Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/nEiKTLIicqAgY3j4Uu_-4xxLPrw.roa
File: nEiKTLIicqAgY3j4Uu_-4xxLPrw.roa (raw, json)
Hash identifier: OKvThBqntCkcp0QaQHqrYxZr6T3yCFL33uqxb85q7Bo=
Subject key identifier: 9C:48:8A:4C:B2:22:72:A0:20:63:78:F8:52:EF:FE:E3:1C:4B:3E:BC
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 01846FD77D5FA3905818DDA7C7CE0FC90E29
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/nEiKTLIicqAgY3j4Uu_-4xxLPrw.roa
Signing time: Sun 13 Nov 2022 07:15:04 +0000
ROA not before: Sun 13 Nov 2022 07:15:04 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:184:51c3:ad7c/128 maxlen: 128
2001:67c:64:ffff:0:184:3fbd:71f7/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:184:4250:a4df/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:6f:d7:7d:5f:a3:90:58:18:dd:a7:c7:ce:0f:c9:0e:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Nov 13 07:15:04 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=9c488a4cb22272a0206378f852effee31c4b3ebc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:47:24:2d:8c:b4:78:55:0d:e6:35:da:bc:18:
d8:3a:83:be:95:1a:74:19:cb:ce:b1:6a:36:1d:83:
58:7c:45:29:a6:a2:e7:e5:95:3d:5a:23:93:d7:32:
9c:70:fd:7f:aa:7b:17:a1:d3:1f:6e:ca:1f:ca:f7:
d9:2b:37:c7:bd:b4:07:4e:6d:36:df:9a:58:2f:30:
c8:0c:75:37:09:85:f2:e3:20:7d:bf:f7:1f:f6:6b:
71:84:0f:00:f4:8e:09:2b:11:df:fd:18:a5:d2:ca:
26:25:3b:b5:aa:4f:9e:44:06:6e:b6:04:20:c4:1f:
0c:19:b0:73:59:e6:59:35:04:0c:53:cb:a4:79:15:
bb:3f:94:ab:34:ba:fc:d7:b9:83:b1:40:5a:8f:c3:
35:e5:53:7a:51:a5:7d:b5:74:a6:48:ba:64:45:c6:
5d:87:88:2b:c9:73:ff:84:fc:9f:be:ce:20:c8:cf:
72:56:09:7a:a7:db:69:c7:d8:00:23:9f:3c:c9:f6:
2b:77:8b:4a:90:da:b8:f9:a5:ed:e0:f2:f7:36:9b:
1d:9a:08:52:82:12:7b:93:ee:0c:de:77:e9:ff:6d:
9f:c0:10:21:64:15:2c:41:8d:46:35:52:2c:93:0a:
5c:2c:9d:dc:f9:a0:6f:67:ad:38:2a:5d:ca:11:3e:
f6:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:48:8A:4C:B2:22:72:A0:20:63:78:F8:52:EF:FE:E3:1C:4B:3E:BC
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/nEiKTLIicqAgY3j4Uu_-4xxLPrw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
9b:51:a2:ae:1a:1c:1f:fd:34:52:57:d5:ff:c7:ab:f5:10:43:
0a:2b:61:54:94:d3:f4:43:a8:cc:50:96:f6:b7:1f:11:92:39:
a1:74:38:89:17:d8:f0:30:7e:27:6c:f9:4c:b8:40:97:53:a2:
f5:b1:2d:9a:a3:26:48:c3:d5:84:ce:f1:f8:24:09:d3:15:05:
8d:90:a6:b7:f0:4d:5e:62:6c:88:da:9b:f1:73:7a:e4:59:60:
b8:32:c7:cb:f7:54:58:61:46:02:2b:65:ca:b9:fe:78:b7:68:
26:41:44:9d:62:b6:45:78:da:91:ff:09:3c:83:87:c0:4d:fc:
51:e2:15:bc:5c:bc:a5:3f:41:92:ea:84:e9:60:0a:65:dc:64:
9f:4f:b5:39:a4:24:37:2a:3e:2a:f1:b9:ff:7d:e6:78:93:18:
0b:5c:c4:fe:f8:e7:e0:b3:32:4c:76:5c:bd:ed:d2:17:ef:4d:
46:ba:7f:19:02:38:62:ca:da:93:07:ca:00:71:87:2d:d9:ae:
4b:f3:6a:97:1c:db:cc:21:f6:b5:5a:6a:25:f7:c9:f6:7a:24:
91:80:8a:26:79:45:b8:52:32:68:cf:05:a5:81:42:f1:1b:58:
b7:65:c8:09:20:89:d9:ac:a7:13:2a:76:95:77:fc:01:4c:00:
0d:2d:da:b2
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYRv131fo5BYGN2nx84PyQ4pMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcyMDQ3YmUxNWIyNzU5MDJkY2Y2MTdkYzNkMGUxNmRjMWYz
MDgwMjIwHhcNMjIxMTEzMDcxNTA0WhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5YzQ4OGE0Y2IyMjI3MmEwMjA2Mzc4Zjg1MmVmZmVlMzFjNGIzZWJjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA30ckLYy0eFUN5jXavBjYOoO+lRp0
GcvOsWo2HYNYfEUppqLn5ZU9WiOT1zKccP1/qnsXodMfbsofyvfZKzfHvbQHTm02
35pYLzDIDHU3CYXy4yB9v/cf9mtxhA8A9I4JKxHf/Ril0somJTu1qk+eRAZutgQg
xB8MGbBzWeZZNQQMU8ukeRW7P5SrNLr817mDsUBaj8M15VN6UaV9tXSmSLpkRcZd
h4gryXP/hPyfvs4gyM9yVgl6p9tpx9gAI588yfYrd4tKkNq4+aXt4PL3NpsdmghS
ghJ7k+4M3nfp/22fwBAhZBUsQY1GNVIskwpcLJ3c+aBvZ604Kl3KET72+wIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFJxIikyyInKgIGN4+FLv/uMcSz68MB8GA1UdIwQY
MBaAFHIEe+FbJ1kC3PYX3D0OFtwfMIAiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMt
MWFiZTNhYzEwYWE2LzEvbkVpS1RMSWljcUFnWTNqNFV1Xy00eHhMUHJ3LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMtMWFiZTNhYzEwYWE2
LzEvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBAJtRoq4aHB/9NFJX1f/H
q/UQQworYVSU0/RDqMxQlva3HxGSOaF0OIkX2PAwfids+Uy4QJdTovWxLZqjJkjD
1YTO8fgkCdMVBY2QprfwTV5ibIjam/FzeuRZYLgyx8v3VFhhRgIrZcq5/ni3aCZB
RJ1itkV42pH/CTyDh8BN/FHiFbxcvKU/QZLqhOlgCmXcZJ9PtTmkJDcqPirxuf99
5niTGAtcxP745+CzMkx2XL3t0hfvTUa6fxkCOGLK2pMHygBxhy3Zrkvzapcc28wh
9rVaaiX3yfZ6JJGAiiZ5RbhSMmjPBaWBQvEbWLdlyAkgidmspxMqdpV3/AFMAA0t
2rI=
-----END CERTIFICATE-----
Generated at Fri May 2 11:59:59 2025 by rpki-client