Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/5rErVbBdBe-CvHvq2l9T9eoez1E.roa
File: 5rErVbBdBe-CvHvq2l9T9eoez1E.roa (raw, json)
Hash identifier: G/HckzTNnROATIZ5oYLiNtwywhbQE7HaJIYs7DZs6pM=
Subject key identifier: E6:B1:2B:55:B0:5D:05:EF:82:BC:7B:EA:DA:5F:53:F5:EA:1E:CF:51
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 01847E6DECFFC455F61C99E271EC3AC3F88F
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/5rErVbBdBe-CvHvq2l9T9eoez1E.roa
Signing time: Wed 16 Nov 2022 03:14:04 +0000
ROA not before: Wed 16 Nov 2022 03:14:04 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:184:51c3:ad7c/128 maxlen: 128
2001:67c:64:ffff:0:184:3fbd:71f7/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:184:4250:a4df/128 maxlen: 128
2001:67c:64:ffff:0:184:75cf:c8d9/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:7e:6d:ec:ff:c4:55:f6:1c:99:e2:71:ec:3a:c3:f8:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Nov 16 03:14:04 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=e6b12b55b05d05ef82bc7beada5f53f5ea1ecf51
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:91:95:c5:af:8c:23:05:2a:5b:fa:59:cd:d0:
12:e6:3e:c2:64:da:e6:ff:52:d4:d8:33:2c:9a:cc:
61:1f:6f:27:ac:92:84:80:86:f5:70:9e:66:be:20:
60:c6:7b:f1:f8:f7:aa:0d:23:36:4f:2b:69:10:d9:
36:4e:01:dc:38:41:05:fa:54:3f:e1:75:f4:48:89:
fd:a0:74:36:34:cd:81:83:31:99:09:e3:76:12:8a:
d1:ca:9c:d0:31:54:02:01:a7:6c:7a:05:91:bc:ae:
32:ec:5d:bc:39:78:dd:28:74:bf:4b:30:87:e9:b7:
5c:e1:21:54:09:d4:e8:9a:4e:11:16:93:35:e0:18:
40:da:80:d1:80:1a:9b:30:bc:82:d6:0d:f8:c7:f6:
d4:f9:c2:d7:57:4b:61:00:6e:85:2c:f6:84:d9:5a:
bb:ae:39:f4:de:63:f4:d1:ef:ad:5e:30:64:21:07:
b4:f2:e9:45:d4:ee:a3:a6:cb:cc:15:8d:30:17:70:
93:f1:32:5b:b4:24:bd:9d:95:87:28:ae:42:82:d0:
f6:ae:b5:c4:e6:da:47:8a:9e:c2:9b:da:b3:87:08:
1b:9e:7c:42:f4:1e:d8:2d:9e:4d:b7:15:52:67:11:
e5:92:32:0f:dc:59:b8:72:e6:24:25:08:19:6d:81:
da:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:B1:2B:55:B0:5D:05:EF:82:BC:7B:EA:DA:5F:53:F5:EA:1E:CF:51
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/5rErVbBdBe-CvHvq2l9T9eoez1E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
75:8b:f8:52:77:91:32:1a:84:86:7b:74:6b:2d:78:a8:66:62:
e2:2d:da:50:dc:e4:2d:39:81:b2:fa:23:fc:a9:33:9b:b9:1e:
ca:44:bd:26:75:f7:ab:e3:90:16:c2:b7:73:6f:b2:6f:5c:0c:
a6:23:3f:bf:97:53:8d:7b:7f:dc:07:55:81:4e:4e:a5:38:d8:
ff:e2:73:9e:ad:1c:4d:50:0e:e3:9a:2b:56:f1:0b:ab:f6:2f:
e8:3c:c5:ae:cb:5b:d5:5f:85:ad:6d:51:93:44:4c:b8:50:01:
a1:83:b9:47:20:7b:de:6b:f3:14:b9:ac:d0:07:b0:15:02:12:
46:24:13:b6:72:13:79:3e:5a:f0:93:87:2b:f1:74:e6:76:c1:
f4:bb:17:e1:2a:5d:45:6c:0f:89:d2:41:2a:ce:c3:77:22:33:
18:01:eb:3f:7b:55:81:0d:63:90:3e:c6:a6:e8:7d:79:17:e9:
2e:bf:a5:29:46:69:f0:a8:1b:0a:52:74:a3:5e:d5:3b:da:9a:
63:fc:8b:b6:3a:f7:ef:aa:2c:67:c5:1d:72:7f:f6:fd:bf:5e:
1c:c0:22:fc:75:e8:88:29:e9:d1:d0:d6:00:d3:0c:db:41:c9:
31:f1:95:25:2b:5f:1e:23:1c:4f:77:21:96:51:95:a9:7e:f9:
2a:33:10:30
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYR+bez/xFX2HJnicew6w/iPMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcyMDQ3YmUxNWIyNzU5MDJkY2Y2MTdkYzNkMGUxNmRjMWYz
MDgwMjIwHhcNMjIxMTE2MDMxNDA0WhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlNmIxMmI1NWIwNWQwNWVmODJiYzdiZWFkYTVmNTNmNWVhMWVjZjUxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj5GVxa+MIwUqW/pZzdAS5j7CZNrm
/1LU2DMsmsxhH28nrJKEgIb1cJ5mviBgxnvx+PeqDSM2TytpENk2TgHcOEEF+lQ/
4XX0SIn9oHQ2NM2BgzGZCeN2EorRypzQMVQCAadsegWRvK4y7F28OXjdKHS/SzCH
6bdc4SFUCdTomk4RFpM14BhA2oDRgBqbMLyC1g34x/bU+cLXV0thAG6FLPaE2Vq7
rjn03mP00e+tXjBkIQe08ulF1O6jpsvMFY0wF3CT8TJbtCS9nZWHKK5CgtD2rrXE
5tpHip7Cm9qzhwgbnnxC9B7YLZ5NtxVSZxHlkjIP3Fm4cuYkJQgZbYHaUQIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFOaxK1WwXQXvgrx76tpfU/XqHs9RMB8GA1UdIwQY
MBaAFHIEe+FbJ1kC3PYX3D0OFtwfMIAiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMt
MWFiZTNhYzEwYWE2LzEvNXJFclZiQmRCZS1Ddkh2cTJsOVQ5ZW9lejFFLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMtMWFiZTNhYzEwYWE2
LzEvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBAHWL+FJ3kTIahIZ7dGst
eKhmYuIt2lDc5C05gbL6I/ypM5u5HspEvSZ196vjkBbCt3Nvsm9cDKYjP7+XU417
f9wHVYFOTqU42P/ic56tHE1QDuOaK1bxC6v2L+g8xa7LW9Vfha1tUZNETLhQAaGD
uUcge95r8xS5rNAHsBUCEkYkE7ZyE3k+WvCThyvxdOZ2wfS7F+EqXUVsD4nSQSrO
w3ciMxgB6z97VYENY5A+xqbofXkX6S6/pSlGafCoGwpSdKNe1TvammP8i7Y69++q
LGfFHXJ/9v2/XhzAIvx16Igp6dHQ1gDTDNtByTHxlSUrXx4jHE93IZZRlal++Soz
EDA=
-----END CERTIFICATE-----
Generated at Mon Jun 9 07:47:51 2025 by rpki-client