Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/eRk9RCFYTmwLiw86hNNjGTSqIZc.roa
File: eRk9RCFYTmwLiw86hNNjGTSqIZc.roa (raw, json)
Hash identifier: oE3LXKIeq7KTBfR6ohDXJWodoaN0kWlzzL4zkFWVI54=
Subject key identifier: 79:19:3D:44:21:58:4E:6C:0B:8B:0F:3A:84:D3:63:19:34:AA:21:97
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 018944A772AC24BDEBA791B8DFC7A90F4F39
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/eRk9RCFYTmwLiw86hNNjGTSqIZc.roa
Signing time: Tue 11 Jul 2023 11:12:51 +0000
ROA not before: Tue 11 Jul 2023 11:12:51 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:188:5fe2:b396/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:187:4695:a68a/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:188:7858:a003/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64:ffff:0:187:fa9a:b088/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:187:b2b8:a7dd/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:44:a7:72:ac:24:bd:eb:a7:91:b8:df:c7:a9:0f:4f:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Jul 11 11:12:51 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=79193d4421584e6c0b8b0f3a84d3631934aa2197
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:60:50:26:1e:07:dd:42:b2:ea:5f:d3:88:f5:
f3:64:5e:ee:ff:ce:b6:ca:a0:f8:b3:40:fa:37:c3:
5d:54:52:c4:24:5d:0b:1b:a0:08:65:65:03:be:9c:
29:70:3e:96:1b:40:a9:fd:f3:a5:c0:5b:62:a7:17:
1b:f7:ba:83:13:27:d0:11:35:3b:0b:6f:b6:06:0f:
b0:fa:18:3f:df:50:72:4e:55:82:f4:bd:b1:fb:b0:
48:73:23:c4:f2:5d:15:f2:ce:99:de:0a:4a:d2:bb:
a6:ac:5a:d5:bc:65:ef:79:a4:a6:2f:0d:bd:11:e9:
a2:ad:48:c9:52:0f:b1:90:e8:b1:f1:df:10:8d:aa:
ec:ea:76:1c:6e:67:f9:e5:00:73:2f:45:70:1e:41:
cd:47:08:a1:f8:f9:bf:ce:25:73:9f:98:70:f8:c7:
27:d3:36:08:6d:e5:f5:d3:2a:7f:23:a8:10:7a:c7:
c4:a0:f1:f5:66:eb:1c:c1:28:bc:6e:74:89:51:03:
d6:0f:d8:51:ca:94:c5:66:df:a5:2d:5d:eb:bd:e7:
e3:9e:7c:50:d7:12:9a:f4:3d:82:11:03:1a:e2:72:
db:88:0a:79:8a:ba:88:2e:96:1a:d5:bd:66:3e:a9:
e2:df:82:8d:40:7d:eb:67:6e:fe:47:24:67:b3:7b:
a4:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:19:3D:44:21:58:4E:6C:0B:8B:0F:3A:84:D3:63:19:34:AA:21:97
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/eRk9RCFYTmwLiw86hNNjGTSqIZc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
75:8f:7f:9d:97:9f:c4:b8:72:db:80:1a:c0:2d:cd:ed:f9:fa:
f6:dc:55:9d:93:78:bd:d5:97:af:ec:b2:4a:8f:4f:ce:04:17:
4c:ca:97:12:b2:aa:b8:af:ee:ac:ce:ad:f6:7a:7c:b8:82:1b:
26:6d:85:c7:d3:98:32:f4:96:dd:ff:6d:3e:fb:2c:37:0a:a8:
96:a2:f6:99:0b:82:5e:93:d7:9d:64:ba:b4:20:e4:49:2e:6c:
b3:1b:64:e6:6e:fd:33:2e:53:b6:3b:70:97:2d:82:a5:c6:4c:
00:7f:d4:27:16:72:82:18:10:81:9f:92:7a:d5:be:75:dc:b5:
73:61:02:2b:3f:55:ce:73:c1:41:c8:03:62:97:af:50:2c:16:
3d:9e:c6:e5:c5:35:e5:0d:8f:f5:dd:19:ca:c7:a6:58:96:04:
6a:62:c9:c8:f4:2a:29:61:31:ea:fd:e2:19:d6:f0:25:89:aa:
f3:1f:f8:84:5f:37:c4:27:94:f1:5c:3f:f2:73:a7:f2:5f:1c:
13:ea:35:ac:30:03:4b:6c:76:7a:a8:84:0a:bf:6c:12:05:96:
a9:89:19:b0:61:42:5b:c6:1e:e0:9f:eb:c0:fd:0d:d4:c0:a5:
bf:2f:df:6b:4e:05:1b:61:11:3f:ed:05:1a:43:d8:33:2c:fb:
c6:8b:c1:15
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYlEp3KsJL3rp5G438epD085MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcyMDQ3YmUxNWIyNzU5MDJkY2Y2MTdkYzNkMGUxNmRjMWYz
MDgwMjIwHhcNMjMwNzExMTExMjUxWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3OTE5M2Q0NDIxNTg0ZTZjMGI4YjBmM2E4NGQzNjMxOTM0YWEyMTk3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6mBQJh4H3UKy6l/TiPXzZF7u/862
yqD4s0D6N8NdVFLEJF0LG6AIZWUDvpwpcD6WG0Cp/fOlwFtipxcb97qDEyfQETU7
C2+2Bg+w+hg/31ByTlWC9L2x+7BIcyPE8l0V8s6Z3gpK0rumrFrVvGXveaSmLw29
EemirUjJUg+xkOix8d8Qjars6nYcbmf55QBzL0VwHkHNRwih+Pm/ziVzn5hw+Mcn
0zYIbeX10yp/I6gQesfEoPH1ZuscwSi8bnSJUQPWD9hRypTFZt+lLV3rvefjnnxQ
1xKa9D2CEQMa4nLbiAp5irqILpYa1b1mPqni34KNQH3rZ27+RyRns3ukewIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFHkZPUQhWE5sC4sPOoTTYxk0qiGXMB8GA1UdIwQY
MBaAFHIEe+FbJ1kC3PYX3D0OFtwfMIAiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMt
MWFiZTNhYzEwYWE2LzEvZVJrOVJDRllUbXdMaXc4NmhOTmpHVFNxSVpjLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMtMWFiZTNhYzEwYWE2
LzEvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBAHWPf52Xn8S4ctuAGsAt
ze35+vbcVZ2TeL3Vl6/sskqPT84EF0zKlxKyqriv7qzOrfZ6fLiCGyZthcfTmDL0
lt3/bT77LDcKqJai9pkLgl6T151kurQg5EkubLMbZOZu/TMuU7Y7cJctgqXGTAB/
1CcWcoIYEIGfknrVvnXctXNhAis/Vc5zwUHIA2KXr1AsFj2exuXFNeUNj/XdGcrH
pliWBGpiycj0KilhMer94hnW8CWJqvMf+IRfN8QnlPFcP/Jzp/JfHBPqNawwA0ts
dnqohAq/bBIFlqmJGbBhQlvGHuCf68D9DdTApb8v32tOBRthET/tBRpD2DMs+8aL
wRU=
-----END CERTIFICATE-----
Generated at Thu May 1 00:59:00 2025 by rpki-client