Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/EfaMqCZTkD8vKkooBtuMQmYCzFQ.roa
File: EfaMqCZTkD8vKkooBtuMQmYCzFQ.roa (raw, json)
Hash identifier: Cv18HzhqnJjJui+Rx3vtn2Uco/lWB5YwPbNZXAG6SA4=
Subject key identifier: 11:F6:8C:A8:26:53:90:3F:2F:2A:4A:28:06:DB:8C:42:66:02:CC:54
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0186FADBB770134A6C2F2EE8C6F2B0D04CC5
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/EfaMqCZTkD8vKkooBtuMQmYCzFQ.roa
Signing time: Sun 19 Mar 2023 17:12:28 +0000
ROA not before: Sun 19 Mar 2023 17:12:28 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:fa:db:b7:70:13:4a:6c:2f:2e:e8:c6:f2:b0:d0:4c:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Mar 19 17:12:28 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=11f68ca82653903f2f2a4a2806db8c426602cc54
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:e6:ef:32:55:5b:ac:0d:1d:0b:4a:72:4f:85:
4f:78:fd:71:de:fb:cf:59:88:8c:43:66:14:70:31:
40:df:e6:f7:48:e4:ff:f4:1f:be:2f:49:23:63:79:
97:00:81:da:9b:00:0a:44:a4:c2:10:f9:12:68:20:
35:ea:f6:87:a7:77:cc:a3:b2:d8:65:58:f1:d9:25:
ff:0b:01:2c:4a:96:19:17:b4:0f:8b:df:3a:c9:88:
df:44:53:15:97:80:98:33:5f:79:4f:2e:2e:75:55:
c4:c5:d6:fd:a6:24:5d:d6:0e:7d:0b:57:26:46:0a:
83:d6:7b:1c:49:5c:54:ad:b3:a6:33:90:a3:44:a6:
51:2c:51:d3:a0:d7:f2:cf:aa:8a:95:31:b9:33:bb:
bc:bf:19:cd:bc:10:d8:8c:c9:88:58:84:23:6a:43:
65:17:bf:9b:07:f2:b6:60:3a:d5:da:dc:ab:71:26:
ef:d3:26:a9:18:d3:c9:7d:7a:b5:b2:3d:6b:4a:8c:
b4:dc:06:cd:bb:b9:6b:70:0e:09:dc:64:a7:2d:a2:
41:bf:b3:34:f0:a8:b9:7f:12:22:73:58:6b:ee:ab:
6d:1c:50:2f:af:c1:72:da:c4:59:5e:01:53:35:b7:
24:37:c6:95:96:6a:cb:02:9c:11:de:d8:9b:7d:f6:
f8:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:F6:8C:A8:26:53:90:3F:2F:2A:4A:28:06:DB:8C:42:66:02:CC:54
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/EfaMqCZTkD8vKkooBtuMQmYCzFQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
38:41:65:7a:bc:f3:36:86:bc:1d:da:78:d5:ee:f0:96:2f:94:
c9:9f:18:fe:ac:00:2c:77:1b:80:63:65:69:a6:81:25:e2:a2:
f6:5a:74:f8:93:ba:f4:73:d3:15:7a:7f:25:8c:74:a8:dd:73:
4c:cd:53:29:ca:98:53:2e:fa:a4:bb:f9:48:1e:1f:14:20:80:
d9:09:99:32:07:30:04:8d:a2:06:ca:1a:3a:aa:3c:7c:77:86:
ec:67:3b:b1:1c:8f:05:e8:c6:00:4d:4e:4e:28:c9:e7:84:f6:
02:c8:94:14:38:ba:d1:17:7e:ec:2a:60:b8:eb:85:7a:91:93:
ce:d5:02:55:23:af:65:9b:0b:9a:db:98:27:d2:44:63:35:06:
f3:17:3a:1b:a1:4e:95:a2:b9:90:ad:f5:bb:12:e8:24:cd:12:
aa:0d:50:05:6d:75:17:0e:79:86:39:13:2d:69:7e:ba:43:05:
90:cd:f8:6c:84:4d:28:25:eb:1a:95:ca:38:90:f7:ac:01:99:
66:0d:8a:fa:1f:ec:fb:6d:5c:02:c5:68:6e:7a:bb:9f:81:04:
29:36:01:cc:8c:f6:8a:40:52:7a:0d:49:4f:36:e4:5a:3f:3f:
d7:7c:5a:14:a9:1c:d7:41:23:a6:64:30:80:32:1d:f7:58:8f:
39:ff:83:33
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYb627dwE0psLy7oxvKw0EzFMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcyMDQ3YmUxNWIyNzU5MDJkY2Y2MTdkYzNkMGUxNmRjMWYz
MDgwMjIwHhcNMjMwMzE5MTcxMjI4WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxMWY2OGNhODI2NTM5MDNmMmYyYTRhMjgwNmRiOGM0MjY2MDJjYzU0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0ObvMlVbrA0dC0pyT4VPeP1x3vvP
WYiMQ2YUcDFA3+b3SOT/9B++L0kjY3mXAIHamwAKRKTCEPkSaCA16vaHp3fMo7LY
ZVjx2SX/CwEsSpYZF7QPi986yYjfRFMVl4CYM195Ty4udVXExdb9piRd1g59C1cm
RgqD1nscSVxUrbOmM5CjRKZRLFHToNfyz6qKlTG5M7u8vxnNvBDYjMmIWIQjakNl
F7+bB/K2YDrV2tyrcSbv0yapGNPJfXq1sj1rSoy03AbNu7lrcA4J3GSnLaJBv7M0
8Ki5fxIic1hr7qttHFAvr8Fy2sRZXgFTNbckN8aVlmrLApwR3tibffb4VQIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFBH2jKgmU5A/LypKKAbbjEJmAsxUMB8GA1UdIwQY
MBaAFHIEe+FbJ1kC3PYX3D0OFtwfMIAiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMt
MWFiZTNhYzEwYWE2LzEvRWZhTXFDWlRrRDh2S2tvb0J0dU1RbVlDekZRLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMtMWFiZTNhYzEwYWE2
LzEvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBADhBZXq88zaGvB3aeNXu
8JYvlMmfGP6sACx3G4BjZWmmgSXiovZadPiTuvRz0xV6fyWMdKjdc0zNUynKmFMu
+qS7+UgeHxQggNkJmTIHMASNogbKGjqqPHx3huxnO7EcjwXoxgBNTk4oyeeE9gLI
lBQ4utEXfuwqYLjrhXqRk87VAlUjr2WbC5rbmCfSRGM1BvMXOhuhTpWiuZCt9bsS
6CTNEqoNUAVtdRcOeYY5Ey1pfrpDBZDN+GyETSgl6xqVyjiQ96wBmWYNivof7Ptt
XALFaG56u5+BBCk2AcyM9opAUnoNSU825Fo/P9d8WhSpHNdBI6ZkMIAyHfdYjzn/
gzM=
-----END CERTIFICATE-----
Generated at Wed Apr 30 20:48:21 2025 by rpki-client