Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/e434PEBpAeZlZj01OKjoEOOjwtA.roa
File: e434PEBpAeZlZj01OKjoEOOjwtA.roa (raw, json)
Hash identifier: /+5/C/vPpfMxbRcg588d5SfS9PTOm9Zg0FLHlyJxVdM=
Subject key identifier: 7B:8D:F8:3C:40:69:01:E6:65:66:3D:35:38:A8:E8:10:E3:A3:C2:D0
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0186E6B4B22A5728B2A5B97F053BD6A2DD07
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/e434PEBpAeZlZj01OKjoEOOjwtA.roa
Signing time: Wed 15 Mar 2023 19:17:27 +0000
ROA not before: Wed 15 Mar 2023 19:17:27 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:e6:b4:b2:2a:57:28:b2:a5:b9:7f:05:3b:d6:a2:dd:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Mar 15 19:17:27 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=7b8df83c406901e665663d3538a8e810e3a3c2d0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:43:ad:f8:cf:64:02:ad:64:f0:c2:70:a4:49:
d1:8a:75:f6:2c:fc:d0:f1:9a:41:76:e5:86:b5:3f:
dc:35:d0:3c:e4:17:36:cb:ea:bc:c9:4e:e1:79:1b:
67:22:56:57:ed:92:ba:d6:da:05:36:ee:90:fe:69:
0a:9f:0a:fe:60:4b:33:17:28:a2:51:ec:63:7b:c5:
1d:91:c3:8c:f0:b8:b4:b2:bd:85:fb:29:08:ce:e4:
f7:fc:d0:ed:44:44:a6:dc:e8:ba:24:a8:33:a3:f1:
ab:0e:ae:fd:d2:75:ac:16:b9:18:00:b2:09:1b:b0:
df:d7:03:76:2e:e8:2d:d2:c5:c6:00:d5:69:e1:12:
3c:f2:23:c5:76:16:79:89:30:98:c4:0a:ed:4f:c9:
e7:f8:05:7c:05:76:cd:ef:87:0a:4d:cd:b0:5f:9e:
64:9b:b2:98:3b:70:a6:29:f3:c0:46:e5:87:16:2e:
c1:89:1f:b7:4f:a0:82:6d:d4:32:69:4b:52:67:e2:
dc:36:0b:45:69:8e:7d:20:9c:eb:34:46:59:70:9e:
8e:a5:5a:de:cf:2a:3b:3c:06:70:7b:f4:44:0e:07:
e0:03:5b:58:72:d2:ac:85:da:bc:aa:e7:95:55:bd:
39:a0:60:65:ee:19:47:61:f3:2d:70:de:e3:75:b0:
26:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:8D:F8:3C:40:69:01:E6:65:66:3D:35:38:A8:E8:10:E3:A3:C2:D0
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/e434PEBpAeZlZj01OKjoEOOjwtA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
48:8b:99:28:63:d4:8e:15:42:23:1f:68:70:0c:e0:87:17:9b:
c9:9d:67:c4:b4:81:ed:1b:e0:b5:fa:ff:72:ec:ac:68:ce:20:
da:0e:ee:28:ae:7e:a1:14:56:be:95:d0:54:45:14:6d:2e:de:
e6:2b:d3:52:43:72:89:22:7d:ed:68:05:8c:a2:73:c7:1a:f2:
6e:d0:e7:9a:89:6c:d8:0e:36:a0:6d:5a:94:7d:b6:22:79:0c:
f8:38:c6:d5:2e:0b:10:68:60:97:d7:5f:10:7d:38:8b:26:bb:
64:22:55:3c:49:d1:44:44:34:8d:92:46:24:be:19:2a:66:42:
27:de:df:84:f4:31:d9:ec:dd:15:01:5d:f7:74:f7:e4:46:43:
26:25:6e:c6:b0:18:a1:78:f4:ef:c5:09:ce:2f:63:47:a7:a0:
f6:d8:ab:49:d6:1e:dc:ef:52:f9:a8:61:63:46:5e:aa:20:ab:
e9:c7:d7:7b:d9:d0:0b:fc:7b:cf:4b:87:04:99:8b:a2:4e:32:
fb:00:53:c8:b1:a1:7e:46:a1:48:0e:bd:4f:df:f6:19:dd:7b:
0e:42:2c:7f:ae:36:28:24:89:29:5d:29:68:1e:62:2f:24:58:
88:4b:4c:0f:fb:08:4c:ab:34:13:b0:61:59:db:75:d9:6c:34:
1c:5b:be:6d
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYbmtLIqVyiypbl/BTvWot0HMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcyMDQ3YmUxNWIyNzU5MDJkY2Y2MTdkYzNkMGUxNmRjMWYz
MDgwMjIwHhcNMjMwMzE1MTkxNzI3WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3YjhkZjgzYzQwNjkwMWU2NjU2NjNkMzUzOGE4ZTgxMGUzYTNjMmQwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkkOt+M9kAq1k8MJwpEnRinX2LPzQ
8ZpBduWGtT/cNdA85Bc2y+q8yU7heRtnIlZX7ZK61toFNu6Q/mkKnwr+YEszFyii
Uexje8UdkcOM8Li0sr2F+ykIzuT3/NDtRESm3Oi6JKgzo/GrDq790nWsFrkYALIJ
G7Df1wN2Lugt0sXGANVp4RI88iPFdhZ5iTCYxArtT8nn+AV8BXbN74cKTc2wX55k
m7KYO3CmKfPARuWHFi7BiR+3T6CCbdQyaUtSZ+LcNgtFaY59IJzrNEZZcJ6OpVre
zyo7PAZwe/REDgfgA1tYctKshdq8queVVb05oGBl7hlHYfMtcN7jdbAm/QIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFHuN+DxAaQHmZWY9NTio6BDjo8LQMB8GA1UdIwQY
MBaAFHIEe+FbJ1kC3PYX3D0OFtwfMIAiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMt
MWFiZTNhYzEwYWE2LzEvZTQzNFBFQnBBZVpsWmowMU9Lam9FT09qd3RBLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMtMWFiZTNhYzEwYWE2
LzEvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBAEiLmShj1I4VQiMfaHAM
4IcXm8mdZ8S0ge0b4LX6/3LsrGjOINoO7iiufqEUVr6V0FRFFG0u3uYr01JDcoki
fe1oBYyic8ca8m7Q55qJbNgONqBtWpR9tiJ5DPg4xtUuCxBoYJfXXxB9OIsmu2Qi
VTxJ0URENI2SRiS+GSpmQife34T0Mdns3RUBXfd09+RGQyYlbsawGKF49O/FCc4v
Y0enoPbYq0nWHtzvUvmoYWNGXqogq+nH13vZ0Av8e89LhwSZi6JOMvsAU8ixoX5G
oUgOvU/f9hndew5CLH+uNigkiSldKWgeYi8kWIhLTA/7CEyrNBOwYVnbddlsNBxb
vm0=
-----END CERTIFICATE-----
Generated at Thu May 1 00:43:31 2025 by rpki-client