Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/enbmChe24LcZpUd2OPb0KA8HM-c.roa
File: enbmChe24LcZpUd2OPb0KA8HM-c.roa (raw, json)
Hash identifier: Uc1uAgsA2Nx2Y5+KjWxDmVSolgYUwPPfMCqpC45gJ20=
Subject key identifier: 7A:76:E6:0A:17:B6:E0:B7:19:A5:47:76:38:F6:F4:28:0F:07:33:E7
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0189657CE7F422FA23EC4452787D9D0F9966
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/enbmChe24LcZpUd2OPb0KA8HM-c.roa
Signing time: Mon 17 Jul 2023 20:13:51 +0000
ROA not before: Mon 17 Jul 2023 20:13:51 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:188:5fe2:b396/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:187:4695:a68a/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:188:7858:a003/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64:ffff:0:187:fa9a:b088/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:187:b2b8:a7dd/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:65:7c:e7:f4:22:fa:23:ec:44:52:78:7d:9d:0f:99:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Jul 17 20:13:51 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=7a76e60a17b6e0b719a5477638f6f4280f0733e7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:45:03:70:fc:f9:6e:91:29:a4:d3:92:39:bb:
c4:2b:0b:6c:62:de:d6:78:bb:87:0f:92:51:68:39:
09:9f:41:1d:3a:9f:68:97:e1:82:af:90:c8:e0:27:
cd:37:81:b2:6d:16:ee:ea:cb:6a:a3:0f:c8:f7:e9:
ea:c5:d8:e2:19:0a:e8:fb:81:0d:eb:b4:49:d6:da:
2f:e4:43:0f:f9:80:7e:1b:6d:53:da:be:10:70:58:
b0:9d:e5:db:70:b1:3c:22:38:65:cf:38:28:7d:9c:
8e:5d:fa:9c:0b:ce:4c:07:21:8b:a7:c9:28:bc:6e:
8a:8e:af:4f:ea:aa:1f:fe:8e:44:ee:8b:66:9c:a2:
f2:f7:bb:77:da:02:56:f2:17:ee:c2:82:73:f8:44:
d5:10:48:b0:0d:3f:85:b4:da:d5:86:23:98:ff:53:
63:d5:47:e4:56:74:87:1f:13:7e:04:2d:02:14:e1:
70:7b:d8:9f:c0:fc:fc:0d:4e:49:04:76:e3:bc:f1:
fa:d4:55:6d:01:21:c3:d6:20:8f:a5:67:55:58:3a:
ba:6c:81:49:82:7b:5e:2e:64:e3:fb:de:4c:b0:7e:
41:7a:cd:ee:2f:c3:67:cc:6d:1e:7d:e3:e4:d7:64:
81:13:e1:1f:d9:29:75:3c:16:f6:0a:d1:de:9b:85:
04:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:76:E6:0A:17:B6:E0:B7:19:A5:47:76:38:F6:F4:28:0F:07:33:E7
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/enbmChe24LcZpUd2OPb0KA8HM-c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
06:46:62:8c:0b:de:34:c2:6c:1b:bb:f4:dc:6e:f8:be:28:5e:
3c:d1:c5:07:ec:2a:81:87:fb:6c:98:d9:04:cc:64:66:19:a4:
d9:c6:bd:53:61:4b:c7:ed:81:45:36:01:88:02:b7:01:6d:9c:
54:8f:ad:f3:2b:de:1a:9e:a5:60:21:59:8f:6d:85:3d:78:7c:
80:01:8b:97:33:93:3c:b8:5e:38:5e:68:37:df:2b:4d:a7:3d:
5f:1c:b0:9f:24:3d:0a:69:82:42:e1:d4:a8:98:9f:d8:90:97:
26:14:ac:21:11:22:62:4e:11:85:36:c0:2e:b9:a3:51:f8:29:
9c:e0:c9:29:16:12:1e:9d:95:e6:39:bd:7d:b2:22:e6:65:a2:
c5:1a:e0:c1:46:c5:8d:5b:ab:93:78:12:d3:67:94:d7:13:92:
17:3c:3b:7b:7d:0d:1d:41:e7:da:06:10:20:e7:38:64:86:4d:
4f:1e:3b:58:26:75:c5:5e:af:af:db:f8:fa:61:5f:0d:69:8e:
f0:1c:10:08:19:a6:32:d1:87:6f:78:21:7a:39:f3:c7:ba:bd:
4a:3b:4e:03:80:df:f5:a8:f4:45:d3:74:ce:82:7e:b7:df:93:
49:9f:81:21:de:70:66:11:eb:39:69:49:34:1d:5a:49:af:73:
4f:32:0f:ad
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYllfOf0Ivoj7ERSeH2dD5lmMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcyMDQ3YmUxNWIyNzU5MDJkY2Y2MTdkYzNkMGUxNmRjMWYz
MDgwMjIwHhcNMjMwNzE3MjAxMzUxWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3YTc2ZTYwYTE3YjZlMGI3MTlhNTQ3NzYzOGY2ZjQyODBmMDczM2U3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArEUDcPz5bpEppNOSObvEKwtsYt7W
eLuHD5JRaDkJn0EdOp9ol+GCr5DI4CfNN4GybRbu6stqow/I9+nqxdjiGQro+4EN
67RJ1tov5EMP+YB+G21T2r4QcFiwneXbcLE8IjhlzzgofZyOXfqcC85MByGLp8ko
vG6Kjq9P6qof/o5E7otmnKLy97t32gJW8hfuwoJz+ETVEEiwDT+FtNrVhiOY/1Nj
1UfkVnSHHxN+BC0CFOFwe9ifwPz8DU5JBHbjvPH61FVtASHD1iCPpWdVWDq6bIFJ
gnteLmTj+95MsH5Bes3uL8NnzG0efePk12SBE+Ef2Sl1PBb2CtHem4UEXwIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFHp25goXtuC3GaVHdjj29CgPBzPnMB8GA1UdIwQY
MBaAFHIEe+FbJ1kC3PYX3D0OFtwfMIAiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMt
MWFiZTNhYzEwYWE2LzEvZW5ibUNoZTI0TGNacFVkMk9QYjBLQThITS1jLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMtMWFiZTNhYzEwYWE2
LzEvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBAAZGYowL3jTCbBu79Nxu
+L4oXjzRxQfsKoGH+2yY2QTMZGYZpNnGvVNhS8ftgUU2AYgCtwFtnFSPrfMr3hqe
pWAhWY9thT14fIABi5czkzy4XjheaDffK02nPV8csJ8kPQppgkLh1KiYn9iQlyYU
rCERImJOEYU2wC65o1H4KZzgySkWEh6dleY5vX2yIuZlosUa4MFGxY1bq5N4EtNn
lNcTkhc8O3t9DR1B59oGECDnOGSGTU8eO1gmdcVer6/b+PphXw1pjvAcEAgZpjLR
h294IXo588e6vUo7TgOA3/Wo9EXTdM6Cfrffk0mfgSHecGYR6zlpSTQdWkmvc08y
D60=
-----END CERTIFICATE-----
Generated at Wed Apr 30 17:20:29 2025 by rpki-client