Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/eRl6MVm9HVPMOO1UugOblU9QkyI.roa
File: eRl6MVm9HVPMOO1UugOblU9QkyI.roa (raw, json)
Hash identifier: /u9lp1t+pmO7DIZZr4wid3ZSJ1nt3iMB4HYVdHQjraI=
Subject key identifier: 79:19:7A:31:59:BD:1D:53:CC:38:ED:54:BA:03:9B:95:4F:50:93:22
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 01876E13780B3233B1F8E4E6D9097198F49C
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/eRl6MVm9HVPMOO1UugOblU9QkyI.roa
Signing time: Tue 11 Apr 2023 02:09:42 +0000
ROA not before: Tue 11 Apr 2023 02:09:42 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:187:4695:a68a/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:6e:13:78:0b:32:33:b1:f8:e4:e6:d9:09:71:98:f4:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Apr 11 02:09:42 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=79197a3159bd1d53cc38ed54ba039b954f509322
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:2d:56:f1:db:b9:46:56:0f:35:25:21:22:55:
0c:a8:d8:d4:bc:11:73:a2:3c:b7:09:05:74:9e:00:
1f:c6:4f:fa:87:ad:03:eb:71:ee:6a:86:e6:83:af:
32:2e:db:da:99:14:af:1f:97:2f:99:4d:f1:e8:b5:
94:25:ea:38:dc:06:e1:c4:7e:89:ba:c1:6e:3e:9e:
14:b1:25:69:f3:94:8b:11:bc:02:63:3e:bb:9d:34:
04:a7:7e:65:e6:b1:30:da:47:07:34:11:eb:85:9f:
f4:b3:9a:5d:75:c2:aa:61:b3:d2:2b:1d:50:86:da:
4f:b5:64:63:32:d4:c0:38:5e:1c:c2:d6:c9:03:49:
7a:3f:f9:2e:ea:bd:77:ba:ae:54:7b:6f:4a:ac:1d:
86:cf:34:f4:2e:74:5c:03:60:a2:c2:bc:b2:dc:17:
01:d6:85:d6:73:fe:ea:cb:3e:0d:46:18:45:da:f4:
7d:f4:98:e4:2d:ca:c0:d4:4c:0e:95:45:84:61:d7:
a9:8f:33:84:fe:51:db:ba:13:88:58:1c:e2:62:31:
b4:e9:fd:11:6a:7c:75:95:a0:12:01:28:9c:8d:31:
a8:d9:45:bb:39:87:02:26:57:39:e9:4e:a8:86:20:
99:a3:5f:a2:2f:34:0c:d9:f1:e9:30:51:e5:34:be:
37:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:19:7A:31:59:BD:1D:53:CC:38:ED:54:BA:03:9B:95:4F:50:93:22
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/eRl6MVm9HVPMOO1UugOblU9QkyI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
26:84:c4:fe:04:af:00:c4:6a:9f:45:91:42:95:8f:9c:3e:48:
5b:ed:18:4d:69:5c:0e:1a:7a:0e:50:10:36:40:f5:64:8f:bb:
36:8f:14:06:e7:08:4a:ec:d4:e4:ba:42:0a:7c:21:b0:ad:ea:
54:f3:49:63:70:ce:93:08:14:de:f8:9b:3d:9e:8e:a2:40:b2:
e2:9d:b7:e7:23:33:69:d6:f2:9a:83:1f:99:9e:4d:52:03:fc:
ed:1a:99:65:ea:3d:04:4b:4b:d4:7b:7e:09:e1:63:56:d6:ed:
31:20:d0:79:1d:77:cf:d8:dc:15:5a:7f:c6:15:ea:22:e2:cd:
76:71:b4:89:99:3d:02:e8:07:e8:96:96:e7:2a:d7:f7:95:e3:
e3:bd:f6:d1:9f:8a:51:01:02:59:e5:02:70:a5:1f:00:24:2a:
7c:4c:73:21:c5:a4:9d:b1:f8:50:38:a6:1a:73:0b:04:f9:64:
c5:0c:57:e8:6c:12:49:7a:25:12:8f:9f:9e:27:b3:ee:58:95:
81:d4:c2:bc:37:51:f2:da:dc:63:99:e4:80:18:d0:97:c5:39:
01:6e:87:34:b1:0a:47:ea:0c:c1:42:27:8b:12:e2:45:ee:6e:
c8:ce:c3:40:09:e0:8e:85:d6:d0:6d:41:ca:11:2b:15:8f:86:
42:e3:87:ab
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYduE3gLMjOx+OTm2QlxmPScMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcyMDQ3YmUxNWIyNzU5MDJkY2Y2MTdkYzNkMGUxNmRjMWYz
MDgwMjIwHhcNMjMwNDExMDIwOTQyWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3OTE5N2EzMTU5YmQxZDUzY2MzOGVkNTRiYTAzOWI5NTRmNTA5MzIyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzi1W8du5RlYPNSUhIlUMqNjUvBFz
ojy3CQV0ngAfxk/6h60D63Huaobmg68yLtvamRSvH5cvmU3x6LWUJeo43AbhxH6J
usFuPp4UsSVp85SLEbwCYz67nTQEp35l5rEw2kcHNBHrhZ/0s5pddcKqYbPSKx1Q
htpPtWRjMtTAOF4cwtbJA0l6P/ku6r13uq5Ue29KrB2GzzT0LnRcA2Ciwryy3BcB
1oXWc/7qyz4NRhhF2vR99JjkLcrA1EwOlUWEYdepjzOE/lHbuhOIWBziYjG06f0R
anx1laASASicjTGo2UW7OYcCJlc56U6ohiCZo1+iLzQM2fHpMFHlNL43lwIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFHkZejFZvR1TzDjtVLoDm5VPUJMiMB8GA1UdIwQY
MBaAFHIEe+FbJ1kC3PYX3D0OFtwfMIAiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMt
MWFiZTNhYzEwYWE2LzEvZVJsNk1WbTlIVlBNT08xVXVnT2JsVTlRa3lJLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMtMWFiZTNhYzEwYWE2
LzEvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBACaExP4ErwDEap9FkUKV
j5w+SFvtGE1pXA4aeg5QEDZA9WSPuzaPFAbnCErs1OS6Qgp8IbCt6lTzSWNwzpMI
FN74mz2ejqJAsuKdt+cjM2nW8pqDH5meTVID/O0amWXqPQRLS9R7fgnhY1bW7TEg
0Hkdd8/Y3BVaf8YV6iLizXZxtImZPQLoB+iWlucq1/eV4+O99tGfilEBAlnlAnCl
HwAkKnxMcyHFpJ2x+FA4phpzCwT5ZMUMV+hsEkl6JRKPn54ns+5YlYHUwrw3UfLa
3GOZ5IAY0JfFOQFuhzSxCkfqDMFCJ4sS4kXubsjOw0AJ4I6F1tBtQcoRKxWPhkLj
h6s=
-----END CERTIFICATE-----
Generated at Mon Jun 9 04:35:24 2025 by rpki-client