Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/AnEEkGMZiLSHTvWqN0a3ELqWIvs.roa
File: AnEEkGMZiLSHTvWqN0a3ELqWIvs.roa (raw, json)
Hash identifier: oDRqrjYFBORCgxB1HyX13E2KI45ZvYThlkg8xUC+qRY=
Subject key identifier: 02:71:04:90:63:19:88:B4:87:4E:F5:AA:37:46:B7:10:BA:96:22:FB
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0189B13AA0EB8FE7FA38C9FF8D062B826558
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/AnEEkGMZiLSHTvWqN0a3ELqWIvs.roa
Signing time: Tue 01 Aug 2023 13:12:36 +0000
ROA not before: Tue 01 Aug 2023 13:12:36 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:188:7858:a003/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:189:a0e4:5c7d/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:b1:3a:a0:eb:8f:e7:fa:38:c9:ff:8d:06:2b:82:65:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Aug 1 13:12:36 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=02710490631988b4874ef5aa3746b710ba9622fb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:76:a9:8a:cc:cc:59:04:56:92:50:64:31:27:
f4:d6:f9:65:63:69:a9:96:2f:34:53:09:bb:f3:56:
5b:e1:c5:d2:31:73:d7:39:9a:28:bd:85:53:65:1d:
7d:cb:0c:cd:65:35:df:0d:97:d1:9b:fa:b2:5d:4b:
73:67:6d:63:6b:54:80:4e:17:5b:09:e4:e4:e3:84:
46:5b:fc:36:e3:46:98:a9:a6:92:5c:83:2b:3a:bd:
0c:84:64:17:6e:3a:71:5d:a3:33:53:9d:09:dd:69:
35:ed:cc:89:8a:c8:37:b1:e0:9f:bf:b2:e2:23:70:
38:0a:2f:ed:4c:74:f8:73:81:ee:da:77:62:ca:6a:
1e:e8:d0:91:ae:9d:e7:d1:92:61:50:ea:4e:e6:60:
7c:e1:e2:66:ae:b9:75:35:2e:89:b2:2e:b6:ef:86:
7f:59:73:e3:e2:13:3f:cf:05:50:fa:dc:a4:88:4f:
c5:1d:1b:5a:8e:1c:a0:79:31:b8:71:a0:df:c3:c1:
5b:3f:d0:c6:6b:6e:e9:7f:42:4d:11:19:ec:12:da:
37:3a:fd:3d:b1:3f:19:f2:3e:30:0a:ff:af:f5:42:
b2:91:6e:2b:78:78:7b:b6:c9:73:97:56:1b:80:b9:
a1:f1:b8:a3:0d:ff:d7:48:b8:c9:99:87:1a:e3:82:
43:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:71:04:90:63:19:88:B4:87:4E:F5:AA:37:46:B7:10:BA:96:22:FB
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/AnEEkGMZiLSHTvWqN0a3ELqWIvs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
a5:e3:4b:2d:fc:3e:ea:8a:c0:c0:ac:9f:40:14:2f:41:2f:c6:
d4:d0:3d:9c:60:15:fa:4b:49:8e:00:04:28:cc:fd:6f:3f:11:
66:eb:70:30:be:aa:04:16:96:3e:0d:7d:f1:b8:91:e9:ae:ee:
69:ed:4a:3a:2a:76:68:21:7b:c2:58:cf:4e:a1:76:9e:70:84:
a8:75:ff:90:25:e7:bf:8d:81:14:5e:1e:bc:6f:1c:c5:2e:8b:
64:74:0d:b3:cd:1e:30:56:42:10:de:ad:28:46:a9:32:02:4b:
42:07:01:ec:b3:7b:fd:1b:4e:25:1f:a2:dc:19:1a:76:43:dc:
46:a5:af:85:55:21:3d:38:49:7e:3f:11:8b:c3:11:f1:e1:7d:
59:d1:4c:95:0e:9c:e1:14:b6:ce:71:2a:66:c9:99:6f:19:12:
de:a7:21:f1:4e:e5:6a:a8:d4:97:64:22:6f:6a:24:eb:59:f1:
bf:bc:2a:dc:0c:11:c6:e0:23:c4:7d:1a:b4:02:b6:a2:79:b8:
0e:14:5c:87:8b:3a:ae:6a:59:dd:df:89:c7:15:2c:ec:e4:2e:
02:82:7b:13:e5:ae:62:c7:d1:d1:a4:77:e1:0f:a1:b9:0e:cc:
5a:ab:2b:f5:29:51:8f:76:28:70:c3:7d:5c:8a:3c:79:57:a5:
1e:06:7a:83
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYmxOqDrj+f6OMn/jQYrgmVYMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcyMDQ3YmUxNWIyNzU5MDJkY2Y2MTdkYzNkMGUxNmRjMWYz
MDgwMjIwHhcNMjMwODAxMTMxMjM2WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwMjcxMDQ5MDYzMTk4OGI0ODc0ZWY1YWEzNzQ2YjcxMGJhOTYyMmZiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvXapiszMWQRWklBkMSf01vllY2mp
li80Uwm781Zb4cXSMXPXOZoovYVTZR19ywzNZTXfDZfRm/qyXUtzZ21ja1SAThdb
CeTk44RGW/w240aYqaaSXIMrOr0MhGQXbjpxXaMzU50J3Wk17cyJisg3seCfv7Li
I3A4Ci/tTHT4c4Hu2ndiymoe6NCRrp3n0ZJhUOpO5mB84eJmrrl1NS6Jsi6274Z/
WXPj4hM/zwVQ+tykiE/FHRtajhygeTG4caDfw8FbP9DGa27pf0JNERnsEto3Ov09
sT8Z8j4wCv+v9UKykW4reHh7tslzl1YbgLmh8bijDf/XSLjJmYca44JDhwIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFAJxBJBjGYi0h071qjdGtxC6liL7MB8GA1UdIwQY
MBaAFHIEe+FbJ1kC3PYX3D0OFtwfMIAiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMt
MWFiZTNhYzEwYWE2LzEvQW5FRWtHTVppTFNIVHZXcU4wYTNFTHFXSXZzLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMtMWFiZTNhYzEwYWE2
LzEvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBAKXjSy38PuqKwMCsn0AU
L0EvxtTQPZxgFfpLSY4ABCjM/W8/EWbrcDC+qgQWlj4NffG4kemu7mntSjoqdmgh
e8JYz06hdp5whKh1/5Al57+NgRReHrxvHMUui2R0DbPNHjBWQhDerShGqTICS0IH
Aeyze/0bTiUfotwZGnZD3Ealr4VVIT04SX4/EYvDEfHhfVnRTJUOnOEUts5xKmbJ
mW8ZEt6nIfFO5Wqo1JdkIm9qJOtZ8b+8KtwMEcbgI8R9GrQCtqJ5uA4UXIeLOq5q
Wd3ficcVLOzkLgKCexPlrmLH0dGkd+EPobkOzFqrK/UpUY92KHDDfVyKPHlXpR4G
eoM=
-----END CERTIFICATE-----
Generated at Wed Apr 30 21:26:35 2025 by rpki-client