Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/EVqflNPi85xIM_YMbC_FQS_6Llg.roa
File: EVqflNPi85xIM_YMbC_FQS_6Llg.roa (raw, json)
Hash identifier: ELT2mXz8ZBHvnNomiMTWeKd/LQ6TBBQStkex7qcYdVk=
Subject key identifier: 11:5A:9F:94:D3:E2:F3:9C:48:33:F6:0C:6C:2F:C5:41:2F:FA:2E:58
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 018A2CA5365F380BCBE7738396B5DB65B91B
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/EVqflNPi85xIM_YMbC_FQS_6Llg.roa
Signing time: Fri 25 Aug 2023 12:22:19 +0000
ROA not before: Fri 25 Aug 2023 12:22:19 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:2c:a5:36:5f:38:0b:cb:e7:73:83:96:b5:db:65:b9:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Aug 25 12:22:19 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=115a9f94d3e2f39c4833f60c6c2fc5412ffa2e58
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:23:05:1c:af:f6:50:47:02:52:65:0a:a5:1c:
bb:ef:98:88:13:59:06:8a:75:91:e6:9a:6d:bf:95:
84:66:0c:29:91:73:76:74:20:7e:bf:8c:2a:1c:c3:
b3:d9:2a:2d:e8:86:a9:cf:0e:f8:c0:16:fd:36:98:
dc:42:65:8f:4e:42:e6:0b:a0:fb:31:f4:6e:bb:d4:
46:cf:80:dc:bd:f0:35:2f:bb:10:2d:a1:9f:a5:8a:
12:b1:39:51:ea:b6:14:fc:78:e5:a1:11:09:aa:c8:
fb:3f:1b:52:2e:23:3d:6a:1a:01:bc:91:24:33:25:
f0:a0:ce:63:4c:0b:b8:30:bf:7b:b0:1b:75:11:de:
31:dd:d8:21:1d:9b:e2:ae:8b:7e:50:d8:35:ad:a8:
e6:23:97:8a:f3:6e:0a:8a:3d:74:6a:71:4d:b1:39:
b3:e0:b5:b4:fc:06:ce:80:5c:cf:bb:d9:11:dd:38:
16:03:ac:d1:9e:f3:35:2b:75:6d:d6:0e:db:e5:17:
e2:39:73:af:74:77:c3:6a:79:1f:a3:7d:56:dd:d9:
22:a4:07:9c:6a:25:3e:99:04:69:2d:98:03:96:a4:
d6:be:42:47:de:a4:84:99:19:a4:db:b6:95:ea:b4:
48:f5:d7:48:7a:51:61:de:4e:c1:60:e7:b8:8f:15:
67:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:5A:9F:94:D3:E2:F3:9C:48:33:F6:0C:6C:2F:C5:41:2F:FA:2E:58
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/EVqflNPi85xIM_YMbC_FQS_6Llg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
32:f1:46:6b:4e:a2:e4:04:e2:e3:33:3b:a6:ff:92:53:87:a2:
a2:01:53:ba:ad:15:e4:bb:51:c1:f5:8f:aa:4f:a1:43:67:b9:
bd:d2:97:4a:6b:48:ba:24:2e:f0:0d:8f:50:64:86:b7:20:28:
cb:a1:66:6d:47:31:43:93:c1:b4:90:b2:ec:3b:19:27:39:42:
cd:d7:5f:29:64:3e:85:b9:c7:65:2d:ca:37:d0:4c:e1:ee:46:
05:cb:cd:1b:98:4e:b0:8c:39:42:bb:93:fc:d5:a2:e2:ce:5f:
ae:a6:df:5a:25:61:6d:e3:18:bc:8c:92:bc:d9:55:8f:28:de:
ff:fb:82:91:78:8b:72:2f:ee:64:75:ad:98:3c:b2:fc:03:a0:
08:f3:62:71:84:7d:dc:56:c1:1b:8e:cc:1e:24:21:76:bd:40:
9c:fa:0e:fc:e2:50:de:8e:82:8c:4a:73:bd:5c:19:c0:a0:c8:
5b:15:c3:34:f5:0e:a2:7c:18:a9:4a:75:42:ec:3f:f2:a3:ac:
c6:75:ed:58:82:60:de:dc:57:42:51:2c:85:cd:c7:63:81:e0:
66:1e:f6:f1:f5:6d:f2:af:2b:54:ac:b6:38:6c:46:53:58:b4:
4d:e2:ee:b0:41:61:56:12:8c:0a:12:66:a6:05:e9:c5:02:76:
5b:71:f4:4e
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYospTZfOAvL53ODlrXbZbkbMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcyMDQ3YmUxNWIyNzU5MDJkY2Y2MTdkYzNkMGUxNmRjMWYz
MDgwMjIwHhcNMjMwODI1MTIyMjE5WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxMTVhOWY5NGQzZTJmMzljNDgzM2Y2MGM2YzJmYzU0MTJmZmEyZTU4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAriMFHK/2UEcCUmUKpRy775iIE1kG
inWR5pptv5WEZgwpkXN2dCB+v4wqHMOz2Sot6Iapzw74wBb9NpjcQmWPTkLmC6D7
MfRuu9RGz4DcvfA1L7sQLaGfpYoSsTlR6rYU/HjloREJqsj7PxtSLiM9ahoBvJEk
MyXwoM5jTAu4ML97sBt1Ed4x3dghHZvirot+UNg1rajmI5eK824Kij10anFNsTmz
4LW0/AbOgFzPu9kR3TgWA6zRnvM1K3Vt1g7b5RfiOXOvdHfDankfo31W3dkipAec
aiU+mQRpLZgDlqTWvkJH3qSEmRmk27aV6rRI9ddIelFh3k7BYOe4jxVnYQIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFBFan5TT4vOcSDP2DGwvxUEv+i5YMB8GA1UdIwQY
MBaAFHIEe+FbJ1kC3PYX3D0OFtwfMIAiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMt
MWFiZTNhYzEwYWE2LzEvRVZxZmxOUGk4NXhJTV9ZTWJDX0ZRU182TGxnLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMtMWFiZTNhYzEwYWE2
LzEvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBADLxRmtOouQE4uMzO6b/
klOHoqIBU7qtFeS7UcH1j6pPoUNnub3Sl0prSLokLvANj1BkhrcgKMuhZm1HMUOT
wbSQsuw7GSc5Qs3XXylkPoW5x2UtyjfQTOHuRgXLzRuYTrCMOUK7k/zVouLOX66m
31olYW3jGLyMkrzZVY8o3v/7gpF4i3Iv7mR1rZg8svwDoAjzYnGEfdxWwRuOzB4k
IXa9QJz6DvziUN6OgoxKc71cGcCgyFsVwzT1DqJ8GKlKdULsP/KjrMZ17ViCYN7c
V0JRLIXNx2OB4GYe9vH1bfKvK1SstjhsRlNYtE3i7rBBYVYSjAoSZqYF6cUCdltx
9E4=
-----END CERTIFICATE-----
Generated at Thu May 1 00:10:40 2025 by rpki-client