Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/e8K-eIJD_KxIdVtrQ4TuV0Pqbfk.roa
File: e8K-eIJD_KxIdVtrQ4TuV0Pqbfk.roa (raw, json)
Hash identifier: rdq0seeLktokQGhLKDkzsiY9MNk8bKjN6YK3XVhqtx0=
Subject key identifier: 7B:C2:BE:78:82:43:FC:AC:48:75:5B:6B:43:84:EE:57:43:EA:6D:F9
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0186E0DDA3F56366AF349101648C573B88B1
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/e8K-eIJD_KxIdVtrQ4TuV0Pqbfk.roa
Signing time: Tue 14 Mar 2023 16:04:27 +0000
ROA not before: Tue 14 Mar 2023 16:04:27 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:e0dd:7df9/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:e0:dd:a3:f5:63:66:af:34:91:01:64:8c:57:3b:88:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Mar 14 16:04:27 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=7bc2be788243fcac48755b6b4384ee5743ea6df9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:48:ca:1b:57:23:6e:e1:eb:73:c0:21:9d:a7:
e0:10:77:b9:19:9c:4b:d3:2e:f9:06:1f:16:86:89:
54:31:ac:c6:e3:8f:e1:89:b2:0c:34:79:54:15:57:
49:9c:3c:48:69:2f:2d:9a:e6:22:b0:26:4f:e4:cf:
e7:da:d2:d7:29:8d:34:3d:5a:8a:7b:92:4f:c3:d5:
f1:0c:a3:21:c4:ba:59:fc:46:c5:d0:aa:cb:6a:ef:
cb:37:10:a3:8a:30:97:93:c0:4c:97:3e:f4:dc:b2:
fd:d0:76:85:bd:ae:2a:ab:99:8e:cc:0b:62:80:b1:
d2:af:d3:98:23:ce:2a:4d:1e:83:58:41:7d:a0:fc:
de:1d:f9:6a:95:12:2f:63:53:d4:ee:73:93:74:b6:
f4:f9:22:72:48:ef:1d:ff:2e:05:18:e0:d4:80:5b:
88:a8:78:12:27:78:a9:bc:55:9b:88:9f:13:31:e8:
5a:47:c8:ac:0f:ef:63:92:86:c1:0a:59:f3:e6:e4:
11:51:2d:7e:22:f1:9a:79:56:f2:8a:55:7e:94:ca:
53:90:e3:05:64:c6:39:91:38:85:dd:e5:0a:9b:0b:
60:82:9a:6f:22:96:f6:ae:00:cf:20:44:da:02:86:
4a:f2:21:a1:0a:ba:be:d5:80:d2:15:1d:3b:fe:7a:
a9:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:C2:BE:78:82:43:FC:AC:48:75:5B:6B:43:84:EE:57:43:EA:6D:F9
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/e8K-eIJD_KxIdVtrQ4TuV0Pqbfk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
2c:6a:3d:e8:bb:cd:31:3b:05:23:35:67:3b:f9:82:89:a6:f5:
80:87:24:06:53:9e:c2:b3:a9:c7:43:49:e1:46:53:17:4a:b2:
40:00:cf:d5:26:03:1a:93:d9:51:2b:5d:e8:81:46:ce:ee:bf:
84:09:e6:02:04:16:33:b0:0d:91:37:98:ee:f2:75:44:de:48:
0e:87:93:2e:4f:53:a4:c6:74:42:d5:95:dd:1f:85:eb:43:da:
5f:fb:4c:3c:cf:bc:bc:08:7f:9b:5d:3e:e4:1f:f9:bb:cf:5c:
ab:4a:2a:c2:a1:72:db:0d:bb:4d:ed:2d:04:e6:51:9c:b6:08:
23:cd:de:5b:fb:91:57:6b:6d:e2:ce:20:85:06:ce:a8:a5:f9:
e9:8b:95:1b:72:4e:09:bb:f7:d2:40:7e:fd:c7:79:f7:9d:4f:
4c:9b:50:6e:5d:d9:dd:69:f5:5b:52:58:40:47:b3:bc:94:e1:
64:b9:79:aa:54:ce:5f:23:d1:51:74:b6:ca:c6:88:a5:e5:31:
94:6f:31:f4:93:0b:02:eb:17:2c:ba:ee:ad:90:3f:53:5d:ce:
62:c1:48:0d:45:fa:89:b2:b8:4c:91:23:a3:eb:06:f8:f2:ac:
68:0a:e9:4f:96:8f:1d:3d:e8:e2:f6:fa:34:fa:5d:d7:c0:58:
8d:4b:7a:cb
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYbg3aP1Y2avNJEBZIxXO4ixMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcyMDQ3YmUxNWIyNzU5MDJkY2Y2MTdkYzNkMGUxNmRjMWYz
MDgwMjIwHhcNMjMwMzE0MTYwNDI3WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3YmMyYmU3ODgyNDNmY2FjNDg3NTViNmI0Mzg0ZWU1NzQzZWE2ZGY5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz0jKG1cjbuHrc8AhnafgEHe5GZxL
0y75Bh8WholUMazG44/hibIMNHlUFVdJnDxIaS8tmuYisCZP5M/n2tLXKY00PVqK
e5JPw9XxDKMhxLpZ/EbF0KrLau/LNxCjijCXk8BMlz703LL90HaFva4qq5mOzAti
gLHSr9OYI84qTR6DWEF9oPzeHflqlRIvY1PU7nOTdLb0+SJySO8d/y4FGODUgFuI
qHgSJ3ipvFWbiJ8TMehaR8isD+9jkobBClnz5uQRUS1+IvGaeVbyilV+lMpTkOMF
ZMY5kTiF3eUKmwtggppvIpb2rgDPIETaAoZK8iGhCrq+1YDSFR07/nqp8QIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFHvCvniCQ/ysSHVba0OE7ldD6m35MB8GA1UdIwQY
MBaAFHIEe+FbJ1kC3PYX3D0OFtwfMIAiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMt
MWFiZTNhYzEwYWE2LzEvZThLLWVJSkRfS3hJZFZ0clE0VHVWMFBxYmZrLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMtMWFiZTNhYzEwYWE2
LzEvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBACxqPei7zTE7BSM1Zzv5
gomm9YCHJAZTnsKzqcdDSeFGUxdKskAAz9UmAxqT2VErXeiBRs7uv4QJ5gIEFjOw
DZE3mO7ydUTeSA6Hky5PU6TGdELVld0fhetD2l/7TDzPvLwIf5tdPuQf+bvPXKtK
KsKhctsNu03tLQTmUZy2CCPN3lv7kVdrbeLOIIUGzqil+emLlRtyTgm799JAfv3H
efedT0ybUG5d2d1p9VtSWEBHs7yU4WS5eapUzl8j0VF0tsrGiKXlMZRvMfSTCwLr
Fyy67q2QP1NdzmLBSA1F+omyuEyRI6PrBvjyrGgK6U+Wjx096OL2+jT6XdfAWI1L
ess=
-----END CERTIFICATE-----
Generated at Sun Jun 15 10:50:19 2025 by rpki-client