Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/ELIiuMPc7j8HXsIsu5TYDXSxR1M.roa
File: ELIiuMPc7j8HXsIsu5TYDXSxR1M.roa (raw, json)
Hash identifier: YSHGi3TIiMT56molZHdrEUHQDFTuzvE/8r6brJG0+ZE=
Subject key identifier: 10:B2:22:B8:C3:DC:EE:3F:07:5E:C2:2C:BB:94:D8:0D:74:B1:47:53
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0182C0C115C7D13DDAF5B2E8DA1DB9432C9C
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/ELIiuMPc7j8HXsIsu5TYDXSxR1M.roa
Signing time: Sun 21 Aug 2022 14:14:15 +0000
ROA not before: Sun 21 Aug 2022 14:14:15 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:182:3f1d:a803/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:182:7cb2:99d4/128 maxlen: 128
2001:67c:64:ffff:0:182:383f:6b78/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:c0:c1:15:c7:d1:3d:da:f5:b2:e8:da:1d:b9:43:2c:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Aug 21 14:14:15 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=10b222b8c3dcee3f075ec22cbb94d80d74b14753
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:e4:b5:ab:2b:f8:47:3b:4d:87:d5:1e:61:32:
6d:2c:3b:cb:1a:c6:f3:36:d5:60:f8:4b:4b:37:30:
f9:17:e1:5b:3b:65:4f:f4:10:f6:c9:f4:f5:84:65:
2d:06:0d:bb:ac:44:40:2e:df:39:c4:42:19:3f:49:
39:13:59:ee:c0:e7:7d:d2:6c:75:68:e6:81:15:cd:
2a:17:d8:51:01:5e:ce:40:b6:e2:87:19:42:ba:ce:
38:af:04:c0:38:ce:1a:44:c1:05:34:62:2b:2f:c5:
7b:a7:fc:8d:d0:07:f2:39:d9:80:f8:29:df:18:c9:
c9:c4:35:7a:6e:b0:1f:fa:1b:f5:5d:be:d4:72:af:
e1:9b:9a:c5:81:cf:d9:09:d0:30:ee:f1:42:c2:a8:
60:9a:4c:84:68:f0:2c:2b:42:00:50:66:83:5d:ad:
66:bd:a3:c2:df:f8:de:b6:ed:69:3b:65:37:94:9d:
33:ec:d7:95:82:87:9a:33:9d:5e:40:40:30:fb:cd:
27:87:b2:d2:16:96:a7:91:16:3c:63:4e:06:ad:36:
1f:6f:a2:c7:88:2c:29:c2:af:be:9e:9c:0f:82:3d:
0c:97:72:e3:ff:ef:c2:d2:a0:9f:3d:65:12:dd:1b:
50:93:41:ee:9a:a9:5f:bd:21:a2:6d:40:41:dc:0c:
4d:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:B2:22:B8:C3:DC:EE:3F:07:5E:C2:2C:BB:94:D8:0D:74:B1:47:53
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/ELIiuMPc7j8HXsIsu5TYDXSxR1M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
25:d2:cd:1d:8d:24:e0:39:f4:6b:ef:c4:57:2f:6e:9b:dd:27:
ec:62:ad:87:e5:90:65:d4:38:b2:1d:f5:61:53:0a:ba:88:68:
8b:e4:18:ee:3b:3c:0a:47:f4:dd:71:99:9e:cf:bf:70:2f:cb:
ba:4c:60:70:d8:08:b3:25:9a:76:9b:7e:c2:ce:4b:e3:ea:34:
bf:9f:97:ba:95:95:78:9a:b4:28:35:03:b2:51:23:c5:09:b8:
9e:2e:2d:b0:2d:60:67:ed:90:30:5a:30:16:23:3b:3b:7e:06:
92:d2:a1:2d:93:dd:92:39:bc:90:80:bf:98:0d:d3:ff:f2:84:
39:1a:99:f3:4d:9d:73:6d:b9:15:fe:da:ff:10:98:14:2c:dd:
22:ef:5c:11:9e:f5:64:fb:5f:f1:6a:bf:80:de:03:59:2b:22:
c3:c3:77:7d:64:e9:84:1e:e6:19:3b:bf:5c:91:1c:5d:78:56:
bd:8d:61:37:b7:9b:4e:b8:ca:2e:c0:56:64:3d:5d:13:9f:64:
02:51:58:30:13:58:69:be:9b:9f:cd:1b:68:e9:82:43:0b:00:
9e:63:e9:79:b6:88:ec:f7:6f:24:2a:f0:0d:78:69:c6:31:4c:
29:69:24:64:e2:b4:bd:ee:3c:bc:86:ec:5c:90:5c:13:2a:ea:
5b:bb:d6:9d
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYLAwRXH0T3a9bLo2h25QyycMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcyMDQ3YmUxNWIyNzU5MDJkY2Y2MTdkYzNkMGUxNmRjMWYz
MDgwMjIwHhcNMjIwODIxMTQxNDE1WhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxMGIyMjJiOGMzZGNlZTNmMDc1ZWMyMmNiYjk0ZDgwZDc0YjE0NzUzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkuS1qyv4RztNh9UeYTJtLDvLGsbz
NtVg+EtLNzD5F+FbO2VP9BD2yfT1hGUtBg27rERALt85xEIZP0k5E1nuwOd90mx1
aOaBFc0qF9hRAV7OQLbihxlCus44rwTAOM4aRMEFNGIrL8V7p/yN0AfyOdmA+Cnf
GMnJxDV6brAf+hv1Xb7Ucq/hm5rFgc/ZCdAw7vFCwqhgmkyEaPAsK0IAUGaDXa1m
vaPC3/jetu1pO2U3lJ0z7NeVgoeaM51eQEAw+80nh7LSFpankRY8Y04GrTYfb6LH
iCwpwq++npwPgj0Ml3Lj/+/C0qCfPWUS3RtQk0HumqlfvSGibUBB3AxNowIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFBCyIrjD3O4/B17CLLuU2A10sUdTMB8GA1UdIwQY
MBaAFHIEe+FbJ1kC3PYX3D0OFtwfMIAiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMt
MWFiZTNhYzEwYWE2LzEvRUxJaXVNUGM3ajhIWHNJc3U1VFlEWFN4UjFNLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMtMWFiZTNhYzEwYWE2
LzEvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBACXSzR2NJOA59GvvxFcv
bpvdJ+xirYflkGXUOLId9WFTCrqIaIvkGO47PApH9N1xmZ7Pv3Avy7pMYHDYCLMl
mnabfsLOS+PqNL+fl7qVlXiatCg1A7JRI8UJuJ4uLbAtYGftkDBaMBYjOzt+BpLS
oS2T3ZI5vJCAv5gN0//yhDkamfNNnXNtuRX+2v8QmBQs3SLvXBGe9WT7X/Fqv4De
A1krIsPDd31k6YQe5hk7v1yRHF14Vr2NYTe3m064yi7AVmQ9XROfZAJRWDATWGm+
m5/NG2jpgkMLAJ5j6Xm2iOz3byQq8A14acYxTClpJGTitL3uPLyG7FyQXBMq6lu7
1p0=
-----END CERTIFICATE-----
Generated at Wed Apr 30 17:35:56 2025 by rpki-client