Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/E9VTMq3I_MpnCBYRZ5qTlGEX0cU.roa
File: E9VTMq3I_MpnCBYRZ5qTlGEX0cU.roa (raw, json)
Hash identifier: jJetdp85P+RO7FwCkc+4Sr8fq7cdojwIQwH10AgZ1TE=
Subject key identifier: 13:D5:53:32:AD:C8:FC:CA:67:08:16:11:67:9A:93:94:61:17:D1:C5
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 01855CB28646B64325612871BDDB9F1D0621
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/E9VTMq3I_MpnCBYRZ5qTlGEX0cU.roa
Signing time: Thu 29 Dec 2022 07:04:41 +0000
ROA not before: Thu 29 Dec 2022 07:04:41 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:185:5cb2:4e6/128 maxlen: 128
2001:67c:64:ffff:0:185:3dcc:d8f/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:5c:b2:86:46:b6:43:25:61:28:71:bd:db:9f:1d:06:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Dec 29 07:04:41 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=13d55332adc8fcca67081611679a93946117d1c5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:33:6c:36:15:55:5d:53:58:54:00:70:18:4e:
20:d3:d4:9d:40:48:34:d2:f2:15:a9:79:0c:06:2f:
d2:72:d4:3a:cd:9b:5a:5d:fc:23:17:de:e4:29:d3:
e1:be:91:b9:77:f6:f7:e6:a4:9e:92:e7:d5:a6:d2:
ce:33:fd:d9:8f:2a:8b:01:c2:07:70:13:c0:bd:52:
fd:5a:f8:5c:bc:9e:d6:62:ae:90:d8:c1:1e:01:bf:
65:7f:34:2d:f3:8e:53:fc:e1:b4:b2:9a:ce:89:18:
f0:a8:75:43:c7:49:29:ca:72:6f:2c:1b:18:05:df:
48:b2:d6:ab:f2:1e:95:9f:03:bd:3c:a2:1a:54:20:
e3:8f:81:ae:5a:73:95:31:01:4f:44:5a:21:f3:83:
4c:de:19:fe:9a:eb:35:e0:e1:da:8d:d5:45:43:74:
43:63:9c:84:8d:52:aa:66:a9:4d:aa:86:9c:da:ff:
06:b1:2b:47:78:12:46:3f:03:e2:8b:3d:21:bd:35:
24:2f:d6:91:1e:d8:fa:23:75:ac:72:e2:e3:57:4b:
62:17:1e:bb:9d:aa:dd:3b:ec:6c:18:a4:08:84:67:
77:a2:3d:1b:4f:e8:f1:d0:6b:48:fd:85:b6:35:54:
83:bd:18:78:8f:2b:e5:7c:98:16:c1:3a:95:59:e2:
73:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:D5:53:32:AD:C8:FC:CA:67:08:16:11:67:9A:93:94:61:17:D1:C5
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/E9VTMq3I_MpnCBYRZ5qTlGEX0cU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
12:94:a6:eb:99:db:8e:b3:80:63:23:58:eb:15:54:f3:db:a6:
a7:17:b3:00:b4:db:0a:36:2a:19:72:2b:49:fe:52:ec:ff:5f:
3e:44:18:b8:e9:fa:34:dc:69:19:d2:ed:d5:58:46:02:72:43:
6c:97:37:2a:00:13:f9:1f:c7:9d:20:ae:be:6f:9d:43:b8:1d:
1d:4c:e0:2c:8c:8f:88:f5:dd:d4:57:00:7f:be:d4:ac:20:3e:
f2:f9:45:90:f7:38:77:02:94:f7:76:32:b0:c7:de:8e:28:be:
59:25:92:c6:6c:3a:ac:dc:5f:72:63:b6:eb:63:cd:88:8c:58:
57:ab:f8:79:2e:33:73:f4:5c:cc:45:39:6e:29:19:2b:23:8f:
ed:47:c5:d8:48:98:f1:03:a2:dc:cf:88:90:cb:f7:4c:c2:bc:
88:a5:9b:28:9a:bf:cf:0f:fa:63:4c:3a:43:f9:d4:49:29:dd:
7a:0f:30:06:16:8f:85:a7:18:97:77:5b:24:05:29:06:4d:a3:
a0:a3:54:07:92:a3:e3:20:74:a2:f8:d7:6a:26:48:17:aa:7a:
ef:9f:21:7e:fb:36:3c:0d:2b:a0:c2:69:e1:2a:c6:7d:35:36:
6e:15:14:f5:0f:ab:f9:c7:91:3f:81:2e:b1:21:84:26:f5:6e:
b2:b5:77:64
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYVcsoZGtkMlYShxvdufHQYhMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcyMDQ3YmUxNWIyNzU5MDJkY2Y2MTdkYzNkMGUxNmRjMWYz
MDgwMjIwHhcNMjIxMjI5MDcwNDQxWhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxM2Q1NTMzMmFkYzhmY2NhNjcwODE2MTE2NzlhOTM5NDYxMTdkMWM1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAizNsNhVVXVNYVABwGE4g09SdQEg0
0vIVqXkMBi/SctQ6zZtaXfwjF97kKdPhvpG5d/b35qSekufVptLOM/3ZjyqLAcIH
cBPAvVL9WvhcvJ7WYq6Q2MEeAb9lfzQt845T/OG0sprOiRjwqHVDx0kpynJvLBsY
Bd9Istar8h6VnwO9PKIaVCDjj4GuWnOVMQFPRFoh84NM3hn+mus14OHajdVFQ3RD
Y5yEjVKqZqlNqoac2v8GsStHeBJGPwPiiz0hvTUkL9aRHtj6I3WscuLjV0tiFx67
nardO+xsGKQIhGd3oj0bT+jx0GtI/YW2NVSDvRh4jyvlfJgWwTqVWeJzYwIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFBPVUzKtyPzKZwgWEWeak5RhF9HFMB8GA1UdIwQY
MBaAFHIEe+FbJ1kC3PYX3D0OFtwfMIAiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMt
MWFiZTNhYzEwYWE2LzEvRTlWVE1xM0lfTXBuQ0JZUlo1cVRsR0VYMGNVLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMtMWFiZTNhYzEwYWE2
LzEvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBABKUpuuZ246zgGMjWOsV
VPPbpqcXswC02wo2KhlyK0n+Uuz/Xz5EGLjp+jTcaRnS7dVYRgJyQ2yXNyoAE/kf
x50grr5vnUO4HR1M4CyMj4j13dRXAH++1KwgPvL5RZD3OHcClPd2MrDH3o4ovlkl
ksZsOqzcX3JjtutjzYiMWFer+HkuM3P0XMxFOW4pGSsjj+1HxdhImPEDotzPiJDL
90zCvIilmyiav88P+mNMOkP51Ekp3XoPMAYWj4WnGJd3WyQFKQZNo6CjVAeSo+Mg
dKL412omSBeqeu+fIX77NjwNK6DCaeEqxn01Nm4VFPUPq/nHkT+BLrEhhCb1brK1
d2Q=
-----END CERTIFICATE-----
Generated at Thu May 1 12:17:47 2025 by rpki-client