Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/EdiY-lU18OcPOAsFsk2RfDEdkFw.roa
File: EdiY-lU18OcPOAsFsk2RfDEdkFw.roa (raw, json)
Hash identifier: Gx9zDzQ/t1V7TcysJuogVr9WKYresb5SH2Y5rx+4/+4=
Subject key identifier: 11:D8:98:FA:55:35:F0:E7:0F:38:0B:05:B2:4D:91:7C:31:1D:90:5C
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 01863CEE7DE3DCF7259410C6EE87E6F46E9B
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/EdiY-lU18OcPOAsFsk2RfDEdkFw.roa
Signing time: Fri 10 Feb 2023 20:05:08 +0000
ROA not before: Fri 10 Feb 2023 20:05:08 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:3ced:ac81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:3c:ee:7d:e3:dc:f7:25:94:10:c6:ee:87:e6:f4:6e:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Feb 10 20:05:08 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=11d898fa5535f0e70f380b05b24d917c311d905c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:19:07:18:e6:f6:b0:9f:f8:c5:aa:3f:1f:96:
be:09:51:86:1a:54:15:09:c6:5a:f2:24:c7:67:d7:
ad:8d:5c:62:ed:1d:7c:16:3f:67:47:05:c9:49:02:
56:09:95:fa:77:cd:86:95:12:12:09:27:f0:ab:fb:
3e:5f:01:e2:56:7a:89:b6:c8:99:b1:e6:b6:cd:82:
0b:ac:98:09:89:da:bb:7f:78:06:18:da:a7:7c:af:
d2:6e:2f:f0:39:a5:a3:57:69:96:d7:71:17:25:00:
d3:f6:34:5a:1c:9d:6f:4c:67:b3:cb:d6:22:a2:f0:
0c:67:ae:e4:09:36:f6:9f:73:12:dd:97:b7:27:6e:
08:5c:33:68:3f:e8:5b:54:73:75:93:70:7b:cc:f0:
69:b7:86:9d:86:fb:ee:e2:16:a8:e9:2e:49:86:2a:
d2:74:b3:cc:e4:3c:f6:f1:b1:75:dd:45:a4:10:94:
a5:42:1b:ed:eb:9a:89:cc:2f:78:6a:53:cc:aa:66:
11:91:ef:23:3b:ee:a5:be:52:27:9f:c5:13:c1:9c:
e2:cc:54:0c:66:ff:f5:ff:02:47:f5:1a:1b:26:5d:
8b:6a:b8:b5:51:c9:4c:91:e8:0e:9c:a1:06:d5:45:
2c:6b:66:86:c6:82:10:15:4a:f5:ca:11:b4:91:ec:
38:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:D8:98:FA:55:35:F0:E7:0F:38:0B:05:B2:4D:91:7C:31:1D:90:5C
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/EdiY-lU18OcPOAsFsk2RfDEdkFw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
47:c4:c8:b7:10:9e:c9:3a:5d:d6:e4:a9:bc:8f:60:1e:a3:78:
04:3f:6e:80:1b:07:45:d1:d3:f5:4e:30:e0:15:81:0d:21:91:
4d:5b:43:24:dc:c7:45:f2:2f:fc:fb:ea:9e:d5:de:5e:01:97:
7f:39:39:87:f7:0f:42:54:33:51:1f:99:5d:12:75:bf:d3:15:
02:59:68:77:a4:f9:9f:5f:66:94:fb:7c:61:61:d4:e9:da:07:
80:69:ae:36:c4:6c:a9:85:93:6f:c7:f6:66:cc:f9:0c:05:ac:
4d:16:29:ec:95:8d:36:a2:81:6d:7d:40:b3:40:3d:8c:7f:e9:
06:6a:3d:c8:6f:aa:76:12:3e:e2:7b:71:f3:87:0f:f9:a0:81:
76:de:35:79:ca:3d:a3:2d:c3:c7:5e:4b:ed:44:2e:44:6b:cc:
d7:6d:44:14:dc:73:34:df:b3:33:4f:df:16:78:36:73:74:dd:
37:5b:98:57:f0:ba:ea:62:48:11:2c:41:e3:81:62:4f:c8:0b:
e8:e8:21:b4:1c:01:d6:38:30:a2:4b:3a:dc:c4:3f:10:93:74:
5c:72:37:c1:84:cc:b5:ed:3b:65:22:cb:34:3e:04:6d:09:03:
63:1c:3e:4a:9e:37:7b:68:95:4a:84:41:57:d9:2b:c6:24:05:
f0:7f:bc:19
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYY87n3j3PcllBDG7ofm9G6bMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcyMDQ3YmUxNWIyNzU5MDJkY2Y2MTdkYzNkMGUxNmRjMWYz
MDgwMjIwHhcNMjMwMjEwMjAwNTA4WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxMWQ4OThmYTU1MzVmMGU3MGYzODBiMDViMjRkOTE3YzMxMWQ5MDVjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjBkHGOb2sJ/4xao/H5a+CVGGGlQV
CcZa8iTHZ9etjVxi7R18Fj9nRwXJSQJWCZX6d82GlRISCSfwq/s+XwHiVnqJtsiZ
sea2zYILrJgJidq7f3gGGNqnfK/Sbi/wOaWjV2mW13EXJQDT9jRaHJ1vTGezy9Yi
ovAMZ67kCTb2n3MS3Ze3J24IXDNoP+hbVHN1k3B7zPBpt4adhvvu4hao6S5JhirS
dLPM5Dz28bF13UWkEJSlQhvt65qJzC94alPMqmYRke8jO+6lvlInn8UTwZzizFQM
Zv/1/wJH9RobJl2Lari1UclMkegOnKEG1UUsa2aGxoIQFUr1yhG0kew4swIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFBHYmPpVNfDnDzgLBbJNkXwxHZBcMB8GA1UdIwQY
MBaAFHIEe+FbJ1kC3PYX3D0OFtwfMIAiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMt
MWFiZTNhYzEwYWE2LzEvRWRpWS1sVTE4T2NQT0FzRnNrMlJmREVka0Z3LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMtMWFiZTNhYzEwYWE2
LzEvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBAEfEyLcQnsk6XdbkqbyP
YB6jeAQ/boAbB0XR0/VOMOAVgQ0hkU1bQyTcx0XyL/z76p7V3l4Bl385OYf3D0JU
M1EfmV0Sdb/TFQJZaHek+Z9fZpT7fGFh1OnaB4BprjbEbKmFk2/H9mbM+QwFrE0W
KeyVjTaigW19QLNAPYx/6QZqPchvqnYSPuJ7cfOHD/mggXbeNXnKPaMtw8deS+1E
LkRrzNdtRBTcczTfszNP3xZ4NnN03TdbmFfwuupiSBEsQeOBYk/IC+joIbQcAdY4
MKJLOtzEPxCTdFxyN8GEzLXtO2UiyzQ+BG0JA2McPkqeN3tolUqEQVfZK8YkBfB/
vBk=
-----END CERTIFICATE-----
Generated at Sun Jun 15 11:44:23 2025 by rpki-client