Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/74O0ETd0QodMnk_s-w4VYJ4Mbxo.roa
File: 74O0ETd0QodMnk_s-w4VYJ4Mbxo.roa (raw, json)
Hash identifier: KOx7wMylTBTXfzRn4ayfbpEI2DNDBkMPu2ALUxqJk8Y=
Subject key identifier: EF:83:B4:11:37:74:42:87:4C:9E:4F:EC:FB:0E:15:60:9E:0C:6F:1A
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0186C26F356FD11EC0BC919E1703104177D6
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/74O0ETd0QodMnk_s-w4VYJ4Mbxo.roa
Signing time: Wed 08 Mar 2023 18:15:13 +0000
ROA not before: Wed 08 Mar 2023 18:15:13 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:c2:6f:35:6f:d1:1e:c0:bc:91:9e:17:03:10:41:77:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Mar 8 18:15:13 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=ef83b411377442874c9e4fecfb0e15609e0c6f1a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:cd:e7:b0:49:bd:ff:a7:66:66:90:d4:7b:b7:
27:cb:fe:53:ff:c0:eb:39:14:c6:89:ed:f2:bd:a2:
7c:05:8e:53:e5:cd:c7:b9:98:f8:19:13:ce:3f:e5:
f2:28:5f:1d:7d:c1:ac:ed:19:25:4c:5e:25:9d:bf:
b6:e1:f6:19:d0:19:b9:51:fd:b5:c5:b0:bc:7e:56:
90:cc:89:ec:a3:c4:a8:24:f0:26:21:7f:72:30:0b:
2c:ed:57:7c:80:76:6f:1a:c6:c1:82:72:0e:a7:06:
34:6d:44:ab:e2:69:7c:b9:a9:f4:8f:77:e9:21:de:
c8:e7:b1:f7:3e:24:51:1a:08:9a:92:67:ef:46:b4:
b3:43:59:b6:6f:29:06:87:18:28:55:31:38:4e:f5:
6a:3e:5b:3d:7d:3d:16:3b:99:f4:5f:7c:65:83:79:
c9:55:b8:7d:ee:4f:95:c1:7d:c0:ba:d9:69:e1:59:
f2:12:19:49:20:54:19:a2:a4:9d:4b:f0:70:25:c6:
f1:72:26:3d:0a:f8:92:90:9f:1d:70:a6:bd:f4:5d:
25:e0:54:17:8f:45:ea:f1:e3:2a:7f:9d:60:31:89:
77:c0:05:78:39:63:21:05:fb:78:a0:27:6b:8a:e1:
eb:af:0a:05:dd:32:f8:f3:20:78:22:f4:bc:66:63:
a7:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:83:B4:11:37:74:42:87:4C:9E:4F:EC:FB:0E:15:60:9E:0C:6F:1A
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/74O0ETd0QodMnk_s-w4VYJ4Mbxo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
45:e0:ab:d0:d4:cd:42:0c:2e:6f:d1:e6:fe:a1:fb:81:78:b5:
97:17:5b:18:1b:9a:90:66:98:78:96:05:e6:55:cf:3d:7d:3a:
40:78:a2:e2:3c:9d:d7:c9:a9:1e:38:3b:ac:7a:c6:c2:83:aa:
9b:3c:9b:c4:64:e7:30:bf:6a:f8:b3:a5:58:4f:4a:3c:4c:21:
a9:a5:c8:87:77:36:89:49:1c:c0:c3:f8:61:50:d8:2f:d5:d2:
69:de:25:f6:6e:a5:c5:dc:5a:4a:f1:e1:1d:bf:4b:9b:13:f8:
bf:22:72:04:08:99:47:82:c6:16:87:6d:c9:64:b5:12:49:fb:
7f:fa:27:f0:77:e2:2a:cf:6a:14:30:66:60:3b:2d:b9:13:d6:
09:fd:71:19:47:bc:71:40:c6:8b:3e:b2:29:b5:07:29:87:5e:
5c:48:aa:f2:5f:5f:91:5f:4a:fd:4e:0e:33:8b:e4:d7:7c:2c:
b3:b6:9d:c6:fe:84:c9:39:cd:81:ea:02:dd:01:30:65:be:88:
d6:fb:c3:fe:b8:ee:38:52:1d:b0:d2:ef:a3:83:42:21:8e:a7:
73:4b:35:fe:2f:be:7a:d4:1b:83:e1:44:63:f3:fa:da:ed:c0:
d4:fb:cd:b0:52:80:dd:31:a1:dc:3d:c8:3a:1a:4a:92:7a:83:
27:cd:55:77
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYbCbzVv0R7AvJGeFwMQQXfWMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcyMDQ3YmUxNWIyNzU5MDJkY2Y2MTdkYzNkMGUxNmRjMWYz
MDgwMjIwHhcNMjMwMzA4MTgxNTEzWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlZjgzYjQxMTM3NzQ0Mjg3NGM5ZTRmZWNmYjBlMTU2MDllMGM2ZjFhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr83nsEm9/6dmZpDUe7cny/5T/8Dr
ORTGie3yvaJ8BY5T5c3HuZj4GRPOP+XyKF8dfcGs7RklTF4lnb+24fYZ0Bm5Uf21
xbC8flaQzInso8SoJPAmIX9yMAss7Vd8gHZvGsbBgnIOpwY0bUSr4ml8uan0j3fp
Id7I57H3PiRRGgiakmfvRrSzQ1m2bykGhxgoVTE4TvVqPls9fT0WO5n0X3xlg3nJ
Vbh97k+VwX3Autlp4VnyEhlJIFQZoqSdS/BwJcbxciY9CviSkJ8dcKa99F0l4FQX
j0Xq8eMqf51gMYl3wAV4OWMhBft4oCdriuHrrwoF3TL48yB4IvS8ZmOnlwIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFO+DtBE3dEKHTJ5P7PsOFWCeDG8aMB8GA1UdIwQY
MBaAFHIEe+FbJ1kC3PYX3D0OFtwfMIAiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMt
MWFiZTNhYzEwYWE2LzEvNzRPMEVUZDBRb2RNbmtfcy13NFZZSjRNYnhvLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMtMWFiZTNhYzEwYWE2
LzEvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBAEXgq9DUzUIMLm/R5v6h
+4F4tZcXWxgbmpBmmHiWBeZVzz19OkB4ouI8ndfJqR44O6x6xsKDqps8m8Rk5zC/
avizpVhPSjxMIamlyId3NolJHMDD+GFQ2C/V0mneJfZupcXcWkrx4R2/S5sT+L8i
cgQImUeCxhaHbclktRJJ+3/6J/B34irPahQwZmA7LbkT1gn9cRlHvHFAxos+sim1
BymHXlxIqvJfX5FfSv1ODjOL5Nd8LLO2ncb+hMk5zYHqAt0BMGW+iNb7w/647jhS
HbDS76ODQiGOp3NLNf4vvnrUG4PhRGPz+trtwNT7zbBSgN0xodw9yDoaSpJ6gyfN
VXc=
-----END CERTIFICATE-----
Generated at Fri May 2 10:07:09 2025 by rpki-client