Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/_EHa4YnQXo8MFv5JuDRE1s50qIw.roa
File: _EHa4YnQXo8MFv5JuDRE1s50qIw.roa (raw, json)
Hash identifier: KbwYLmlD64k4PP+/fMpFSW5Cw4dfPLZEy0/oBI3TLNQ=
Subject key identifier: FC:41:DA:E1:89:D0:5E:8F:0C:16:FE:49:B8:34:44:D6:CE:74:A8:8C
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0189917C40BB667E446B7389C4FBB6B65475
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/_EHa4YnQXo8MFv5JuDRE1s50qIw.roa
Signing time: Wed 26 Jul 2023 09:16:26 +0000
ROA not before: Wed 26 Jul 2023 09:16:26 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:188:7858:a003/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:91:7c:40:bb:66:7e:44:6b:73:89:c4:fb:b6:b6:54:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Jul 26 09:16:26 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=fc41dae189d05e8f0c16fe49b83444d6ce74a88c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:4b:b4:29:de:e1:f5:43:d0:a3:42:a9:9f:59:
61:f2:1a:1e:c0:b5:20:1b:d9:7e:89:81:cc:ef:7d:
62:92:70:df:aa:54:e6:39:a0:d5:cf:ac:1a:fa:dc:
74:48:c7:13:bd:8d:0b:c0:f5:2c:c8:ff:6f:4b:66:
27:b2:7b:0d:6d:68:80:6b:84:e7:ce:5f:8c:87:63:
ba:ec:2f:ad:5c:e9:f8:48:fd:e4:f8:34:c3:45:ef:
57:0d:f3:0b:97:06:7a:bb:c7:34:f7:41:77:83:43:
9d:81:21:fd:67:99:d6:ac:f8:ed:85:2a:89:2a:fa:
7d:5d:18:55:19:12:c7:51:11:22:e6:43:f8:b9:1d:
8d:89:65:8f:84:1f:dc:a9:8e:47:36:c7:68:02:d9:
dd:58:0f:a4:62:40:f3:0a:1a:80:bd:46:89:80:13:
05:cc:00:83:05:4d:bd:88:63:6d:d6:f8:dd:59:dc:
98:9b:ad:fc:93:39:16:b6:f9:ae:03:6b:b3:b7:8e:
e9:1a:c8:44:1d:60:e4:aa:24:11:e4:45:33:3d:cf:
42:cf:73:17:71:77:9d:0e:bb:1f:80:65:b6:d4:65:
0a:16:f9:c4:cc:f4:0f:1a:73:09:4b:42:e8:89:4a:
34:c6:af:81:e2:8b:51:e1:cf:65:a5:5e:24:f7:c8:
29:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:41:DA:E1:89:D0:5E:8F:0C:16:FE:49:B8:34:44:D6:CE:74:A8:8C
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/_EHa4YnQXo8MFv5JuDRE1s50qIw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
1f:91:00:48:a4:ec:a9:1c:d3:83:8e:55:60:16:a9:36:59:0b:
f4:c0:e9:32:7f:b0:59:f2:15:d2:54:a5:03:a7:fa:db:a1:44:
a6:cb:ed:2e:4e:c5:ab:b5:2c:5b:84:9b:1a:b0:d8:ba:fb:dd:
37:ba:07:71:2b:b3:bf:c4:21:be:b9:9e:1a:2d:2c:d4:84:28:
2d:bd:ae:46:8c:1f:4a:55:14:55:2c:1b:21:4a:72:87:4d:df:
c2:a1:b8:53:9d:24:29:8e:51:97:c2:0f:3b:0b:73:dc:f2:16:
57:3e:d0:32:4a:ae:24:46:4b:6f:b1:ad:05:63:a8:c6:a8:57:
96:6b:f7:fc:71:1e:f9:e3:a5:a8:21:1a:1e:18:35:df:c3:a7:
c0:5a:d9:0a:60:12:d6:34:11:a3:43:41:a9:30:2f:51:5e:d9:
8f:21:ac:bd:94:8f:ae:39:f4:d4:ff:b3:84:db:fa:7d:3c:93:
7c:d1:74:d1:f8:2d:4e:29:4c:dc:c3:0c:cf:f9:c4:df:9a:b1:
39:13:3b:b9:00:ee:97:6d:87:91:e9:7c:00:ab:69:20:17:64:
f7:ce:a3:91:60:7d:e4:e0:dc:c8:89:52:ed:6f:97:15:5d:88:
0b:5b:84:d0:58:99:12:96:b0:2c:40:0d:2a:34:03:f3:e7:61:
ec:9a:41:3a
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYmRfEC7Zn5Ea3OJxPu2tlR1MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcyMDQ3YmUxNWIyNzU5MDJkY2Y2MTdkYzNkMGUxNmRjMWYz
MDgwMjIwHhcNMjMwNzI2MDkxNjI2WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmYzQxZGFlMTg5ZDA1ZThmMGMxNmZlNDliODM0NDRkNmNlNzRhODhjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq0u0Kd7h9UPQo0Kpn1lh8hoewLUg
G9l+iYHM731iknDfqlTmOaDVz6wa+tx0SMcTvY0LwPUsyP9vS2YnsnsNbWiAa4Tn
zl+Mh2O67C+tXOn4SP3k+DTDRe9XDfMLlwZ6u8c090F3g0OdgSH9Z5nWrPjthSqJ
Kvp9XRhVGRLHUREi5kP4uR2NiWWPhB/cqY5HNsdoAtndWA+kYkDzChqAvUaJgBMF
zACDBU29iGNt1vjdWdyYm638kzkWtvmuA2uzt47pGshEHWDkqiQR5EUzPc9Cz3MX
cXedDrsfgGW21GUKFvnEzPQPGnMJS0LoiUo0xq+B4otR4c9lpV4k98gpiwIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFPxB2uGJ0F6PDBb+Sbg0RNbOdKiMMB8GA1UdIwQY
MBaAFHIEe+FbJ1kC3PYX3D0OFtwfMIAiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMt
MWFiZTNhYzEwYWE2LzEvX0VIYTRZblFYbzhNRnY1SnVEUkUxczUwcUl3LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMtMWFiZTNhYzEwYWE2
LzEvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBAB+RAEik7Kkc04OOVWAW
qTZZC/TA6TJ/sFnyFdJUpQOn+tuhRKbL7S5Oxau1LFuEmxqw2Lr73Te6B3Ers7/E
Ib65nhotLNSEKC29rkaMH0pVFFUsGyFKcodN38KhuFOdJCmOUZfCDzsLc9zyFlc+
0DJKriRGS2+xrQVjqMaoV5Zr9/xxHvnjpaghGh4YNd/Dp8Ba2QpgEtY0EaNDQakw
L1Fe2Y8hrL2Uj6459NT/s4Tb+n08k3zRdNH4LU4pTNzDDM/5xN+asTkTO7kA7pdt
h5HpfACraSAXZPfOo5FgfeTg3MiJUu1vlxVdiAtbhNBYmRKWsCxADSo0A/PnYeya
QTo=
-----END CERTIFICATE-----
Generated at Wed Apr 30 19:51:05 2025 by rpki-client