Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/EAL99BHewURGFkXtI2wg6Yr5b6U.roa
File: EAL99BHewURGFkXtI2wg6Yr5b6U.roa (raw, json)
Hash identifier: s7JJWl6214EMEXIJvTzwdFCov5KOsr3VU/+ULAERirE=
Subject key identifier: 10:02:FD:F4:11:DE:C1:44:46:16:45:ED:23:6C:20:E9:8A:F9:6F:A5
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0187F6573E19C026AD36CD2756E4EFFD5C1D
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/EAL99BHewURGFkXtI2wg6Yr5b6U.roa
Signing time: Sun 07 May 2023 13:12:05 +0000
ROA not before: Sun 07 May 2023 13:12:05 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:187:4695:a68a/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:187:b2b8:a7dd/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:f6:57:3e:19:c0:26:ad:36:cd:27:56:e4:ef:fd:5c:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: May 7 13:12:05 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=1002fdf411dec144461645ed236c20e98af96fa5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:f8:0c:f9:ec:a5:3f:03:0b:3a:87:91:8f:9e:
8e:f7:cc:e1:fd:c6:64:ce:88:9a:02:0f:e7:c6:4e:
79:1d:3b:cd:8f:01:92:63:31:81:23:1d:c1:e2:61:
ec:32:19:a8:3e:bc:2b:7f:53:99:9d:56:88:c6:bb:
76:ab:14:63:fa:46:f9:89:1e:11:ba:63:1c:65:37:
87:78:fd:9d:ff:dc:1a:aa:60:48:e1:b4:26:49:8b:
79:34:1f:cd:ad:90:ab:ba:a6:e1:e1:1c:a7:9a:6a:
cd:a0:01:01:59:4f:cc:3b:e9:23:07:ef:26:15:30:
f4:1d:f6:bb:cd:9c:69:e7:97:ec:b9:2b:6b:79:21:
c8:86:88:df:28:a3:c3:04:88:85:39:cc:fa:87:a7:
d3:9b:35:5d:e0:74:28:4e:fb:da:48:77:33:f3:6a:
e8:fb:08:63:62:f8:7d:05:01:38:b1:ce:d3:03:64:
4c:a1:02:66:12:24:e9:de:37:2e:8f:24:dd:cb:23:
9e:7c:c3:d3:c5:63:69:e2:55:7a:95:00:4e:4b:57:
5e:36:40:ef:34:c7:9d:1c:d9:7c:29:7a:c9:29:ed:
29:8d:0f:94:3a:67:ea:25:cf:21:1a:f9:74:4f:9a:
f9:b8:b7:34:fd:02:3e:f3:ad:9e:9e:a0:ea:18:63:
2e:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:02:FD:F4:11:DE:C1:44:46:16:45:ED:23:6C:20:E9:8A:F9:6F:A5
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/EAL99BHewURGFkXtI2wg6Yr5b6U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
37:dc:7c:a6:01:15:d4:a8:32:cd:9b:77:f6:f6:de:17:7b:6c:
32:6e:61:d6:e5:dc:30:be:b8:1d:32:ca:44:a2:bf:40:f9:f2:
c5:3b:13:e6:ee:1c:04:30:43:a5:2f:fa:01:f7:45:a6:33:70:
16:bb:31:8f:a7:6d:d4:68:16:28:de:62:99:4f:b7:77:82:9a:
fb:a5:b6:ab:ea:d9:ea:ec:80:1d:38:72:6a:20:5a:fe:1d:11:
50:09:09:7a:a1:95:fd:3f:86:d1:1e:8c:ba:1a:1f:3f:f4:56:
61:e6:f5:62:39:45:25:99:8d:37:53:58:db:58:e9:57:69:5a:
ff:22:9a:1b:43:d9:ec:97:1c:bd:a5:b8:60:33:a1:db:a9:53:
e2:9d:fc:e8:6d:56:ad:3e:c0:23:03:cf:48:57:82:5e:31:a1:
fe:49:e8:81:77:1a:0c:b2:32:35:34:a8:5f:20:db:f1:b6:8a:
7b:6e:6a:d0:a7:c6:3b:81:bd:21:39:e5:06:49:2a:a5:a8:21:
59:78:b5:bc:54:b2:36:31:95:27:39:58:e9:e1:f8:e5:3b:ce:
7b:69:46:58:b4:bd:b0:22:28:df:7f:6b:87:71:12:1a:90:87:
d2:d4:5e:fb:fa:d7:ab:6c:d1:a9:ec:70:4e:81:a1:af:f1:84:
c3:80:61:23
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYf2Vz4ZwCatNs0nVuTv/VwdMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcyMDQ3YmUxNWIyNzU5MDJkY2Y2MTdkYzNkMGUxNmRjMWYz
MDgwMjIwHhcNMjMwNTA3MTMxMjA1WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxMDAyZmRmNDExZGVjMTQ0NDYxNjQ1ZWQyMzZjMjBlOThhZjk2ZmE1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv/gM+eylPwMLOoeRj56O98zh/cZk
zoiaAg/nxk55HTvNjwGSYzGBIx3B4mHsMhmoPrwrf1OZnVaIxrt2qxRj+kb5iR4R
umMcZTeHeP2d/9waqmBI4bQmSYt5NB/NrZCruqbh4RynmmrNoAEBWU/MO+kjB+8m
FTD0Hfa7zZxp55fsuStreSHIhojfKKPDBIiFOcz6h6fTmzVd4HQoTvvaSHcz82ro
+whjYvh9BQE4sc7TA2RMoQJmEiTp3jcujyTdyyOefMPTxWNp4lV6lQBOS1deNkDv
NMedHNl8KXrJKe0pjQ+UOmfqJc8hGvl0T5r5uLc0/QI+862enqDqGGMuswIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFBAC/fQR3sFERhZF7SNsIOmK+W+lMB8GA1UdIwQY
MBaAFHIEe+FbJ1kC3PYX3D0OFtwfMIAiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMt
MWFiZTNhYzEwYWE2LzEvRUFMOTlCSGV3VVJHRmtYdEkyd2c2WXI1YjZVLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMtMWFiZTNhYzEwYWE2
LzEvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBADfcfKYBFdSoMs2bd/b2
3hd7bDJuYdbl3DC+uB0yykSiv0D58sU7E+buHAQwQ6Uv+gH3RaYzcBa7MY+nbdRo
FijeYplPt3eCmvultqvq2ersgB04cmogWv4dEVAJCXqhlf0/htEejLoaHz/0VmHm
9WI5RSWZjTdTWNtY6VdpWv8imhtD2eyXHL2luGAzodupU+Kd/OhtVq0+wCMDz0hX
gl4xof5J6IF3GgyyMjU0qF8g2/G2intuatCnxjuBvSE55QZJKqWoIVl4tbxUsjYx
lSc5WOnh+OU7zntpRli0vbAiKN9/a4dxEhqQh9LUXvv616ts0anscE6Boa/xhMOA
YSM=
-----END CERTIFICATE-----
Generated at Mon Jun 9 04:56:12 2025 by rpki-client