Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/EC4sguaozWt1w7f1Zfto66ShPgY.roa
File: EC4sguaozWt1w7f1Zfto66ShPgY.roa (raw, json)
Hash identifier: NG7qhJ/15I+rU/BxgkYQhPsFzol4FP4AgB96xCJVn9M=
Subject key identifier: 10:2E:2C:82:E6:A8:CD:6B:75:C3:B7:F5:65:FB:68:EB:A4:A1:3E:06
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 01895F79E48A8C5B6B3E502476F4378C0694
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/EC4sguaozWt1w7f1Zfto66ShPgY.roa
Signing time: Sun 16 Jul 2023 16:12:51 +0000
ROA not before: Sun 16 Jul 2023 16:12:51 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:188:5fe2:b396/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:187:4695:a68a/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:188:7858:a003/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64:ffff:0:187:fa9a:b088/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:187:b2b8:a7dd/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:5f:79:e4:8a:8c:5b:6b:3e:50:24:76:f4:37:8c:06:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Jul 16 16:12:51 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=102e2c82e6a8cd6b75c3b7f565fb68eba4a13e06
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:63:bd:32:7f:e2:51:3e:2d:5f:e2:63:56:f6:
6f:5f:b6:1a:17:dd:00:54:c2:72:f3:75:8b:0a:af:
05:80:04:f7:01:dc:9b:f2:c7:65:d1:fc:eb:9c:2d:
2e:ec:48:5b:6b:d9:09:16:26:c7:0b:66:9f:c2:22:
26:1b:dc:aa:f9:63:40:5a:16:f2:71:c5:30:8e:34:
99:6e:1a:b5:2a:54:2b:24:e1:a4:11:3d:cf:59:15:
f7:0e:a0:7e:00:ed:68:6c:8b:ef:7b:cd:80:e1:6e:
f1:ba:78:ed:b7:e8:0d:e5:10:82:9d:6d:c5:de:d0:
00:ce:16:9f:4b:e7:d6:20:27:d0:ce:7b:bd:ce:95:
29:47:b4:80:c4:33:f9:d0:51:e7:4a:48:40:2a:a0:
ac:5d:e8:bc:29:91:f6:41:2a:3a:d8:00:2f:c4:bb:
32:81:40:9f:bd:2d:6f:d4:c5:6c:1f:3e:21:d5:a8:
9d:51:8f:58:2c:af:3e:df:7b:cf:2a:08:7b:73:30:
48:de:03:f4:35:c6:39:33:55:1c:83:e7:f7:ea:9d:
e8:4b:ad:4e:02:52:52:56:e3:e7:83:93:62:eb:76:
c3:7a:f6:67:60:20:68:e8:eb:3b:0f:c0:e4:39:59:
3a:4f:1a:c2:8e:61:d0:69:23:f1:c7:6c:87:0b:89:
d7:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:2E:2C:82:E6:A8:CD:6B:75:C3:B7:F5:65:FB:68:EB:A4:A1:3E:06
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/EC4sguaozWt1w7f1Zfto66ShPgY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
89:76:5b:41:3a:de:98:6b:f1:e1:09:55:dd:4c:47:88:c1:ac:
02:2d:46:e3:92:66:b5:36:ee:09:ce:85:01:0a:33:53:1c:d1:
6a:4e:a6:c5:3f:e7:e6:4d:65:de:d0:90:ed:32:3b:11:8f:2b:
38:55:e3:4e:cc:bd:ea:50:f2:64:f3:0b:9b:ee:65:76:b0:20:
ed:37:63:0f:15:e2:a1:35:2e:d8:cd:ae:f5:b0:bc:93:b9:c5:
a1:3c:22:82:12:bb:22:c0:23:1b:f3:8b:45:70:d0:da:a6:f2:
26:5e:8a:2c:aa:86:83:07:53:f2:ee:c8:24:57:b1:83:20:50:
e0:29:59:7c:33:8c:ae:6d:68:41:70:29:6b:df:ac:49:cc:39:
37:38:d1:a6:ef:70:2c:63:01:60:f4:53:05:0b:56:b3:dc:b3:
30:bb:c1:b2:d9:ca:05:08:7d:5a:bf:6c:84:ad:66:3f:79:86:
dc:2a:a8:7c:30:01:9f:4f:01:97:b6:3d:99:05:71:2e:e4:77:
6b:32:1d:b7:f8:27:48:7e:ce:0e:2f:50:a2:4f:08:5b:98:a2:
f9:23:e9:3b:08:f9:e5:34:8f:49:a9:79:9b:91:24:62:33:4a:
5a:23:40:ce:05:14:e1:2b:fa:ec:70:ee:a4:91:21:62:5c:f4:
1d:a2:c1:99
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYlfeeSKjFtrPlAkdvQ3jAaUMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcyMDQ3YmUxNWIyNzU5MDJkY2Y2MTdkYzNkMGUxNmRjMWYz
MDgwMjIwHhcNMjMwNzE2MTYxMjUxWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxMDJlMmM4MmU2YThjZDZiNzVjM2I3ZjU2NWZiNjhlYmE0YTEzZTA2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhWO9Mn/iUT4tX+JjVvZvX7YaF90A
VMJy83WLCq8FgAT3Adyb8sdl0fzrnC0u7Ehba9kJFibHC2afwiImG9yq+WNAWhby
ccUwjjSZbhq1KlQrJOGkET3PWRX3DqB+AO1obIvve82A4W7xunjtt+gN5RCCnW3F
3tAAzhafS+fWICfQznu9zpUpR7SAxDP50FHnSkhAKqCsXei8KZH2QSo62AAvxLsy
gUCfvS1v1MVsHz4h1aidUY9YLK8+33vPKgh7czBI3gP0NcY5M1Ucg+f36p3oS61O
AlJSVuPng5Ni63bDevZnYCBo6Os7D8DkOVk6TxrCjmHQaSPxx2yHC4nXfQIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFBAuLILmqM1rdcO39WX7aOukoT4GMB8GA1UdIwQY
MBaAFHIEe+FbJ1kC3PYX3D0OFtwfMIAiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMt
MWFiZTNhYzEwYWE2LzEvRUM0c2d1YW96V3QxdzdmMVpmdG82NlNoUGdZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMtMWFiZTNhYzEwYWE2
LzEvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBAIl2W0E63phr8eEJVd1M
R4jBrAItRuOSZrU27gnOhQEKM1Mc0WpOpsU/5+ZNZd7QkO0yOxGPKzhV407MvepQ
8mTzC5vuZXawIO03Yw8V4qE1LtjNrvWwvJO5xaE8IoISuyLAIxvzi0Vw0Nqm8iZe
iiyqhoMHU/LuyCRXsYMgUOApWXwzjK5taEFwKWvfrEnMOTc40abvcCxjAWD0UwUL
VrPcszC7wbLZygUIfVq/bIStZj95htwqqHwwAZ9PAZe2PZkFcS7kd2syHbf4J0h+
zg4vUKJPCFuYovkj6TsI+eU0j0mpeZuRJGIzSlojQM4FFOEr+uxw7qSRIWJc9B2i
wZk=
-----END CERTIFICATE-----
Generated at Sat May 3 02:18:28 2025 by rpki-client