Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/Enr1SyFL6r1cpCVZlYG38Kvn6HU.roa
File: Enr1SyFL6r1cpCVZlYG38Kvn6HU.roa (raw, json)
Hash identifier: tizcbmB7DedHewlX9jI7e5A5YAnarRZi41C+ofYy+3w=
Subject key identifier: 12:7A:F5:4B:21:4B:EA:BD:5C:A4:25:59:95:81:B7:F0:AB:E7:E8:75
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 01854DB4A426402D8628133913BB968C9919
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/Enr1SyFL6r1cpCVZlYG38Kvn6HU.roa
Signing time: Mon 26 Dec 2022 09:12:42 +0000
ROA not before: Mon 26 Dec 2022 09:12:42 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:185:3dcc:d8f/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:4d:b4:a4:26:40:2d:86:28:13:39:13:bb:96:8c:99:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Dec 26 09:12:42 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=127af54b214beabd5ca425599581b7f0abe7e875
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:9b:29:c2:b4:31:c0:73:7c:0c:93:47:9c:7d:
b7:f0:26:8b:9e:c3:bf:70:a3:13:64:ab:29:b5:ed:
b7:df:07:e5:df:32:d6:99:08:93:ee:74:e2:82:d7:
b6:1b:01:52:0e:01:91:cc:05:ad:a3:eb:cf:57:3b:
65:50:c6:b2:98:00:b4:52:60:8c:e1:ff:56:e5:77:
2f:a2:e3:5b:48:78:13:69:bb:0a:ff:3b:cd:72:d5:
65:cc:7f:c1:7e:00:df:dd:9e:66:95:e4:f3:52:31:
4e:3f:59:92:77:43:1f:4c:a5:dc:fe:75:6f:82:9d:
2f:0e:77:58:ee:50:a7:33:1e:89:3b:42:ff:20:e2:
6a:85:d3:ec:5a:20:e4:db:aa:5b:1f:d9:4c:01:b4:
84:72:89:1c:2e:6f:03:30:ce:b5:11:0b:3c:92:c3:
f2:54:cf:4d:88:d6:42:5b:6c:a9:94:15:98:c5:93:
4a:d0:3b:24:83:72:00:03:d2:51:ea:02:0c:18:c5:
04:b4:bd:fe:9e:6d:1e:79:28:d1:ea:1f:29:3f:36:
c6:03:d0:69:5e:f5:7d:d3:53:7a:93:b8:0f:1e:41:
56:0c:8b:06:93:20:2c:26:6a:f0:b0:a1:62:7f:a7:
33:00:90:10:11:b4:29:13:2f:83:1c:c9:1e:87:df:
a6:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:7A:F5:4B:21:4B:EA:BD:5C:A4:25:59:95:81:B7:F0:AB:E7:E8:75
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/Enr1SyFL6r1cpCVZlYG38Kvn6HU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
03:4f:64:a8:91:b2:fd:85:8e:bf:82:b5:8a:25:d6:ec:b6:aa:
59:c7:bb:94:16:c1:b5:1e:79:6a:c9:74:50:4b:43:fc:36:56:
07:36:49:d5:6a:78:18:ec:5e:aa:54:e8:e9:14:41:43:8c:a9:
df:c4:be:35:db:6e:70:f1:73:3c:9b:df:8e:c4:f0:00:59:81:
86:e7:67:7d:74:47:18:f3:77:ef:92:f1:3e:c4:04:d4:0c:73:
21:03:51:c0:55:01:fc:13:d1:69:02:ab:8f:c4:e9:9e:10:2b:
60:f1:ad:ac:a9:a6:5a:d9:dc:83:bc:f3:6b:4c:8f:d8:d9:13:
9e:e2:0c:ce:95:d5:3b:4f:b4:79:c5:b2:4c:4d:28:b9:dd:13:
0c:d8:5c:6c:28:88:3e:8e:c8:28:37:fa:80:c6:90:03:37:a8:
09:19:5a:f1:de:52:72:fa:66:91:6e:f7:a7:01:3f:10:86:24:
c2:ab:7d:37:30:72:11:f5:fc:e1:96:d2:3e:2d:92:cc:70:55:
83:e1:c6:7f:f1:be:73:17:15:f6:67:4e:97:9a:1f:7e:5a:9d:
90:29:60:79:c7:17:2b:58:7f:55:8e:e6:97:59:a9:36:ad:28:
28:c9:6a:1a:b6:ae:25:fd:a5:2b:b9:45:40:1b:07:08:59:94:
ad:97:e0:ff
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYVNtKQmQC2GKBM5E7uWjJkZMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcyMDQ3YmUxNWIyNzU5MDJkY2Y2MTdkYzNkMGUxNmRjMWYz
MDgwMjIwHhcNMjIxMjI2MDkxMjQyWhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxMjdhZjU0YjIxNGJlYWJkNWNhNDI1NTk5NTgxYjdmMGFiZTdlODc1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxpspwrQxwHN8DJNHnH238CaLnsO/
cKMTZKspte233wfl3zLWmQiT7nTigte2GwFSDgGRzAWto+vPVztlUMaymAC0UmCM
4f9W5XcvouNbSHgTabsK/zvNctVlzH/BfgDf3Z5mleTzUjFOP1mSd0MfTKXc/nVv
gp0vDndY7lCnMx6JO0L/IOJqhdPsWiDk26pbH9lMAbSEcokcLm8DMM61EQs8ksPy
VM9NiNZCW2yplBWYxZNK0Dskg3IAA9JR6gIMGMUEtL3+nm0eeSjR6h8pPzbGA9Bp
XvV901N6k7gPHkFWDIsGkyAsJmrwsKFif6czAJAQEbQpEy+DHMkeh9+maQIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFBJ69UshS+q9XKQlWZWBt/Cr5+h1MB8GA1UdIwQY
MBaAFHIEe+FbJ1kC3PYX3D0OFtwfMIAiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMt
MWFiZTNhYzEwYWE2LzEvRW5yMVN5Rkw2cjFjcENWWmxZRzM4S3ZuNkhVLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMtMWFiZTNhYzEwYWE2
LzEvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBAANPZKiRsv2Fjr+CtYol
1uy2qlnHu5QWwbUeeWrJdFBLQ/w2Vgc2SdVqeBjsXqpU6OkUQUOMqd/EvjXbbnDx
czyb347E8ABZgYbnZ310Rxjzd++S8T7EBNQMcyEDUcBVAfwT0WkCq4/E6Z4QK2Dx
raypplrZ3IO882tMj9jZE57iDM6V1TtPtHnFskxNKLndEwzYXGwoiD6OyCg3+oDG
kAM3qAkZWvHeUnL6ZpFu96cBPxCGJMKrfTcwchH1/OGW0j4tksxwVYPhxn/xvnMX
FfZnTpeaH35anZApYHnHFytYf1WO5pdZqTatKCjJahq2riX9pSu5RUAbBwhZlK2X
4P8=
-----END CERTIFICATE-----
Generated at Fri May 2 09:11:07 2025 by rpki-client