Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/7wEkbgTbrmSzEAdKKsHFb-P6rkA.roa
File: 7wEkbgTbrmSzEAdKKsHFb-P6rkA.roa (raw, json)
Hash identifier: sXOyk1y01E+Z0UTDm/WSxexer6pQUfLNxwzRgnxqVTs=
Subject key identifier: EF:01:24:6E:04:DB:AE:64:B3:10:07:4A:2A:C1:C5:6F:E3:FA:AE:40
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0186BFDAEBC40C72DB1CF3D1C53810100493
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/7wEkbgTbrmSzEAdKKsHFb-P6rkA.roa
Signing time: Wed 08 Mar 2023 06:14:00 +0000
ROA not before: Wed 08 Mar 2023 06:14:00 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:bf:da:eb:c4:0c:72:db:1c:f3:d1:c5:38:10:10:04:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Mar 8 06:14:00 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=ef01246e04dbae64b310074a2ac1c56fe3faae40
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:42:9b:ce:6c:c3:a7:79:cf:1a:82:66:3f:4c:
c2:0f:20:58:5b:83:94:f0:71:1c:de:19:96:00:4a:
7b:a5:2b:39:30:45:0e:e3:40:d9:75:c3:e3:91:ef:
91:cf:3d:b0:98:24:24:ee:b4:7e:69:aa:a3:ec:85:
ff:4b:16:c6:4d:2a:e2:80:0d:48:4b:8f:fb:8b:4b:
1d:61:7e:2c:b8:8f:2f:17:fc:3d:04:4a:bd:8a:a2:
87:ce:6a:48:7f:6f:2f:35:c2:4f:d7:ee:57:d8:dd:
ac:27:ce:2f:df:44:98:3c:fb:7f:c7:d7:81:35:f2:
2e:f5:8a:1b:db:e4:70:ae:b9:ce:ca:3a:6a:e8:bb:
f3:1b:22:53:31:4f:9f:55:06:c7:d4:75:f2:d9:db:
b4:2c:f1:a8:fa:91:45:11:75:b3:71:d6:95:2c:12:
48:db:ee:0f:70:c8:54:55:89:37:d0:5d:19:9d:52:
5e:d2:b3:a9:25:85:73:11:cd:2f:29:e0:cd:82:0a:
79:0e:88:a1:90:e9:a2:86:e9:1c:1b:c2:6b:37:df:
8e:c6:87:be:4a:39:f7:7f:68:09:71:35:c2:dd:88:
41:c3:21:cb:91:29:96:a1:1e:64:64:27:76:06:78:
c2:ff:39:de:ea:fa:71:56:f8:31:d3:78:f1:22:84:
78:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:01:24:6E:04:DB:AE:64:B3:10:07:4A:2A:C1:C5:6F:E3:FA:AE:40
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/7wEkbgTbrmSzEAdKKsHFb-P6rkA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
34:b8:f3:c4:86:be:a1:6e:fa:7c:1a:b1:76:eb:b1:3f:67:2a:
a5:2d:e0:cd:83:dc:97:9b:3c:92:ff:23:4a:ce:2e:15:da:b5:
e0:8e:98:6d:b9:61:9d:f0:ba:c4:12:06:bc:21:39:60:f8:9a:
d1:28:f7:0c:44:e8:fc:fa:66:79:9d:34:c3:2c:74:2b:be:af:
8b:43:f7:77:d5:56:36:24:da:5c:a1:39:f6:48:a4:4e:2f:3d:
7d:01:87:3f:b4:06:9c:08:34:8b:d6:ae:06:16:96:34:db:c8:
8e:23:51:4e:67:72:19:d6:47:6d:e0:d9:7f:e7:a8:40:da:b5:
72:cd:c3:6b:60:92:0b:e4:57:aa:29:ad:cf:95:b8:15:6e:64:
72:be:b5:c0:0c:50:ff:5c:22:8f:5d:c3:b4:47:9e:d2:d0:5a:
3f:74:9e:97:61:0c:f2:fd:38:63:15:2d:e1:82:9c:48:30:fd:
5d:85:ae:4e:71:3d:9f:1f:ca:5d:b2:58:a0:82:96:6b:19:48:
01:d7:1a:c7:11:27:8e:df:99:fd:1d:59:57:75:da:3c:a6:a9:
c2:7c:c6:39:34:8b:7b:20:f2:32:a7:67:27:1a:6a:9b:10:57:
0f:f2:72:34:87:41:af:7d:a2:da:a6:43:50:44:eb:ae:1a:bc:
20:bc:c1:fe
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYa/2uvEDHLbHPPRxTgQEASTMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcyMDQ3YmUxNWIyNzU5MDJkY2Y2MTdkYzNkMGUxNmRjMWYz
MDgwMjIwHhcNMjMwMzA4MDYxNDAwWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlZjAxMjQ2ZTA0ZGJhZTY0YjMxMDA3NGEyYWMxYzU2ZmUzZmFhZTQwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvkKbzmzDp3nPGoJmP0zCDyBYW4OU
8HEc3hmWAEp7pSs5MEUO40DZdcPjke+Rzz2wmCQk7rR+aaqj7IX/SxbGTSrigA1I
S4/7i0sdYX4suI8vF/w9BEq9iqKHzmpIf28vNcJP1+5X2N2sJ84v30SYPPt/x9eB
NfIu9Yob2+RwrrnOyjpq6LvzGyJTMU+fVQbH1HXy2du0LPGo+pFFEXWzcdaVLBJI
2+4PcMhUVYk30F0ZnVJe0rOpJYVzEc0vKeDNggp5DoihkOmihukcG8JrN9+Oxoe+
Sjn3f2gJcTXC3YhBwyHLkSmWoR5kZCd2BnjC/zne6vpxVvgx03jxIoR4MQIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFO8BJG4E265ksxAHSirBxW/j+q5AMB8GA1UdIwQY
MBaAFHIEe+FbJ1kC3PYX3D0OFtwfMIAiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMt
MWFiZTNhYzEwYWE2LzEvN3dFa2JnVGJybVN6RUFkS0tzSEZiLVA2cmtBLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMtMWFiZTNhYzEwYWE2
LzEvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBADS488SGvqFu+nwasXbr
sT9nKqUt4M2D3JebPJL/I0rOLhXateCOmG25YZ3wusQSBrwhOWD4mtEo9wxE6Pz6
ZnmdNMMsdCu+r4tD93fVVjYk2lyhOfZIpE4vPX0Bhz+0BpwINIvWrgYWljTbyI4j
UU5nchnWR23g2X/nqEDatXLNw2tgkgvkV6oprc+VuBVuZHK+tcAMUP9cIo9dw7RH
ntLQWj90npdhDPL9OGMVLeGCnEgw/V2Frk5xPZ8fyl2yWKCClmsZSAHXGscRJ47f
mf0dWVd12jymqcJ8xjk0i3sg8jKnZycaapsQVw/ycjSHQa99otqmQ1BE664avCC8
wf4=
-----END CERTIFICATE-----
Generated at Sat May 3 08:59:24 2025 by rpki-client