Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/E91RIiW1ORhJTh2H7PEw-vuj60U.roa
File: E91RIiW1ORhJTh2H7PEw-vuj60U.roa (raw, json)
Hash identifier: qc25Be5L+saKqtWNSRgS7z29dGdzWTpeZNjBLbvvaxM=
Subject key identifier: 13:DD:51:22:25:B5:39:18:49:4E:1D:87:EC:F1:30:FA:FB:A3:EB:45
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0186BF9CAADC739C98D72C37F2933FE2E8A0
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/E91RIiW1ORhJTh2H7PEw-vuj60U.roa
Signing time: Wed 08 Mar 2023 05:06:00 +0000
ROA not before: Wed 08 Mar 2023 05:06:00 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:bf9b:cfd6/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:bf:9c:aa:dc:73:9c:98:d7:2c:37:f2:93:3f:e2:e8:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Mar 8 05:06:00 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=13dd512225b53918494e1d87ecf130fafba3eb45
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:fb:96:07:71:ae:87:3c:3d:84:08:13:c6:c9:
ce:d2:16:e6:22:f9:7c:08:82:f1:0e:93:e5:9a:b9:
6c:a7:d3:ca:27:38:a2:ff:d8:11:e7:08:69:4c:f7:
88:6d:97:55:0c:4f:87:e3:ca:31:d2:32:52:8b:23:
91:ef:ba:7b:27:87:2c:ed:3e:12:c2:a0:df:39:96:
2d:4b:9a:91:86:34:2d:26:ab:90:24:77:04:c7:ab:
25:d6:f8:78:07:19:b6:a2:b0:af:e3:cd:2d:94:7b:
37:9b:bf:48:0d:42:4a:f5:b3:76:40:39:2d:9e:28:
9e:f8:04:04:8b:7d:cd:09:74:36:ec:8d:6b:4d:ea:
be:0d:4b:35:18:b4:53:4e:c3:2d:bc:31:44:d4:50:
c8:68:0e:d6:29:b6:3f:70:c0:0d:53:0b:ae:dc:14:
e6:68:78:c9:3d:f2:f3:6a:99:0b:a2:35:57:96:b8:
43:34:c7:41:ab:88:dd:33:8e:71:ad:30:c8:ac:45:
f5:59:4e:17:63:fb:09:19:ba:55:64:72:3d:34:4f:
e3:20:0a:06:ab:6b:7e:28:ef:68:31:61:64:a3:98:
cf:9e:8c:af:7d:4c:68:90:97:1d:9f:3e:1b:c0:16:
59:bf:57:ef:eb:13:1a:d2:58:0e:56:1a:89:bb:a9:
96:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:DD:51:22:25:B5:39:18:49:4E:1D:87:EC:F1:30:FA:FB:A3:EB:45
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/E91RIiW1ORhJTh2H7PEw-vuj60U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
7e:67:ef:ee:4a:e3:a9:a0:51:21:36:2f:2d:5c:cf:e1:57:bf:
4e:00:f1:a2:7c:84:5f:cb:c2:48:3d:d0:1e:07:4e:51:0e:ac:
db:cd:fa:7d:01:d9:a4:21:95:e4:94:ce:6b:47:2e:12:41:97:
30:44:51:67:05:e1:f7:ca:b9:e7:74:9b:2e:b6:a5:14:e6:21:
12:65:6c:b3:23:79:66:e7:06:23:00:c9:f7:ea:15:8a:1c:49:
37:30:8e:96:6e:15:6b:79:e7:15:75:8e:bd:42:17:0c:78:e5:
46:c5:00:c1:3b:88:d2:38:d2:ba:fb:42:a4:cb:0e:dc:78:50:
af:32:20:8a:dd:3c:80:8f:62:c0:c7:2d:2e:e5:57:f9:fc:3e:
2c:94:84:9d:72:85:b5:7e:f0:36:72:8c:5e:8b:0b:dc:f3:c8:
98:6e:a8:88:c4:90:e1:68:d5:b5:f1:82:1c:35:05:a5:cc:28:
33:a1:72:29:fb:b4:46:57:a4:13:77:b2:29:84:bd:7e:b9:1f:
44:51:d9:75:63:92:bc:3b:2c:27:3c:d9:bb:12:79:77:83:7a:
4b:a7:f4:92:d1:ff:2a:7b:2c:da:bb:1c:9f:70:3c:03:a7:fd:
af:e3:8d:1f:5d:16:f9:99:ba:94:98:fc:f6:af:1e:05:61:79:
d0:de:d8:59
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYa/nKrcc5yY1yw38pM/4uigMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcyMDQ3YmUxNWIyNzU5MDJkY2Y2MTdkYzNkMGUxNmRjMWYz
MDgwMjIwHhcNMjMwMzA4MDUwNjAwWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxM2RkNTEyMjI1YjUzOTE4NDk0ZTFkODdlY2YxMzBmYWZiYTNlYjQ1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjfuWB3Guhzw9hAgTxsnO0hbmIvl8
CILxDpPlmrlsp9PKJzii/9gR5whpTPeIbZdVDE+H48ox0jJSiyOR77p7J4cs7T4S
wqDfOZYtS5qRhjQtJquQJHcEx6sl1vh4Bxm2orCv480tlHs3m79IDUJK9bN2QDkt
niie+AQEi33NCXQ27I1rTeq+DUs1GLRTTsMtvDFE1FDIaA7WKbY/cMANUwuu3BTm
aHjJPfLzapkLojVXlrhDNMdBq4jdM45xrTDIrEX1WU4XY/sJGbpVZHI9NE/jIAoG
q2t+KO9oMWFko5jPnoyvfUxokJcdnz4bwBZZv1fv6xMa0lgOVhqJu6mWlwIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFBPdUSIltTkYSU4dh+zxMPr7o+tFMB8GA1UdIwQY
MBaAFHIEe+FbJ1kC3PYX3D0OFtwfMIAiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMt
MWFiZTNhYzEwYWE2LzEvRTkxUklpVzFPUmhKVGgySDdQRXctdnVqNjBVLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMtMWFiZTNhYzEwYWE2
LzEvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBAH5n7+5K46mgUSE2Ly1c
z+FXv04A8aJ8hF/Lwkg90B4HTlEOrNvN+n0B2aQhleSUzmtHLhJBlzBEUWcF4ffK
ued0my62pRTmIRJlbLMjeWbnBiMAyffqFYocSTcwjpZuFWt55xV1jr1CFwx45UbF
AME7iNI40rr7QqTLDtx4UK8yIIrdPICPYsDHLS7lV/n8PiyUhJ1yhbV+8DZyjF6L
C9zzyJhuqIjEkOFo1bXxghw1BaXMKDOhcin7tEZXpBN3simEvX65H0RR2XVjkrw7
LCc82bsSeXeDekun9JLR/yp7LNq7HJ9wPAOn/a/jjR9dFvmZupSY/PavHgVhedDe
2Fk=
-----END CERTIFICATE-----
Generated at Thu May 1 10:04:07 2025 by rpki-client