Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/EwVgAUxG-DHZKvRo6wyd6suWHxw.roa
File: EwVgAUxG-DHZKvRo6wyd6suWHxw.roa (raw, json)
Hash identifier: dIKrauS121OKt9bAh4sC9PBvaw9a5LLt415x+/VyvvA=
Subject key identifier: 13:05:60:01:4C:46:F8:31:D9:2A:F4:68:EB:0C:9D:EA:CB:96:1F:1C
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0189E8CF2C80F3919AD3F5D3E75210AFB367
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/EwVgAUxG-DHZKvRo6wyd6suWHxw.roa
Signing time: Sat 12 Aug 2023 08:13:58 +0000
ROA not before: Sat 12 Aug 2023 08:13:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:188:7858:a003/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:189:a0e4:5c7d/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:e8:cf:2c:80:f3:91:9a:d3:f5:d3:e7:52:10:af:b3:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Aug 12 08:13:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=130560014c46f831d92af468eb0c9deacb961f1c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:a5:39:49:3f:bd:5b:72:42:7d:ae:6b:c6:7f:
2e:35:46:f6:29:44:01:22:16:84:12:be:7e:21:fd:
60:1c:1f:58:06:b2:c3:ea:83:45:39:f5:4c:bd:8c:
52:3b:6e:1d:35:63:52:7f:62:33:d2:57:c9:46:ba:
ef:20:ff:97:41:f0:d2:e8:df:09:50:35:94:e9:0d:
2a:10:eb:f8:96:1a:60:5e:7f:5c:db:e1:a9:7d:00:
c8:43:cc:a0:d4:b8:bb:82:26:be:52:71:05:62:b7:
c9:dd:0b:79:75:9c:91:f3:b5:38:9c:fd:a3:15:d8:
eb:10:90:fd:4f:e6:02:fa:3e:a0:6e:ed:a2:40:e6:
a8:18:f1:59:ef:67:ef:99:32:58:61:2b:56:d4:25:
44:9e:5e:e3:f4:68:3e:c2:32:3c:7e:c5:d8:6c:c1:
bf:9f:bd:3c:75:8a:12:89:98:7e:ff:04:04:79:75:
b1:99:71:de:e7:70:39:63:7d:5c:13:56:9b:22:1f:
66:8f:f0:23:59:d1:ce:c3:a5:eb:2e:c7:ce:24:c7:
4e:68:fc:ef:0a:d3:50:55:b2:29:66:17:d6:ff:d7:
87:53:f0:b7:70:81:32:d9:34:bb:b6:96:2f:2a:1d:
e6:ea:55:91:06:86:af:65:0c:79:1e:16:5c:47:0d:
62:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:05:60:01:4C:46:F8:31:D9:2A:F4:68:EB:0C:9D:EA:CB:96:1F:1C
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/EwVgAUxG-DHZKvRo6wyd6suWHxw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
55:23:06:8d:20:11:8b:92:f3:81:60:6b:e7:66:8b:ad:f6:9a:
64:0c:78:c2:7c:a1:3b:57:26:1f:3f:57:34:16:29:83:36:c4:
40:f4:63:ab:5e:27:b5:f4:c2:19:48:2b:f8:28:60:85:4e:19:
46:7c:d1:70:35:9a:24:3c:e4:7c:2c:d0:a9:d0:c3:6d:de:c0:
fe:57:27:23:f9:a3:21:ba:6e:00:01:d3:c5:41:c7:e1:53:6e:
a3:8a:74:39:f5:4a:b7:e7:4d:b4:d4:5e:88:87:69:a7:f8:d8:
a4:f9:8f:78:07:12:d4:d8:4d:16:15:75:40:d5:e4:3d:ba:00:
34:db:bb:ca:c8:b9:af:83:de:7f:a3:5d:17:bc:cd:80:1c:52:
14:e2:0a:31:59:62:dd:89:85:4d:d3:58:83:fa:53:65:6b:08:
e0:d0:b3:7a:b4:4d:7e:42:e8:fa:51:1b:f4:e9:95:64:4c:a8:
02:93:20:70:28:81:4f:1e:d7:d6:db:22:e8:59:66:2b:03:a6:
5a:f3:41:fd:b9:a5:03:ac:f1:8d:6d:4c:2c:ad:a4:46:90:fc:
a8:c2:c2:48:a1:c4:a1:fd:bb:0b:78:73:1c:40:55:ee:fb:0d:
63:dc:af:86:7a:63:cf:01:b5:f3:13:6a:55:7c:b5:4c:7e:43:
7a:0b:47:99
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYnozyyA85Ga0/XT51IQr7NnMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcyMDQ3YmUxNWIyNzU5MDJkY2Y2MTdkYzNkMGUxNmRjMWYz
MDgwMjIwHhcNMjMwODEyMDgxMzU4WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxMzA1NjAwMTRjNDZmODMxZDkyYWY0NjhlYjBjOWRlYWNiOTYxZjFjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArqU5ST+9W3JCfa5rxn8uNUb2KUQB
IhaEEr5+If1gHB9YBrLD6oNFOfVMvYxSO24dNWNSf2Iz0lfJRrrvIP+XQfDS6N8J
UDWU6Q0qEOv4lhpgXn9c2+GpfQDIQ8yg1Li7gia+UnEFYrfJ3Qt5dZyR87U4nP2j
FdjrEJD9T+YC+j6gbu2iQOaoGPFZ72fvmTJYYStW1CVEnl7j9Gg+wjI8fsXYbMG/
n708dYoSiZh+/wQEeXWxmXHe53A5Y31cE1abIh9mj/AjWdHOw6XrLsfOJMdOaPzv
CtNQVbIpZhfW/9eHU/C3cIEy2TS7tpYvKh3m6lWRBoavZQx5HhZcRw1idQIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFBMFYAFMRvgx2Sr0aOsMnerLlh8cMB8GA1UdIwQY
MBaAFHIEe+FbJ1kC3PYX3D0OFtwfMIAiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMt
MWFiZTNhYzEwYWE2LzEvRXdWZ0FVeEctREhaS3ZSbzZ3eWQ2c3VXSHh3LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMtMWFiZTNhYzEwYWE2
LzEvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBAFUjBo0gEYuS84Fga+dm
i632mmQMeMJ8oTtXJh8/VzQWKYM2xED0Y6teJ7X0whlIK/goYIVOGUZ80XA1miQ8
5Hws0KnQw23ewP5XJyP5oyG6bgAB08VBx+FTbqOKdDn1SrfnTbTUXoiHaaf42KT5
j3gHEtTYTRYVdUDV5D26ADTbu8rIua+D3n+jXRe8zYAcUhTiCjFZYt2JhU3TWIP6
U2VrCODQs3q0TX5C6PpRG/TplWRMqAKTIHAogU8e19bbIuhZZisDplrzQf25pQOs
8Y1tTCytpEaQ/KjCwkihxKH9uwt4cxxAVe77DWPcr4Z6Y88BtfMTalV8tUx+Q3oL
R5k=
-----END CERTIFICATE-----
Generated at Fri May 2 00:08:17 2025 by rpki-client