Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/ejlwEU1yq_QzJz8UcD6jGufWdOE.roa
File: ejlwEU1yq_QzJz8UcD6jGufWdOE.roa (raw, json)
Hash identifier: jmwNCyLzKW1XgJe/fXIaBnBt2C/0dEXfxLyHmWydGwI=
Subject key identifier: 7A:39:70:11:4D:72:AB:F4:33:27:3F:14:70:3E:A3:1A:E7:D6:74:E1
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0188CF445E853F1EBFCF8579521B9B42CEF2
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/ejlwEU1yq_QzJz8UcD6jGufWdOE.roa
Signing time: Sun 18 Jun 2023 16:09:04 +0000
ROA not before: Sun 18 Jun 2023 16:09:04 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:188:5fe2:b396/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:187:4695:a68a/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:188:7858:a003/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64:ffff:0:187:fa9a:b088/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:187:b2b8:a7dd/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:cf:44:5e:85:3f:1e:bf:cf:85:79:52:1b:9b:42:ce:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Jun 18 16:09:04 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=7a3970114d72abf433273f14703ea31ae7d674e1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:01:04:d6:a0:16:77:c2:ef:85:fa:84:a3:13:
8c:07:9e:07:9d:0e:89:ee:dc:3f:c3:6f:d8:43:82:
af:4c:40:38:e1:6e:3a:21:3d:a8:72:86:d1:bd:08:
38:2f:5b:84:b2:2e:33:be:60:d4:94:06:46:25:7f:
9c:0b:65:be:23:b8:13:87:46:00:79:f1:90:65:ea:
fc:0d:82:3f:8c:a1:b0:f1:41:ed:ed:2d:98:3f:bc:
c7:cc:63:fc:01:a4:08:36:86:65:1b:96:d8:08:e0:
eb:cd:5c:c6:27:ca:15:b6:c8:f4:7e:bb:72:d5:ac:
7a:94:94:cb:1e:6e:a0:36:eb:a5:b1:cf:68:ad:1b:
49:2c:35:91:b8:6c:40:da:12:ed:54:57:41:c5:8c:
40:b7:db:cf:f7:65:9c:25:d9:b3:64:5b:c3:c3:ba:
d1:52:1d:7f:0e:a3:f7:97:13:ef:67:da:fb:ce:97:
9b:1f:2e:c0:84:18:2b:05:03:58:b2:1d:54:16:30:
b1:42:62:ed:b5:0e:ed:d2:1b:a8:4c:ac:cc:ad:bd:
ba:03:ea:e1:56:45:e8:28:f1:8e:fe:08:bd:9c:68:
d0:22:b7:d5:c4:6a:3c:90:35:71:e8:76:78:96:c8:
4f:43:26:58:3b:68:0d:dc:de:9e:85:d3:ac:01:8c:
bc:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:39:70:11:4D:72:AB:F4:33:27:3F:14:70:3E:A3:1A:E7:D6:74:E1
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/ejlwEU1yq_QzJz8UcD6jGufWdOE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
98:7d:4b:6b:44:c0:b5:8a:5a:23:81:3b:b3:c0:59:14:69:c9:
ab:fe:d1:03:dd:3b:8c:2a:bc:e1:ab:0d:d6:53:a3:e3:0e:dc:
40:f1:df:e4:15:c5:b1:c9:ad:09:1f:23:c7:89:4d:1c:03:04:
90:45:de:f9:3b:ee:a7:75:b7:0c:58:c6:b4:73:d7:73:c7:b5:
fd:fd:fd:fc:1a:a3:37:3b:ce:60:9b:8b:a1:bb:ed:86:2c:6e:
4e:b3:25:a4:75:9a:f1:95:eb:04:ce:8f:31:f6:87:3c:6b:6c:
13:ee:9d:1c:b1:bd:be:59:f7:1e:c7:e9:0a:24:2e:1f:ee:89:
c0:08:6d:e6:82:24:12:5c:62:0b:df:46:c1:39:bb:7b:ad:6c:
e4:a0:92:8f:9d:7f:6d:c7:f2:ec:0b:a9:9d:7b:a7:64:6d:cb:
58:cd:87:74:e1:9a:b1:9d:c4:a6:97:1a:c4:1f:50:6a:a1:fd:
7a:a5:74:a6:63:b7:a2:da:ec:d8:7e:d3:1d:25:5c:ad:cc:d1:
5a:86:a8:16:81:2e:f8:18:c8:08:7d:5a:25:64:66:de:1a:86:
7f:d4:75:f7:28:7c:4e:b7:d5:5f:01:83:cd:d1:92:86:ba:2b:
99:f7:1b:57:66:64:83:36:e2:a9:4c:33:78:77:4b:51:b1:55:
92:83:d6:c5
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYjPRF6FPx6/z4V5UhubQs7yMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcyMDQ3YmUxNWIyNzU5MDJkY2Y2MTdkYzNkMGUxNmRjMWYz
MDgwMjIwHhcNMjMwNjE4MTYwOTA0WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3YTM5NzAxMTRkNzJhYmY0MzMyNzNmMTQ3MDNlYTMxYWU3ZDY3NGUxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlgEE1qAWd8LvhfqEoxOMB54HnQ6J
7tw/w2/YQ4KvTEA44W46IT2ocobRvQg4L1uEsi4zvmDUlAZGJX+cC2W+I7gTh0YA
efGQZer8DYI/jKGw8UHt7S2YP7zHzGP8AaQINoZlG5bYCODrzVzGJ8oVtsj0frty
1ax6lJTLHm6gNuulsc9orRtJLDWRuGxA2hLtVFdBxYxAt9vP92WcJdmzZFvDw7rR
Uh1/DqP3lxPvZ9r7zpebHy7AhBgrBQNYsh1UFjCxQmLttQ7t0huoTKzMrb26A+rh
VkXoKPGO/gi9nGjQIrfVxGo8kDVx6HZ4lshPQyZYO2gN3N6ehdOsAYy8lQIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFHo5cBFNcqv0Myc/FHA+oxrn1nThMB8GA1UdIwQY
MBaAFHIEe+FbJ1kC3PYX3D0OFtwfMIAiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMt
MWFiZTNhYzEwYWE2LzEvZWpsd0VVMXlxX1F6Sno4VWNENmpHdWZXZE9FLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMtMWFiZTNhYzEwYWE2
LzEvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBAJh9S2tEwLWKWiOBO7PA
WRRpyav+0QPdO4wqvOGrDdZTo+MO3EDx3+QVxbHJrQkfI8eJTRwDBJBF3vk77qd1
twxYxrRz13PHtf39/fwaozc7zmCbi6G77YYsbk6zJaR1mvGV6wTOjzH2hzxrbBPu
nRyxvb5Z9x7H6QokLh/uicAIbeaCJBJcYgvfRsE5u3utbOSgko+df23H8uwLqZ17
p2Rty1jNh3ThmrGdxKaXGsQfUGqh/XqldKZjt6La7Nh+0x0lXK3M0VqGqBaBLvgY
yAh9WiVkZt4ahn/UdfcofE631V8Bg83Rkoa6K5n3G1dmZIM24qlMM3h3S1GxVZKD
1sU=
-----END CERTIFICATE-----
Generated at Sat May 3 18:28:40 2025 by rpki-client