Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/E1jsQ2fhKB4ofHxswwR6aUEke7U.roa
File: E1jsQ2fhKB4ofHxswwR6aUEke7U.roa (raw, json)
Hash identifier: N5JmktjF8JRgH62ic2htLdVvtqtKPI/7/oSHFJN6kYw=
Subject key identifier: 13:58:EC:43:67:E1:28:1E:28:7C:7C:6C:C3:04:7A:69:41:24:7B:B5
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0189F1D16348C609E763CDAD9DB07E08BC76
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/E1jsQ2fhKB4ofHxswwR6aUEke7U.roa
Signing time: Mon 14 Aug 2023 02:12:58 +0000
ROA not before: Mon 14 Aug 2023 02:12:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:188:7858:a003/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:189:a0e4:5c7d/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:f1:d1:63:48:c6:09:e7:63:cd:ad:9d:b0:7e:08:bc:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Aug 14 02:12:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=1358ec4367e1281e287c7c6cc3047a6941247bb5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:9f:4f:ce:8e:2d:83:3c:cc:00:7f:72:cc:1d:
9e:8e:62:1b:5e:e3:af:72:b2:db:23:c1:ff:e0:b6:
ca:c5:0e:0c:58:a6:3f:9d:98:28:14:94:79:e2:40:
d6:a3:36:ba:f8:0a:18:b4:58:16:0e:b1:0b:5d:20:
ac:bd:cc:24:86:26:fd:18:9a:3e:9e:31:7c:28:57:
a0:d8:10:d0:3e:04:79:3e:8b:f0:73:69:d4:b3:05:
f0:ec:e9:de:26:bc:81:a5:e7:80:e4:25:e7:f5:83:
96:b7:d4:ab:e9:bd:eb:84:61:80:d2:ae:12:7e:0a:
28:1c:70:ec:2c:f8:0e:fe:15:2a:43:5d:ff:e4:2c:
08:d6:f4:9f:11:5a:d0:d9:32:79:63:86:4d:4c:05:
7f:47:a5:69:cc:24:aa:29:66:6c:9e:09:1a:f9:14:
9b:36:70:b7:90:d7:97:35:b1:c3:f9:22:1f:5f:77:
6d:a6:39:73:f8:87:57:84:12:e4:de:ca:44:70:d8:
3c:91:c7:47:6f:25:63:27:6b:ea:e2:68:e5:a3:e1:
19:de:2c:11:a2:a7:19:5d:81:e2:9a:78:94:9c:b1:
b6:f8:c9:8a:69:1f:77:01:b6:6d:4a:f7:57:ce:9d:
5b:da:8f:b3:25:24:1c:30:14:85:c7:7e:66:6f:15:
73:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:58:EC:43:67:E1:28:1E:28:7C:7C:6C:C3:04:7A:69:41:24:7B:B5
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/E1jsQ2fhKB4ofHxswwR6aUEke7U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
58:96:21:12:0e:bf:70:a8:94:a0:dc:89:b4:04:4c:f2:18:ff:
97:c8:90:22:c6:f7:f1:7b:a0:3b:ea:d4:aa:f8:6b:c6:2f:e7:
72:05:8b:84:0e:30:98:86:74:66:b7:a3:99:dd:b6:76:23:28:
8f:74:59:af:b9:b4:f9:6c:7d:82:22:cb:a8:b9:9a:6c:bb:7e:
c6:24:b5:3f:34:7e:c3:63:4e:3a:19:4c:38:0a:9e:00:4c:0a:
6d:75:3e:b1:33:36:42:b8:d8:f8:fc:18:fc:22:da:b0:5e:3b:
b1:a5:2d:be:3e:f0:bc:51:7f:41:1e:ec:3f:a9:0c:e8:70:84:
a1:39:74:9b:e2:0f:5b:7e:a6:47:e4:7d:35:91:17:70:cc:6e:
d1:0e:ea:e9:14:17:ca:e0:ab:32:6a:8d:e4:2b:4f:db:f4:13:
26:91:fe:af:0c:44:4f:8a:b3:a6:56:8c:18:68:5f:9c:0c:ab:
10:ce:6e:b3:92:db:58:52:0a:91:e5:43:87:b2:8c:5b:52:00:
86:10:f6:17:58:d2:df:cc:a3:20:0a:53:09:e9:73:9f:5d:5c:
50:1c:54:41:10:8d:68:22:38:95:19:2f:be:bc:a7:41:01:17:
b1:81:80:59:11:18:0a:c9:ab:68:22:ad:19:0e:18:b3:01:ad:
78:da:88:9b
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYnx0WNIxgnnY82tnbB+CLx2MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcyMDQ3YmUxNWIyNzU5MDJkY2Y2MTdkYzNkMGUxNmRjMWYz
MDgwMjIwHhcNMjMwODE0MDIxMjU4WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxMzU4ZWM0MzY3ZTEyODFlMjg3YzdjNmNjMzA0N2E2OTQxMjQ3YmI1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr59Pzo4tgzzMAH9yzB2ejmIbXuOv
crLbI8H/4LbKxQ4MWKY/nZgoFJR54kDWoza6+AoYtFgWDrELXSCsvcwkhib9GJo+
njF8KFeg2BDQPgR5Povwc2nUswXw7OneJryBpeeA5CXn9YOWt9Sr6b3rhGGA0q4S
fgooHHDsLPgO/hUqQ13/5CwI1vSfEVrQ2TJ5Y4ZNTAV/R6VpzCSqKWZsngka+RSb
NnC3kNeXNbHD+SIfX3dtpjlz+IdXhBLk3spEcNg8kcdHbyVjJ2vq4mjlo+EZ3iwR
oqcZXYHimniUnLG2+MmKaR93AbZtSvdXzp1b2o+zJSQcMBSFx35mbxVz9QIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFBNY7ENn4SgeKHx8bMMEemlBJHu1MB8GA1UdIwQY
MBaAFHIEe+FbJ1kC3PYX3D0OFtwfMIAiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMt
MWFiZTNhYzEwYWE2LzEvRTFqc1EyZmhLQjRvZkh4c3d3UjZhVUVrZTdVLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMtMWFiZTNhYzEwYWE2
LzEvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBAFiWIRIOv3ColKDcibQE
TPIY/5fIkCLG9/F7oDvq1Kr4a8Yv53IFi4QOMJiGdGa3o5ndtnYjKI90Wa+5tPls
fYIiy6i5mmy7fsYktT80fsNjTjoZTDgKngBMCm11PrEzNkK42Pj8GPwi2rBeO7Gl
Lb4+8LxRf0Ee7D+pDOhwhKE5dJviD1t+pkfkfTWRF3DMbtEO6ukUF8rgqzJqjeQr
T9v0EyaR/q8MRE+Ks6ZWjBhoX5wMqxDObrOS21hSCpHlQ4eyjFtSAIYQ9hdY0t/M
oyAKUwnpc59dXFAcVEEQjWgiOJUZL768p0EBF7GBgFkRGArJq2girRkOGLMBrXja
iJs=
-----END CERTIFICATE-----
Generated at Mon Jun 9 01:30:49 2025 by rpki-client