Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/ejVPV1CNr6-_mBas5baSYcV3HE8.roa
File: ejVPV1CNr6-_mBas5baSYcV3HE8.roa (raw, json)
Hash identifier: 3GWo/+TsxpA0JrIwiBxmTl+hlvW8Zfu9XIdpMuRBY0s=
Subject key identifier: 7A:35:4F:57:50:8D:AF:AF:BF:98:16:AC:E5:B6:92:61:C5:77:1C:4F
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0182816C691D8356D46991C115680F98A769
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/ejVPV1CNr6-_mBas5baSYcV3HE8.roa
Signing time: Tue 09 Aug 2022 07:05:41 +0000
ROA not before: Tue 09 Aug 2022 07:05:41 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:182:3f1d:a803/128 maxlen: 128
2001:67c:64:ffff:0:182:816b:c206/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:182:7cb2:99d4/128 maxlen: 128
2001:67c:64:ffff:0:182:383f:6b78/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:81:6c:69:1d:83:56:d4:69:91:c1:15:68:0f:98:a7:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Aug 9 07:05:41 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=7a354f57508dafafbf9816ace5b69261c5771c4f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:de:a1:4a:05:03:70:63:e3:e8:c9:99:a1:6a:
02:54:87:b4:7f:40:a9:31:db:af:e2:ec:5b:9f:65:
a6:28:1f:c7:ac:c2:c9:9c:a9:c9:72:3b:b7:d4:d9:
99:64:b8:c4:6a:ac:03:01:95:b2:f0:66:b0:ce:5d:
09:05:ff:3e:b5:4b:39:02:79:df:0a:01:01:d9:27:
5b:d4:74:8d:d2:95:fe:b2:81:2d:5d:9f:1b:c8:2f:
7a:db:b4:bc:eb:4a:5e:43:96:18:e3:fb:52:15:5f:
f5:98:8a:fa:68:d9:2f:e2:2c:2c:ef:2f:62:98:78:
90:9c:b5:a8:1c:28:fd:ab:e3:f8:60:d4:7d:fb:74:
26:b9:a7:21:44:61:a3:df:b1:d1:aa:99:05:e1:3e:
4a:28:5d:bd:d3:1f:e1:94:b8:b4:96:52:ac:7a:6f:
85:ca:d0:fe:7c:86:a6:dc:3a:79:e4:9e:7d:0e:67:
fd:1e:c5:3f:73:60:ca:c9:1d:4c:96:b7:06:3a:33:
a4:10:09:e8:0d:65:80:ee:8a:8e:90:f4:cb:e5:2d:
88:34:0c:b2:72:5c:4f:bc:08:a4:38:30:d4:f9:2f:
05:6a:e7:e2:33:06:7a:82:62:20:db:5e:6a:08:58:
44:6c:eb:be:84:73:92:63:38:c9:aa:fc:22:2f:51:
ab:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:35:4F:57:50:8D:AF:AF:BF:98:16:AC:E5:B6:92:61:C5:77:1C:4F
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/ejVPV1CNr6-_mBas5baSYcV3HE8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
56:44:a2:e8:40:f1:78:2e:99:f3:7f:5f:b3:e8:e5:03:d0:0d:
5f:9f:79:a8:c7:2c:aa:1b:d5:9d:a5:91:39:cc:ec:11:0a:4d:
00:64:01:46:e1:24:80:39:a4:e9:b4:a6:a3:2d:2b:1b:5c:12:
6f:1a:55:55:73:f2:ec:66:23:11:84:d3:ea:73:84:8d:c3:97:
ad:b1:15:0c:03:c5:7e:58:8f:8d:3d:d2:df:b8:34:09:94:73:
3b:48:9d:ac:6e:96:88:9d:8e:ca:2d:cd:93:1f:a6:de:d9:75:
dd:f6:94:87:60:cc:03:cb:94:f4:e5:90:95:a2:2f:02:94:75:
5c:ff:15:07:a4:81:22:1f:45:9f:b0:52:f4:82:81:6c:f3:60:
99:50:ee:a9:64:be:dd:84:f9:48:1c:52:98:71:31:35:ae:35:
2f:b9:0a:53:2f:57:6d:2a:30:60:a5:12:a1:61:71:99:4d:fc:
b0:bf:27:80:76:81:a1:73:94:44:6e:eb:e9:f2:06:12:69:4d:
84:21:d5:1f:48:74:6c:bf:a1:6f:6b:83:e7:53:00:38:91:3f:
94:c0:da:16:c6:6f:4a:42:2b:b8:2d:0d:03:a7:e5:ae:55:1a:
14:23:d5:fe:6c:d1:0f:88:ae:f5:20:a9:86:5d:d0:80:04:dd:
fa:c2:5f:6a
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYKBbGkdg1bUaZHBFWgPmKdpMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcyMDQ3YmUxNWIyNzU5MDJkY2Y2MTdkYzNkMGUxNmRjMWYz
MDgwMjIwHhcNMjIwODA5MDcwNTQxWhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3YTM1NGY1NzUwOGRhZmFmYmY5ODE2YWNlNWI2OTI2MWM1NzcxYzRmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmN6hSgUDcGPj6MmZoWoCVIe0f0Cp
Mduv4uxbn2WmKB/HrMLJnKnJcju31NmZZLjEaqwDAZWy8Gawzl0JBf8+tUs5Annf
CgEB2Sdb1HSN0pX+soEtXZ8byC9627S860peQ5YY4/tSFV/1mIr6aNkv4iws7y9i
mHiQnLWoHCj9q+P4YNR9+3QmuachRGGj37HRqpkF4T5KKF290x/hlLi0llKsem+F
ytD+fIam3Dp55J59Dmf9HsU/c2DKyR1MlrcGOjOkEAnoDWWA7oqOkPTL5S2INAyy
clxPvAikODDU+S8FaufiMwZ6gmIg215qCFhEbOu+hHOSYzjJqvwiL1GrCQIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFHo1T1dQja+vv5gWrOW2kmHFdxxPMB8GA1UdIwQY
MBaAFHIEe+FbJ1kC3PYX3D0OFtwfMIAiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMt
MWFiZTNhYzEwYWE2LzEvZWpWUFYxQ05yNi1fbUJhczViYVNZY1YzSEU4LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMtMWFiZTNhYzEwYWE2
LzEvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBAFZEouhA8XgumfN/X7Po
5QPQDV+feajHLKob1Z2lkTnM7BEKTQBkAUbhJIA5pOm0pqMtKxtcEm8aVVVz8uxm
IxGE0+pzhI3Dl62xFQwDxX5Yj4090t+4NAmUcztInaxuloidjsotzZMfpt7Zdd32
lIdgzAPLlPTlkJWiLwKUdVz/FQekgSIfRZ+wUvSCgWzzYJlQ7qlkvt2E+UgcUphx
MTWuNS+5ClMvV20qMGClEqFhcZlN/LC/J4B2gaFzlERu6+nyBhJpTYQh1R9IdGy/
oW9rg+dTADiRP5TA2hbGb0pCK7gtDQOn5a5VGhQj1f5s0Q+IrvUgqYZd0IAE3frC
X2o=
-----END CERTIFICATE-----
Generated at Thu May 1 00:41:22 2025 by rpki-client