Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/k5EFUR3uKomHx3kE6IA2VzgbMEo.roa
File: k5EFUR3uKomHx3kE6IA2VzgbMEo.roa (raw, json)
Hash identifier: esT38fZCQT2Mp0chMkVdR0h398fypeXOjmRcLL2pDc4=
Subject key identifier: 93:91:05:51:1D:EE:2A:89:87:C7:79:04:E8:80:36:57:38:1B:30:4A
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0186CFEA1741FD6E1681F0A3A751FABD7ECC
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/k5EFUR3uKomHx3kE6IA2VzgbMEo.roa
Signing time: Sat 11 Mar 2023 09:04:30 +0000
ROA not before: Sat 11 Mar 2023 09:04:30 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:cf:ea:17:41:fd:6e:16:81:f0:a3:a7:51:fa:bd:7e:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Mar 11 09:04:30 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=939105511dee2a8987c77904e8803657381b304a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:76:92:a0:10:df:7b:6a:6f:cb:69:69:95:5a:
ed:dd:74:a1:91:23:92:7d:47:a6:75:5f:b6:79:71:
66:35:f7:9f:60:04:6b:cf:80:87:14:fa:93:e8:d6:
47:3c:41:3c:8c:18:9c:78:27:5f:1c:29:8b:66:3c:
a6:34:b7:d2:43:8d:1a:e7:c8:f8:4b:3c:d4:33:89:
38:c2:50:17:f1:90:1b:e8:3a:c5:a0:98:41:9b:27:
7a:8b:3d:4b:30:24:c3:a0:c4:02:56:fc:dd:09:e0:
6c:d7:10:69:35:1e:4d:b1:f8:27:05:84:6a:bd:fc:
99:91:61:8c:a4:82:8d:9f:33:9e:94:98:78:74:44:
bf:cd:8b:96:36:ec:ce:0c:83:f1:bd:19:5d:0b:b6:
73:89:82:71:7f:a1:d8:ed:52:05:1f:e1:0b:87:5f:
dc:d2:13:16:af:69:83:cc:b4:3b:61:49:e9:7c:20:
b4:0c:b3:e9:cd:60:99:41:90:49:33:e6:79:3d:b6:
1b:4c:e2:b1:a7:e3:15:ed:f5:f0:63:9d:16:85:21:
02:b7:2e:bc:2b:d1:ab:c6:69:dd:2a:08:63:d4:af:
6b:19:59:38:9f:b1:74:80:a5:9b:e4:0e:18:fe:d9:
15:6e:b2:2f:3c:e6:0f:3f:f0:ab:6b:f5:35:18:ad:
97:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:91:05:51:1D:EE:2A:89:87:C7:79:04:E8:80:36:57:38:1B:30:4A
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/k5EFUR3uKomHx3kE6IA2VzgbMEo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
51:4f:4b:9d:5b:18:6c:7a:6e:2c:ff:1d:1f:ab:06:37:47:ae:
9b:d0:85:42:8c:18:88:e7:c2:57:6a:dc:30:2a:88:3f:c3:a4:
d4:d5:57:70:60:39:c3:1b:cd:83:73:74:af:64:82:c6:5b:61:
fc:f4:91:80:e8:16:ad:a0:e1:05:14:81:f7:8b:ce:a9:63:21:
de:c8:38:f4:41:a1:2c:d2:55:65:2e:e3:55:62:b6:0f:dc:89:
87:f8:81:ee:98:42:da:6a:7e:76:18:91:60:9f:d3:83:20:b8:
ca:56:ed:8d:32:fd:0a:e7:7d:15:ee:7a:7f:7e:d3:41:17:3c:
9c:1d:aa:21:20:bb:1e:1d:84:47:16:c5:1f:ed:5d:c3:fc:2f:
f6:e0:59:35:69:cc:2d:07:1f:5f:7c:80:9d:3a:aa:b9:27:8a:
c9:b0:42:55:78:0b:fb:1b:e3:40:43:9b:09:5d:df:2c:e4:25:
13:02:4c:8c:24:e6:8e:3d:f2:16:99:0c:e9:54:c6:3a:07:0c:
a9:36:df:7f:9b:4c:5f:14:ec:f9:3e:ed:69:1b:27:01:e2:42:
d3:75:d1:69:82:86:91:45:fe:99:3c:2e:ba:a4:cd:03:b5:53:
12:e8:df:d6:fd:d5:10:f3:eb:0b:20:3e:db:2b:0c:54:85:63:
96:06:df:f5
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYbP6hdB/W4WgfCjp1H6vX7MMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcyMDQ3YmUxNWIyNzU5MDJkY2Y2MTdkYzNkMGUxNmRjMWYz
MDgwMjIwHhcNMjMwMzExMDkwNDMwWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5MzkxMDU1MTFkZWUyYTg5ODdjNzc5MDRlODgwMzY1NzM4MWIzMDRhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsHaSoBDfe2pvy2lplVrt3XShkSOS
fUemdV+2eXFmNfefYARrz4CHFPqT6NZHPEE8jBiceCdfHCmLZjymNLfSQ40a58j4
SzzUM4k4wlAX8ZAb6DrFoJhBmyd6iz1LMCTDoMQCVvzdCeBs1xBpNR5NsfgnBYRq
vfyZkWGMpIKNnzOelJh4dES/zYuWNuzODIPxvRldC7ZziYJxf6HY7VIFH+ELh1/c
0hMWr2mDzLQ7YUnpfCC0DLPpzWCZQZBJM+Z5PbYbTOKxp+MV7fXwY50WhSECty68
K9GrxmndKghj1K9rGVk4n7F0gKWb5A4Y/tkVbrIvPOYPP/Cra/U1GK2XxQIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFJORBVEd7iqJh8d5BOiANlc4GzBKMB8GA1UdIwQY
MBaAFHIEe+FbJ1kC3PYX3D0OFtwfMIAiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMt
MWFiZTNhYzEwYWE2LzEvazVFRlVSM3VLb21IeDNrRTZJQTJWemdiTUVvLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMtMWFiZTNhYzEwYWE2
LzEvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBAFFPS51bGGx6biz/HR+r
BjdHrpvQhUKMGIjnwldq3DAqiD/DpNTVV3BgOcMbzYNzdK9kgsZbYfz0kYDoFq2g
4QUUgfeLzqljId7IOPRBoSzSVWUu41Vitg/ciYf4ge6YQtpqfnYYkWCf04MguMpW
7Y0y/QrnfRXuen9+00EXPJwdqiEgux4dhEcWxR/tXcP8L/bgWTVpzC0HH198gJ06
qrknismwQlV4C/sb40BDmwld3yzkJRMCTIwk5o498haZDOlUxjoHDKk233+bTF8U
7Pk+7WkbJwHiQtN10WmChpFF/pk8LrqkzQO1UxLo39b91RDz6wsgPtsrDFSFY5YG
3/U=
-----END CERTIFICATE-----
Generated at Wed Apr 30 17:36:08 2025 by rpki-client