Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/EDzPBXfY708e0fsUOIlsWdyaxdQ.roa
File: EDzPBXfY708e0fsUOIlsWdyaxdQ.roa (raw, json)
Hash identifier: MqtqaKAF74jyciWxKyPIO0NaZyI4wMVI9XCt+tMXIj4=
Subject key identifier: 10:3C:CF:05:77:D8:EF:4F:1E:D1:FB:14:38:89:6C:59:DC:9A:C5:D4
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0186FC9325C38A854678047231B8A9BBA2CF
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/EDzPBXfY708e0fsUOIlsWdyaxdQ.roa
Signing time: Mon 20 Mar 2023 01:12:27 +0000
ROA not before: Mon 20 Mar 2023 01:12:27 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:fc:93:25:c3:8a:85:46:78:04:72:31:b8:a9:bb:a2:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Mar 20 01:12:27 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=103ccf0577d8ef4f1ed1fb1438896c59dc9ac5d4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:9b:7d:e5:63:91:50:67:49:6c:95:b5:5e:85:
07:e0:25:75:0b:82:3e:83:89:38:a1:29:e2:7a:0d:
b0:6b:13:f9:4a:bd:e1:ed:80:30:a7:d7:b6:a9:db:
e1:29:46:de:18:d9:40:1a:b9:67:62:80:90:e8:f8:
f5:e4:04:36:1f:1b:10:56:d9:c2:40:0e:53:c4:45:
6d:b4:86:eb:a7:83:af:78:f4:24:48:0f:bc:df:33:
61:07:05:68:58:74:6e:de:79:d9:64:82:53:6c:a3:
6e:be:37:c6:4f:9e:cb:7d:50:0b:eb:b0:24:00:5c:
ad:e8:20:d6:e9:de:82:8e:e6:01:d8:6a:33:e2:01:
90:80:3a:49:4f:a1:c8:d0:62:e1:30:86:ae:2e:2c:
0f:b9:3f:16:99:f4:64:2c:73:14:2a:20:b0:df:cc:
22:c9:8a:7f:c0:4f:62:03:0f:00:4b:79:b4:4f:80:
23:54:04:b8:d7:b8:db:79:93:ba:60:ce:bb:9b:62:
ea:b8:77:84:1a:f4:ee:c6:1b:1c:e0:db:3a:bf:82:
62:da:8d:b4:53:34:1a:d4:7d:9b:8f:a6:72:f0:3a:
4c:18:ea:10:a0:ed:bd:aa:7f:1b:8f:9f:f3:89:01:
99:28:35:a1:01:00:b5:43:72:e3:df:0a:7a:24:7c:
83:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:3C:CF:05:77:D8:EF:4F:1E:D1:FB:14:38:89:6C:59:DC:9A:C5:D4
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/EDzPBXfY708e0fsUOIlsWdyaxdQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
63:9e:40:af:0d:bb:d1:eb:a5:c8:96:8b:d5:b2:dd:60:e7:27:
6c:a1:7c:6c:c1:43:1a:88:c1:47:69:e2:c3:ed:76:a3:1f:89:
1b:8f:51:27:49:1f:78:3a:0d:4d:ab:75:a7:fb:ef:ce:a8:af:
50:92:34:4b:00:f2:f2:cf:b7:bb:7a:2d:04:48:77:65:4a:d0:
8f:bc:d2:ec:e6:1d:37:eb:3f:53:a8:20:58:68:66:4d:6b:7e:
92:34:59:dc:3e:63:e7:e3:01:62:0f:d9:73:c2:20:27:8b:05:
51:cb:47:62:eb:24:d8:fc:27:66:85:10:1f:8b:19:34:f3:1e:
f3:5b:9e:e6:8a:bf:ed:e0:18:72:d2:3b:d6:63:a9:83:b9:8e:
79:fa:13:82:ae:4c:9b:0f:70:f5:61:6d:fc:8d:d5:0c:9c:40:
b0:e9:f8:3c:a9:15:0a:89:ea:9c:d0:ec:9b:29:bd:99:49:a2:
a5:4c:df:50:28:93:ce:56:7f:74:42:43:0d:04:44:d1:a0:0d:
a7:69:2f:a2:08:e5:65:66:d2:10:9e:0f:3c:a2:b1:41:13:30:
89:86:4d:12:a5:4e:99:21:fa:ac:97:60:2d:6b:f1:6c:12:85:
6d:31:db:b6:bf:b6:88:ad:ec:78:93:12:e1:29:33:de:bf:fb:
fa:d8:3e:02
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYb8kyXDioVGeARyMbipu6LPMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcyMDQ3YmUxNWIyNzU5MDJkY2Y2MTdkYzNkMGUxNmRjMWYz
MDgwMjIwHhcNMjMwMzIwMDExMjI3WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxMDNjY2YwNTc3ZDhlZjRmMWVkMWZiMTQzODg5NmM1OWRjOWFjNWQ0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAppt95WORUGdJbJW1XoUH4CV1C4I+
g4k4oSnieg2waxP5Sr3h7YAwp9e2qdvhKUbeGNlAGrlnYoCQ6Pj15AQ2HxsQVtnC
QA5TxEVttIbrp4OvePQkSA+83zNhBwVoWHRu3nnZZIJTbKNuvjfGT57LfVAL67Ak
AFyt6CDW6d6CjuYB2Goz4gGQgDpJT6HI0GLhMIauLiwPuT8WmfRkLHMUKiCw38wi
yYp/wE9iAw8AS3m0T4AjVAS417jbeZO6YM67m2LquHeEGvTuxhsc4Ns6v4Ji2o20
UzQa1H2bj6Zy8DpMGOoQoO29qn8bj5/ziQGZKDWhAQC1Q3Lj3wp6JHyDdwIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFBA8zwV32O9PHtH7FDiJbFncmsXUMB8GA1UdIwQY
MBaAFHIEe+FbJ1kC3PYX3D0OFtwfMIAiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMt
MWFiZTNhYzEwYWE2LzEvRUR6UEJYZlk3MDhlMGZzVU9JbHNXZHlheGRRLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMtMWFiZTNhYzEwYWE2
LzEvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBAGOeQK8Nu9HrpciWi9Wy
3WDnJ2yhfGzBQxqIwUdp4sPtdqMfiRuPUSdJH3g6DU2rdaf7786or1CSNEsA8vLP
t7t6LQRId2VK0I+80uzmHTfrP1OoIFhoZk1rfpI0Wdw+Y+fjAWIP2XPCICeLBVHL
R2LrJNj8J2aFEB+LGTTzHvNbnuaKv+3gGHLSO9ZjqYO5jnn6E4KuTJsPcPVhbfyN
1QycQLDp+DypFQqJ6pzQ7JspvZlJoqVM31Aok85Wf3RCQw0ERNGgDadpL6II5WVm
0hCeDzyisUETMImGTRKlTpkh+qyXYC1r8WwShW0x27a/toit7HiTEuEpM96/+/rY
PgI=
-----END CERTIFICATE-----
Generated at Thu May 1 06:01:16 2025 by rpki-client