Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/Ei3pCaWIEnVDpSJ2-oSCDn15a0c.roa
File: Ei3pCaWIEnVDpSJ2-oSCDn15a0c.roa (raw, json)
Hash identifier: TsSprp94Mw+fHS8O1lIgVeMzp0ActxG25D1SPCdL9k8=
Subject key identifier: 12:2D:E9:09:A5:88:12:75:43:A5:22:76:FA:84:82:0E:7D:79:6B:47
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0186E7BB753A3B2FF46ADAC1C90D22F66FFD
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/Ei3pCaWIEnVDpSJ2-oSCDn15a0c.roa
Signing time: Thu 16 Mar 2023 00:04:27 +0000
ROA not before: Thu 16 Mar 2023 00:04:27 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:e7bb:5241/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:e7:bb:75:3a:3b:2f:f4:6a:da:c1:c9:0d:22:f6:6f:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Mar 16 00:04:27 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=122de909a588127543a52276fa84820e7d796b47
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:de:1f:a2:4d:28:68:3b:c6:e0:7f:33:c1:5e:
5f:9e:32:2a:11:f8:d6:4c:25:6e:4b:4a:bf:27:e5:
dd:46:b9:a8:16:88:2a:42:1a:1e:66:7c:cc:d9:d1:
6a:a6:20:e3:af:2f:fb:79:c9:21:ad:7b:fd:19:24:
d7:cd:b6:b1:aa:e6:d9:eb:b4:d1:28:3f:bc:90:f2:
c2:bd:a0:35:3f:b5:08:9f:a4:40:df:0f:3e:65:12:
7c:38:56:25:6e:97:90:e6:c4:8d:a4:f6:4a:7d:30:
c4:10:80:f8:15:66:05:a4:3e:28:bc:8d:67:54:f2:
f7:c4:0a:ab:10:91:5a:09:da:8c:8b:f4:36:a7:10:
ec:67:0c:4a:cb:b4:b8:d9:ad:0c:b9:13:ad:50:08:
b8:ef:df:63:5e:17:97:c1:7c:2a:a7:82:f3:92:93:
9f:e4:6f:30:3d:33:87:f0:59:eb:19:44:f4:aa:05:
8b:17:f8:bd:45:fb:c4:15:73:a6:84:2e:3c:af:41:
6e:7d:ff:01:3f:9a:a2:c9:78:be:4e:63:a8:f1:ee:
f2:90:89:94:6f:9a:bd:2d:6a:d0:f0:a1:a6:58:df:
cc:fb:d5:83:3c:bd:ba:51:cd:dd:57:44:8d:a5:82:
e9:ee:7f:05:f8:f4:dd:73:0d:ed:17:92:ad:cb:e3:
2e:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:2D:E9:09:A5:88:12:75:43:A5:22:76:FA:84:82:0E:7D:79:6B:47
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/Ei3pCaWIEnVDpSJ2-oSCDn15a0c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
4a:ef:56:82:7c:ee:a7:44:15:b7:9c:05:4c:eb:d2:0c:a5:e3:
7a:18:8c:99:3f:63:6a:6b:f3:e8:dc:eb:b2:83:48:20:f2:28:
56:c8:34:bb:19:06:f1:a2:45:9b:c1:39:2e:4b:d9:a2:87:b4:
13:de:cc:e5:49:53:fb:47:16:75:fe:fa:0e:14:4d:8b:40:de:
07:3e:8d:fb:b4:63:0a:46:5a:31:b6:84:18:55:58:f0:4f:ec:
39:a9:47:27:f3:e7:df:c2:b5:f1:65:34:d1:ad:fc:41:66:d7:
a4:25:ac:2d:4f:3f:e7:9a:5c:25:51:ac:e4:a3:5d:86:93:8d:
8c:10:be:d6:6a:1e:e7:8c:4a:04:21:d8:9d:5b:57:1c:ec:fc:
26:d2:38:78:b0:49:6d:0c:9b:b4:42:c4:54:6b:93:ce:c5:ff:
64:00:8a:50:5a:de:cc:68:3f:02:81:ca:ae:2c:6d:2d:3a:ba:
40:e0:67:70:25:bd:c3:ab:58:2a:c3:59:ae:54:85:5e:d6:c6:
ee:3c:bb:13:8b:35:17:de:fc:51:0d:7c:dc:62:97:8d:09:db:
86:98:35:e9:81:03:f6:17:22:2b:9b:4a:7b:d7:a3:0e:78:08:
7c:ee:9b:b2:2f:1f:90:b5:f9:4f:ce:e9:20:77:fb:6d:29:1e:
55:35:46:0b
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYbnu3U6Oy/0atrByQ0i9m/9MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcyMDQ3YmUxNWIyNzU5MDJkY2Y2MTdkYzNkMGUxNmRjMWYz
MDgwMjIwHhcNMjMwMzE2MDAwNDI3WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxMjJkZTkwOWE1ODgxMjc1NDNhNTIyNzZmYTg0ODIwZTdkNzk2YjQ3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhN4fok0oaDvG4H8zwV5fnjIqEfjW
TCVuS0q/J+XdRrmoFogqQhoeZnzM2dFqpiDjry/7eckhrXv9GSTXzbaxqubZ67TR
KD+8kPLCvaA1P7UIn6RA3w8+ZRJ8OFYlbpeQ5sSNpPZKfTDEEID4FWYFpD4ovI1n
VPL3xAqrEJFaCdqMi/Q2pxDsZwxKy7S42a0MuROtUAi4799jXheXwXwqp4LzkpOf
5G8wPTOH8FnrGUT0qgWLF/i9RfvEFXOmhC48r0Fuff8BP5qiyXi+TmOo8e7ykImU
b5q9LWrQ8KGmWN/M+9WDPL26Uc3dV0SNpYLp7n8F+PTdcw3tF5Kty+MuNQIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFBIt6QmliBJ1Q6UidvqEgg59eWtHMB8GA1UdIwQY
MBaAFHIEe+FbJ1kC3PYX3D0OFtwfMIAiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMt
MWFiZTNhYzEwYWE2LzEvRWkzcENhV0lFblZEcFNKMi1vU0NEbjE1YTBjLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMtMWFiZTNhYzEwYWE2
LzEvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBAErvVoJ87qdEFbecBUzr
0gyl43oYjJk/Y2pr8+jc67KDSCDyKFbINLsZBvGiRZvBOS5L2aKHtBPezOVJU/tH
FnX++g4UTYtA3gc+jfu0YwpGWjG2hBhVWPBP7DmpRyfz59/CtfFlNNGt/EFm16Ql
rC1PP+eaXCVRrOSjXYaTjYwQvtZqHueMSgQh2J1bVxzs/CbSOHiwSW0Mm7RCxFRr
k87F/2QAilBa3sxoPwKByq4sbS06ukDgZ3AlvcOrWCrDWa5UhV7Wxu48uxOLNRfe
/FENfNxil40J24aYNemBA/YXIiubSnvXow54CHzum7IvH5C1+U/O6SB3+20pHlU1
Rgs=
-----END CERTIFICATE-----
Generated at Mon Jun 9 00:04:46 2025 by rpki-client