Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/hEkLFpbpIuSenR5nAPJx8kju4hE.roa
File: hEkLFpbpIuSenR5nAPJx8kju4hE.roa (raw, json)
Hash identifier: 5DJhvhpguzR7kvIVds3ainGbnXxePjfFfxPeD042gUc=
Subject key identifier: 84:49:0B:16:96:E9:22:E4:9E:9D:1E:67:00:F2:71:F2:48:EE:E2:11
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 018996302C061BA181F8BC9BA22FF0BCA278
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/hEkLFpbpIuSenR5nAPJx8kju4hE.roa
Signing time: Thu 27 Jul 2023 07:11:26 +0000
ROA not before: Thu 27 Jul 2023 07:11:26 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:188:7858:a003/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:96:30:2c:06:1b:a1:81:f8:bc:9b:a2:2f:f0:bc:a2:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Jul 27 07:11:26 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=84490b1696e922e49e9d1e6700f271f248eee211
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:b3:db:47:3e:89:56:76:47:0f:a3:d0:bc:c4:
65:e9:01:49:d6:2e:8d:84:6f:9d:cd:ca:5c:fa:19:
8f:49:77:2a:52:89:b4:53:a5:7c:e2:c7:f0:14:7a:
bb:82:06:dd:c0:ea:67:fd:33:18:c1:79:c0:44:64:
54:8d:63:a4:52:73:40:bd:a4:de:c8:52:76:f6:ad:
5e:5e:d6:9a:34:dd:1f:33:45:bc:d7:e1:7e:97:c2:
8c:7c:f6:2e:8e:d9:d0:23:a1:6b:68:08:1b:21:94:
50:f5:6c:64:71:4a:50:3c:5b:6e:c9:98:13:ae:f5:
70:25:e2:34:dc:98:c1:b7:e0:62:ef:70:61:38:9e:
35:d0:bb:4d:33:4f:40:e2:3a:39:4e:f2:57:7d:fe:
cf:93:be:b2:c8:22:33:d6:cf:b3:97:ea:03:dd:46:
32:5a:2d:a3:53:1e:61:aa:2a:6d:e5:07:fd:84:a7:
0d:af:63:c5:4b:ad:0b:c2:2e:90:fd:0e:a8:fa:e2:
a3:c8:17:20:2c:aa:7b:cb:a8:90:b7:bf:4a:21:9d:
c2:41:8b:2b:7f:21:31:ec:d6:55:75:f4:4b:a7:07:
ef:7b:9f:37:f2:e0:bc:87:f8:2d:15:8d:1c:3a:94:
4b:1d:3b:f0:c4:7e:fe:30:39:f2:c6:bf:87:31:f9:
ae:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:49:0B:16:96:E9:22:E4:9E:9D:1E:67:00:F2:71:F2:48:EE:E2:11
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/hEkLFpbpIuSenR5nAPJx8kju4hE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
00:96:56:6b:95:11:58:37:d6:61:70:f9:b2:bb:42:e3:a0:7a:
03:18:9d:be:65:f6:c8:5e:17:24:02:58:a4:0e:49:95:7d:ec:
51:1f:62:75:38:d8:51:aa:5e:0a:08:5e:dc:8c:f0:1e:c1:54:
0f:c0:0f:a9:99:02:eb:1e:bc:13:78:dc:d7:67:56:49:1b:d2:
be:ae:43:cd:d8:af:e5:57:25:e8:fd:83:76:4b:8b:dc:18:bc:
65:58:df:ff:b0:a6:ed:0f:bc:83:d1:90:96:52:18:39:a1:e1:
ca:f8:e1:98:13:10:7e:81:ec:54:fc:e6:99:80:32:fa:b7:de:
eb:4b:40:ee:08:d4:76:76:1c:63:80:e3:df:d2:89:84:7a:23:
44:bd:a4:03:5f:5f:7c:18:d3:1d:c4:e9:4f:48:56:7e:40:65:
f6:6b:ca:5a:42:5d:bc:b6:f0:68:22:0a:b0:95:0f:6c:fa:7d:
e2:59:13:d1:9e:81:e0:b2:98:2d:72:da:f1:45:1b:c8:ae:e4:
67:fd:ca:2e:32:32:b3:60:e9:f8:e5:5c:5e:e0:e2:c0:08:ca:
8a:db:20:b7:3d:cf:63:6d:d6:1c:37:30:09:76:3a:5d:7a:a2:
b0:cf:cb:f2:05:70:40:fe:66:1c:a4:b1:9d:8d:55:94:c8:25:
ce:bf:6f:79
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYmWMCwGG6GB+Lyboi/wvKJ4MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcyMDQ3YmUxNWIyNzU5MDJkY2Y2MTdkYzNkMGUxNmRjMWYz
MDgwMjIwHhcNMjMwNzI3MDcxMTI2WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4NDQ5MGIxNjk2ZTkyMmU0OWU5ZDFlNjcwMGYyNzFmMjQ4ZWVlMjExMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApLPbRz6JVnZHD6PQvMRl6QFJ1i6N
hG+dzcpc+hmPSXcqUom0U6V84sfwFHq7ggbdwOpn/TMYwXnARGRUjWOkUnNAvaTe
yFJ29q1eXtaaNN0fM0W81+F+l8KMfPYujtnQI6FraAgbIZRQ9WxkcUpQPFtuyZgT
rvVwJeI03JjBt+Bi73BhOJ410LtNM09A4jo5TvJXff7Pk76yyCIz1s+zl+oD3UYy
Wi2jUx5hqipt5Qf9hKcNr2PFS60Lwi6Q/Q6o+uKjyBcgLKp7y6iQt79KIZ3CQYsr
fyEx7NZVdfRLpwfve5838uC8h/gtFY0cOpRLHTvwxH7+MDnyxr+HMfmuiQIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFIRJCxaW6SLknp0eZwDycfJI7uIRMB8GA1UdIwQY
MBaAFHIEe+FbJ1kC3PYX3D0OFtwfMIAiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMt
MWFiZTNhYzEwYWE2LzEvaEVrTEZwYnBJdVNlblI1bkFQSng4a2p1NGhFLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMtMWFiZTNhYzEwYWE2
LzEvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBAACWVmuVEVg31mFw+bK7
QuOgegMYnb5l9sheFyQCWKQOSZV97FEfYnU42FGqXgoIXtyM8B7BVA/AD6mZAuse
vBN43NdnVkkb0r6uQ83Yr+VXJej9g3ZLi9wYvGVY3/+wpu0PvIPRkJZSGDmh4cr4
4ZgTEH6B7FT85pmAMvq33utLQO4I1HZ2HGOA49/SiYR6I0S9pANfX3wY0x3E6U9I
Vn5AZfZrylpCXby28GgiCrCVD2z6feJZE9GegeCymC1y2vFFG8iu5Gf9yi4yMrNg
6fjlXF7g4sAIyorbILc9z2Nt1hw3MAl2Ol16orDPy/IFcED+ZhyksZ2NVZTIJc6/
b3k=
-----END CERTIFICATE-----
Generated at Fri May 2 15:39:20 2025 by rpki-client