Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/x_EnTgue9Gp2H0F_kbb6BWtD7gs.roa
File: x_EnTgue9Gp2H0F_kbb6BWtD7gs.roa (raw, json)
Hash identifier: hgqKDAlcnHTqlKoECPjQ9VQHL+Gd/0lv30oS7sUpsjs=
Subject key identifier: C7:F1:27:4E:0B:9E:F4:6A:76:1F:41:7F:91:B6:FA:05:6B:43:EE:0B
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0186AC4BE7B8FD18441C5B407AB3DA7EE07E
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/x_EnTgue9Gp2H0F_kbb6BWtD7gs.roa
Signing time: Sat 04 Mar 2023 11:05:00 +0000
ROA not before: Sat 04 Mar 2023 11:05:00 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:ac4b:2126/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:ac:4b:e7:b8:fd:18:44:1c:5b:40:7a:b3:da:7e:e0:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Mar 4 11:05:00 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=c7f1274e0b9ef46a761f417f91b6fa056b43ee0b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:21:12:8b:4e:8d:c9:67:5b:ee:b1:a3:35:a6:
8e:66:d2:67:1c:c0:06:14:fe:f5:ad:92:9c:e5:1d:
dc:c9:97:6d:2f:57:2c:61:95:ad:ca:17:6e:c0:3e:
89:5a:7a:6c:6c:36:85:06:5d:5f:c4:c5:4f:52:8f:
94:cb:6b:37:d1:0d:35:f0:d5:0f:a3:82:69:f6:b9:
54:df:10:62:af:64:59:2a:73:5e:d1:cb:4f:8c:d3:
55:b8:f1:cf:8e:75:b3:09:da:62:17:8d:dd:8f:37:
12:1b:8f:57:09:29:4e:a6:5c:6b:1c:e4:9a:07:ed:
13:59:d0:93:67:76:5a:41:04:20:bd:cc:80:40:cd:
af:0a:13:02:15:38:59:d9:96:77:c7:19:88:98:e3:
ff:9c:73:b5:a1:87:57:bc:d7:5d:8e:69:62:46:ba:
3e:a9:a3:e0:ba:87:7c:d1:40:2c:e9:c3:16:ea:06:
15:07:e8:e2:2d:8c:73:75:27:6c:ed:c8:0a:f1:fc:
34:55:54:06:59:24:77:74:ee:49:60:33:b6:09:79:
f7:52:73:e9:f6:da:fd:b8:5c:77:a6:1b:ae:84:c5:
7c:b2:d1:40:08:75:29:89:f0:aa:32:c2:2e:e2:44:
2f:54:b0:67:b1:7d:c7:f7:0b:64:41:a2:f7:02:d3:
68:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:F1:27:4E:0B:9E:F4:6A:76:1F:41:7F:91:B6:FA:05:6B:43:EE:0B
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/x_EnTgue9Gp2H0F_kbb6BWtD7gs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
00:72:e7:03:6b:7c:86:3c:67:e9:c8:69:08:97:11:f8:a3:9d:
3d:af:bd:06:36:58:84:cf:fe:4d:cb:d4:88:2c:2c:86:dc:8a:
b6:d9:dc:f4:2c:88:2c:58:66:0c:7e:ba:3a:24:06:6a:b3:a2:
a9:fb:f5:f7:2c:5a:3f:34:49:de:e5:a0:78:ea:18:ab:52:0c:
76:de:f6:24:87:df:1e:5e:b2:96:35:90:fb:3e:e1:b3:0f:2b:
2d:e7:b1:5c:8f:4d:1a:1d:f6:8e:a5:10:f0:e8:e2:15:1c:59:
d3:6d:59:98:8c:68:11:7c:b5:82:40:2c:b8:b9:20:9c:70:f6:
ed:31:39:9c:f8:67:9d:18:07:19:9e:e6:c9:db:3b:38:65:a1:
cc:96:99:a6:17:18:b4:94:01:25:20:f5:bc:8b:63:d3:0b:b8:
76:0e:ea:c5:71:12:42:0b:05:c2:f8:2f:a6:eb:d4:c2:ef:b4:
b6:02:62:2a:01:a6:cb:0b:f5:d1:54:79:e5:2c:aa:5f:1e:aa:
8b:d3:ca:93:b2:7e:9d:ab:13:79:09:be:e1:f8:39:9a:c1:03:
61:04:b6:7f:ec:57:4f:2e:5a:f7:1e:f2:f0:3d:e4:e5:e1:dd:
f4:69:06:5f:f9:2b:72:fd:f6:1d:e4:6c:13:32:a6:c4:02:03:
1f:97:3b:2a
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYasS+e4/RhEHFtAerPafuB+MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcyMDQ3YmUxNWIyNzU5MDJkY2Y2MTdkYzNkMGUxNmRjMWYz
MDgwMjIwHhcNMjMwMzA0MTEwNTAwWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjN2YxMjc0ZTBiOWVmNDZhNzYxZjQxN2Y5MWI2ZmEwNTZiNDNlZTBiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsCESi06NyWdb7rGjNaaOZtJnHMAG
FP71rZKc5R3cyZdtL1csYZWtyhduwD6JWnpsbDaFBl1fxMVPUo+Uy2s30Q018NUP
o4Jp9rlU3xBir2RZKnNe0ctPjNNVuPHPjnWzCdpiF43djzcSG49XCSlOplxrHOSa
B+0TWdCTZ3ZaQQQgvcyAQM2vChMCFThZ2ZZ3xxmImOP/nHO1oYdXvNddjmliRro+
qaPguod80UAs6cMW6gYVB+jiLYxzdSds7cgK8fw0VVQGWSR3dO5JYDO2CXn3UnPp
9tr9uFx3phuuhMV8stFACHUpifCqMsIu4kQvVLBnsX3H9wtkQaL3AtNoAwIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFMfxJ04LnvRqdh9Bf5G2+gVrQ+4LMB8GA1UdIwQY
MBaAFHIEe+FbJ1kC3PYX3D0OFtwfMIAiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMt
MWFiZTNhYzEwYWE2LzEveF9FblRndWU5R3AySDBGX2tiYjZCV3REN2dzLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMtMWFiZTNhYzEwYWE2
LzEvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBAABy5wNrfIY8Z+nIaQiX
EfijnT2vvQY2WITP/k3L1IgsLIbcirbZ3PQsiCxYZgx+ujokBmqzoqn79fcsWj80
Sd7loHjqGKtSDHbe9iSH3x5espY1kPs+4bMPKy3nsVyPTRod9o6lEPDo4hUcWdNt
WZiMaBF8tYJALLi5IJxw9u0xOZz4Z50YBxme5snbOzhlocyWmaYXGLSUASUg9byL
Y9MLuHYO6sVxEkILBcL4L6br1MLvtLYCYioBpssL9dFUeeUsql8eqovTypOyfp2r
E3kJvuH4OZrBA2EEtn/sV08uWvce8vA95OXh3fRpBl/5K3L99h3kbBMypsQCAx+X
Oyo=
-----END CERTIFICATE-----
Generated at Thu May 1 07:24:04 2025 by rpki-client