Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/eFvdYof7wZ6wCGiBSChCS1V7xSw.roa
File: eFvdYof7wZ6wCGiBSChCS1V7xSw.roa (raw, json)
Hash identifier: IM3BGAMj7B2zaBOZuNLIRfatgUcLGlp3QwhKve4p/O4=
Subject key identifier: 78:5B:DD:62:87:FB:C1:9E:B0:08:68:81:48:28:42:4B:55:7B:C5:2C
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 018998C531288DC404F70BD9E294C87F20CE
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/eFvdYof7wZ6wCGiBSChCS1V7xSw.roa
Signing time: Thu 27 Jul 2023 19:13:27 +0000
ROA not before: Thu 27 Jul 2023 19:13:27 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:188:7858:a003/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:98:c5:31:28:8d:c4:04:f7:0b:d9:e2:94:c8:7f:20:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Jul 27 19:13:27 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=785bdd6287fbc19eb00868814828424b557bc52c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:ba:4e:fa:dd:8e:be:78:ea:7e:be:30:f8:83:
06:5c:5c:0e:d5:3d:55:68:e0:7a:30:1c:bf:08:04:
a8:22:9c:03:25:90:f0:b2:1d:42:ba:55:c1:fa:cd:
78:fd:32:e0:e8:4d:5f:a2:48:a0:46:6a:b9:f6:bd:
f7:1a:17:50:5a:cd:c8:79:45:f3:24:ea:e8:a9:d0:
04:fb:d2:cc:a4:19:b9:ce:5d:7f:ec:55:fb:6b:e5:
02:01:8a:bc:4c:b4:45:54:2f:99:6b:e5:91:06:62:
e1:18:2d:e3:4b:fa:81:1e:3d:fb:fb:8f:07:57:54:
c5:61:ee:17:70:15:88:18:8a:73:9e:32:b1:51:80:
22:34:c0:e3:6b:e3:d9:4c:66:ff:ee:7e:c3:f6:81:
fc:e0:ed:63:5f:5e:22:7f:0f:17:41:fa:bf:e7:52:
72:2b:4b:34:92:88:0a:b9:6e:31:c4:1c:a7:e7:f9:
a1:42:b1:ea:33:bb:db:b5:c6:2f:f4:99:ac:b9:4e:
be:36:f8:ce:89:84:4c:97:63:2d:b1:b8:ba:a0:87:
92:25:74:de:8c:b5:ee:4a:e8:24:3f:5a:cd:9b:44:
03:72:7a:be:15:89:10:e8:90:3f:2e:67:85:e6:cb:
dc:8a:93:9d:20:d0:98:52:84:72:3c:86:e9:53:c7:
6a:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:5B:DD:62:87:FB:C1:9E:B0:08:68:81:48:28:42:4B:55:7B:C5:2C
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/eFvdYof7wZ6wCGiBSChCS1V7xSw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
93:b7:e2:95:da:54:74:f1:9c:39:83:eb:06:7a:21:94:b7:4e:
e5:2e:bd:28:d6:c2:41:1e:d0:77:64:6d:7b:c4:5d:11:56:ba:
cc:da:4a:86:11:35:50:de:ba:40:a5:37:f4:40:b4:34:80:77:
0f:0f:bc:b1:3f:20:1d:26:46:79:49:fa:4b:03:a3:8f:c1:25:
9d:62:01:ae:15:df:1f:53:1a:3c:7d:77:fc:36:69:af:44:2d:
83:f1:aa:17:ff:f4:d9:0d:b5:31:23:99:09:3c:b6:32:9c:28:
21:d3:e0:30:0c:c5:93:f0:4e:57:ec:81:f9:f0:e8:6f:14:05:
91:90:b3:9f:7a:0c:19:46:78:92:33:a8:42:1f:d8:fc:cb:ff:
fc:b5:24:60:35:4b:b7:52:cc:2b:6a:2a:86:6b:f1:f9:67:f7:
bc:b7:3a:78:65:f1:b2:31:2c:7d:84:2c:af:53:31:2c:af:e2:
a2:8d:bf:53:31:db:97:b9:d7:94:82:5b:34:dd:13:12:c9:37:
a9:4d:1c:04:80:f7:02:5b:c3:04:f1:60:f9:50:8e:df:f8:28:
64:b6:ba:f3:45:94:73:6a:61:90:65:e4:be:bb:ac:b8:a1:cc:
39:08:58:9a:ad:c6:2a:25:58:6f:bd:ca:9c:4b:d0:66:cb:42:
31:a2:60:14
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYmYxTEojcQE9wvZ4pTIfyDOMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcyMDQ3YmUxNWIyNzU5MDJkY2Y2MTdkYzNkMGUxNmRjMWYz
MDgwMjIwHhcNMjMwNzI3MTkxMzI3WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3ODViZGQ2Mjg3ZmJjMTllYjAwODY4ODE0ODI4NDI0YjU1N2JjNTJjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlLpO+t2Ovnjqfr4w+IMGXFwO1T1V
aOB6MBy/CASoIpwDJZDwsh1CulXB+s14/TLg6E1fokigRmq59r33GhdQWs3IeUXz
JOroqdAE+9LMpBm5zl1/7FX7a+UCAYq8TLRFVC+Za+WRBmLhGC3jS/qBHj37+48H
V1TFYe4XcBWIGIpznjKxUYAiNMDja+PZTGb/7n7D9oH84O1jX14ifw8XQfq/51Jy
K0s0kogKuW4xxByn5/mhQrHqM7vbtcYv9JmsuU6+NvjOiYRMl2Mtsbi6oIeSJXTe
jLXuSugkP1rNm0QDcnq+FYkQ6JA/LmeF5svcipOdINCYUoRyPIbpU8dqBQIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFHhb3WKH+8GesAhogUgoQktVe8UsMB8GA1UdIwQY
MBaAFHIEe+FbJ1kC3PYX3D0OFtwfMIAiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMt
MWFiZTNhYzEwYWE2LzEvZUZ2ZFlvZjd3WjZ3Q0dpQlNDaENTMVY3eFN3LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMtMWFiZTNhYzEwYWE2
LzEvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBAJO34pXaVHTxnDmD6wZ6
IZS3TuUuvSjWwkEe0HdkbXvEXRFWuszaSoYRNVDeukClN/RAtDSAdw8PvLE/IB0m
RnlJ+ksDo4/BJZ1iAa4V3x9TGjx9d/w2aa9ELYPxqhf/9NkNtTEjmQk8tjKcKCHT
4DAMxZPwTlfsgfnw6G8UBZGQs596DBlGeJIzqEIf2PzL//y1JGA1S7dSzCtqKoZr
8fln97y3Onhl8bIxLH2ELK9TMSyv4qKNv1Mx25e515SCWzTdExLJN6lNHASA9wJb
wwTxYPlQjt/4KGS2uvNFlHNqYZBl5L67rLihzDkIWJqtxiolWG+9ypxL0GbLQjGi
YBQ=
-----END CERTIFICATE-----
Generated at Wed Apr 30 20:02:17 2025 by rpki-client