1a1ZFnrEOJavrYADTpVLpCYovkt
z/vFx3yCKddBl31YhAu5wMXwDtOb2oQ9Wm4z9cWxEgLJbE+hzonQfANEzwIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFOaxOIMptK72W99/ha2hPbPa0BVRMB8GA1UdIwQY
MBaAFHIEe+FbJ1kC3PYX3D0OFtwfMIAiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMt
MWFiZTNhYzEwYWE2LzEvNXJFNGd5bTBydlpiMzMtRnJhRTlzOXJRRlZFLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMtMWFiZTNhYzEwYWE2
LzEvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBADCSqLGPdZnJ7GFVIrr0
qUvcpjaUgsmM6zVgdnSV2195zzX5kqINKV24AtX6WIPfNae+HleEJxkv7BKI3CBB
e/Kq0B2uXhNCfNWfMKVo1ML6ZhmJqsjUTBqVa2YDVEyqZvCnHHwjBOsqNuXB7dMU
dUkUvwncSHSWJ32kFho/DeHIEGGrvRYKiP59ngABD8KhvToM7XjdmxUI+KqdJMDa
tyKjtWubg81OSw7KNAy9oQalU1QlYyYBpNBgWSh3oyy+T316lPW2u2YqHuAt2HHm
IjqJiirPyMnLAjRvx4QT9PwSt4SI1Pc64UjPxoNAI7iLJyz/Dqu0RL+App5vhHWX
KG8=
-----END CERTIFICATE-----
Generated at Thu May 1 01:48:10 2025 by rpki-client