Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/EXpJgUFY7T7R7VqZjkN4WsVNheo.roa
File: EXpJgUFY7T7R7VqZjkN4WsVNheo.roa (raw, json)
Hash identifier: tzUXoUdpD29YIMX/EdIvYPxNqnsZ9vn39S9moqQ0dps=
Subject key identifier: 11:7A:49:81:41:58:ED:3E:D1:ED:5A:99:8E:43:78:5A:C5:4D:85:EA
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0186616BC1EA7D2C6A1BF3050859C0297B6D
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/EXpJgUFY7T7R7VqZjkN4WsVNheo.roa
Signing time: Fri 17 Feb 2023 22:08:17 +0000
ROA not before: Fri 17 Feb 2023 22:08:17 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:61:6b:c1:ea:7d:2c:6a:1b:f3:05:08:59:c0:29:7b:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Feb 17 22:08:17 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=117a49814158ed3ed1ed5a998e43785ac54d85ea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:c1:de:44:0a:ee:3c:8e:95:f8:56:ec:20:17:
5b:16:a0:c8:30:64:87:dd:8b:cf:ba:ee:5d:76:df:
41:48:46:2f:76:a7:c7:8c:30:c2:47:e0:50:f5:37:
7c:d0:43:e8:ae:2d:5b:56:a1:dc:2c:00:20:96:7c:
34:21:9e:94:fc:5b:8c:53:c2:1e:7d:10:2b:aa:14:
be:79:6e:a5:6e:6e:35:c4:90:21:c4:f5:a9:0d:d2:
99:ee:56:c3:42:dd:30:e4:ff:57:f5:10:3e:04:b7:
20:a3:7f:29:c9:f1:d8:3d:2d:56:5c:18:36:3b:f4:
dc:97:ec:6c:d8:88:57:b5:24:db:4d:50:ad:59:57:
5e:8f:9a:c5:0a:6d:2c:b7:34:1b:22:ee:0d:b2:46:
1a:69:b1:29:41:04:d8:5b:9c:41:41:ac:7f:c9:20:
9e:9a:17:f8:14:ed:8a:41:1c:eb:06:ea:c3:90:74:
08:95:e2:0d:40:95:ee:5a:eb:d2:f7:8c:6f:63:d2:
54:bb:4a:2d:d9:3c:2f:8e:e9:39:3b:f4:30:b4:e5:
47:84:ab:e1:14:bd:9e:a0:20:d8:3d:02:63:e8:8d:
cb:99:08:29:c8:ac:d4:68:09:93:24:e2:ea:9d:dc:
92:ba:e9:eb:f3:6c:06:1b:a5:ef:49:04:4b:15:f4:
fb:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:7A:49:81:41:58:ED:3E:D1:ED:5A:99:8E:43:78:5A:C5:4D:85:EA
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/EXpJgUFY7T7R7VqZjkN4WsVNheo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
02:eb:64:03:38:61:c8:9e:d4:2f:80:9d:3c:4a:1a:7d:f8:37:
cf:05:d7:e4:c6:8b:54:76:02:de:d0:f2:45:6a:81:ab:a3:17:
e0:25:02:b6:f8:68:d1:c7:b6:2d:39:66:83:03:7a:1c:ef:05:
f7:33:22:b6:8b:97:f4:74:2f:35:7f:d1:a7:63:a3:71:5a:da:
dd:db:b8:14:28:75:55:71:1d:8d:00:43:df:3f:29:38:28:60:
89:5f:9b:80:4a:7a:b4:a9:8f:82:4a:6d:ef:9c:dd:f2:5b:5a:
46:52:54:32:de:fe:d2:32:36:38:f5:bd:96:a6:9b:b4:a4:5a:
09:d7:1f:da:97:cf:28:d7:e2:f2:ba:90:d7:b2:5f:ed:c5:d4:
96:91:a2:f6:b5:f5:8c:f3:14:8a:b2:ca:f7:6d:ee:8f:65:1e:
4a:67:fe:8b:e4:ab:03:7c:40:92:5a:b0:3f:19:00:76:08:c8:
e5:05:28:69:89:b4:8f:2a:1b:e6:9b:f4:92:72:d9:ad:b3:6b:
a8:85:4d:d4:05:bc:54:62:a1:e1:6c:27:95:31:37:72:e5:ad:
7c:6a:73:19:f8:00:ef:ab:99:69:24:16:92:c2:b4:94:62:65:
46:78:ee:f0:f5:28:db:da:b0:f4:47:ed:44:ac:75:0c:14:b4:
cb:41:ff:82
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYZha8HqfSxqG/MFCFnAKXttMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcyMDQ3YmUxNWIyNzU5MDJkY2Y2MTdkYzNkMGUxNmRjMWYz
MDgwMjIwHhcNMjMwMjE3MjIwODE3WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxMTdhNDk4MTQxNThlZDNlZDFlZDVhOTk4ZTQzNzg1YWM1NGQ4NWVhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAisHeRAruPI6V+FbsIBdbFqDIMGSH
3YvPuu5ddt9BSEYvdqfHjDDCR+BQ9Td80EPori1bVqHcLAAglnw0IZ6U/FuMU8Ie
fRArqhS+eW6lbm41xJAhxPWpDdKZ7lbDQt0w5P9X9RA+BLcgo38pyfHYPS1WXBg2
O/Tcl+xs2IhXtSTbTVCtWVdej5rFCm0stzQbIu4NskYaabEpQQTYW5xBQax/ySCe
mhf4FO2KQRzrBurDkHQIleINQJXuWuvS94xvY9JUu0ot2Twvjuk5O/QwtOVHhKvh
FL2eoCDYPQJj6I3LmQgpyKzUaAmTJOLqndySuunr82wGG6XvSQRLFfT7sQIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFBF6SYFBWO0+0e1amY5DeFrFTYXqMB8GA1UdIwQY
MBaAFHIEe+FbJ1kC3PYX3D0OFtwfMIAiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMt
MWFiZTNhYzEwYWE2LzEvRVhwSmdVRlk3VDdSN1ZxWmprTjRXc1ZOaGVvLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMtMWFiZTNhYzEwYWE2
LzEvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBAALrZAM4Ycie1C+AnTxK
Gn34N88F1+TGi1R2At7Q8kVqgaujF+AlArb4aNHHti05ZoMDehzvBfczIraLl/R0
LzV/0adjo3Fa2t3buBQodVVxHY0AQ98/KTgoYIlfm4BKerSpj4JKbe+c3fJbWkZS
VDLe/tIyNjj1vZamm7SkWgnXH9qXzyjX4vK6kNeyX+3F1JaRova19YzzFIqyyvdt
7o9lHkpn/ovkqwN8QJJasD8ZAHYIyOUFKGmJtI8qG+ab9JJy2a2za6iFTdQFvFRi
oeFsJ5UxN3LlrXxqcxn4AO+rmWkkFpLCtJRiZUZ47vD1KNvasPRH7USsdQwUtMtB
/4I=
-----END CERTIFICATE-----
Generated at Wed Apr 30 17:35:52 2025 by rpki-client