Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/eAaFq1G8OHdSoygSMHBX5R8YLsc.roa
File: eAaFq1G8OHdSoygSMHBX5R8YLsc.roa (raw, json)
Hash identifier: sGWXhyNg5zRd9H+as2R/biPnRAXTuYMQdnC8t8lDb9o=
Subject key identifier: 78:06:85:AB:51:BC:38:77:52:A3:28:12:30:70:57:E5:1F:18:2E:C7
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 01878879E0BE59C934E4CC1821F0D16B41F2
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/eAaFq1G8OHdSoygSMHBX5R8YLsc.roa
Signing time: Sun 16 Apr 2023 05:11:41 +0000
ROA not before: Sun 16 Apr 2023 05:11:41 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:187:4695:a68a/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:88:79:e0:be:59:c9:34:e4:cc:18:21:f0:d1:6b:41:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Apr 16 05:11:41 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=780685ab51bc387752a32812307057e51f182ec7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:52:68:31:6a:a3:a5:4f:66:84:6a:91:1c:81:
b2:5a:d3:10:9b:16:ee:54:b0:55:03:6f:b6:5a:89:
42:fe:d4:3c:34:a8:ee:b5:86:e0:fa:10:c9:aa:c7:
4c:a8:24:bc:13:e4:2a:cf:5b:39:9a:aa:98:a6:bf:
c2:e6:cd:bd:3b:25:e9:17:b5:8d:8e:59:b7:67:fc:
f1:5d:c8:b5:b1:17:ab:38:ec:7f:3b:c1:13:15:5f:
fe:69:43:64:5c:22:a1:32:10:07:f8:5f:1a:ca:91:
90:12:56:ba:8f:d6:a4:34:29:f4:36:d5:01:8f:b5:
e3:ac:51:6c:cf:33:d7:8e:cc:a1:85:02:b2:be:50:
d8:5e:37:25:da:6a:ae:7e:73:fd:7e:10:51:94:ae:
16:44:f0:0e:cb:cc:f7:e8:5e:c2:57:5d:83:fd:88:
f1:be:61:75:6b:6b:7f:b6:da:b1:9a:9d:5f:a7:85:
03:84:e3:7c:a6:f1:64:2b:02:85:4f:81:cc:4f:83:
df:84:3e:92:48:36:1d:05:92:a3:b8:bb:8e:06:7c:
0c:3d:e7:f7:f0:84:ee:a2:1d:66:12:6f:03:fd:4e:
9a:09:3e:d1:e1:b2:37:81:15:38:58:e3:73:be:bf:
d7:5e:f9:60:f4:35:be:e1:dd:e0:f8:54:4d:a9:12:
2d:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:06:85:AB:51:BC:38:77:52:A3:28:12:30:70:57:E5:1F:18:2E:C7
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/eAaFq1G8OHdSoygSMHBX5R8YLsc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
51:02:b5:6f:3a:71:2b:42:8c:ac:a4:80:87:bb:75:44:a2:57:
83:b9:d7:74:fb:24:d9:3f:3e:6e:2d:c0:b8:10:fc:c8:86:88:
54:3f:13:92:80:0c:f7:64:00:f6:1a:60:df:9a:b1:de:28:b3:
e2:e2:73:aa:0b:89:86:92:6b:ae:6e:e5:63:55:49:9a:31:8a:
ee:fa:c2:98:d8:b6:9a:f5:a9:8b:fa:fe:68:d0:89:c7:39:83:
57:09:71:8b:fb:f6:f6:90:25:31:ce:22:d4:a2:7e:63:f3:d2:
e9:81:40:7b:1d:34:75:55:1f:89:1d:f3:c1:a1:e3:4f:48:56:
33:a6:eb:62:46:91:c6:9c:a7:40:a7:34:30:b9:f8:d0:dd:5a:
f8:75:60:04:23:f8:b5:a6:06:41:3d:82:b9:5c:86:cb:ef:a4:
44:f2:40:46:46:9a:df:08:56:57:0c:c7:01:da:7d:b7:77:41:
cb:fb:9c:dc:39:98:5e:a4:ac:a3:dc:e3:a2:da:1c:68:af:1d:
dd:94:01:f6:e6:7e:03:60:5e:b3:e7:a8:8c:72:f4:8d:14:d1:
0a:2e:10:f6:70:cb:83:d7:8f:06:b3:8e:44:67:41:5b:db:a8:
ae:a8:3c:b7:84:33:cc:2b:d3:7c:37:98:a9:76:26:27:4e:e1:
94:04:f1:56
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYeIeeC+Wck05MwYIfDRa0HyMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcyMDQ3YmUxNWIyNzU5MDJkY2Y2MTdkYzNkMGUxNmRjMWYz
MDgwMjIwHhcNMjMwNDE2MDUxMTQxWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3ODA2ODVhYjUxYmMzODc3NTJhMzI4MTIzMDcwNTdlNTFmMTgyZWM3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiFJoMWqjpU9mhGqRHIGyWtMQmxbu
VLBVA2+2WolC/tQ8NKjutYbg+hDJqsdMqCS8E+Qqz1s5mqqYpr/C5s29OyXpF7WN
jlm3Z/zxXci1sRerOOx/O8ETFV/+aUNkXCKhMhAH+F8aypGQEla6j9akNCn0NtUB
j7XjrFFszzPXjsyhhQKyvlDYXjcl2mqufnP9fhBRlK4WRPAOy8z36F7CV12D/Yjx
vmF1a2t/ttqxmp1fp4UDhON8pvFkKwKFT4HMT4PfhD6SSDYdBZKjuLuOBnwMPef3
8ITuoh1mEm8D/U6aCT7R4bI3gRU4WONzvr/XXvlg9DW+4d3g+FRNqRItSQIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFHgGhatRvDh3UqMoEjBwV+UfGC7HMB8GA1UdIwQY
MBaAFHIEe+FbJ1kC3PYX3D0OFtwfMIAiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMt
MWFiZTNhYzEwYWE2LzEvZUFhRnExRzhPSGRTb3lnU01IQlg1UjhZTHNjLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMtMWFiZTNhYzEwYWE2
LzEvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBAFECtW86cStCjKykgIe7
dUSiV4O513T7JNk/Pm4twLgQ/MiGiFQ/E5KADPdkAPYaYN+asd4os+Lic6oLiYaS
a65u5WNVSZoxiu76wpjYtpr1qYv6/mjQicc5g1cJcYv79vaQJTHOItSifmPz0umB
QHsdNHVVH4kd88Gh409IVjOm62JGkcacp0CnNDC5+NDdWvh1YAQj+LWmBkE9grlc
hsvvpETyQEZGmt8IVlcMxwHafbd3Qcv7nNw5mF6krKPc46LaHGivHd2UAfbmfgNg
XrPnqIxy9I0U0QouEPZwy4PXjwazjkRnQVvbqK6oPLeEM8wr03w3mKl2JidO4ZQE
8VY=
-----END CERTIFICATE-----
Generated at Mon Jun 9 06:48:30 2025 by rpki-client