Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/eT-qZqwMTjfbqkdbHMHrM36-gpY.roa
File: eT-qZqwMTjfbqkdbHMHrM36-gpY.roa (raw, json)
Hash identifier: RrYyv3tQn+P5ivTkizUcN3bIGiIdluhIqBD01n9T99M=
Subject key identifier: 79:3F:AA:66:AC:0C:4E:37:DB:AA:47:5B:1C:C1:EB:33:7E:BE:82:96
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0187319261F70E489863BC16690B597DECF2
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/eT-qZqwMTjfbqkdbHMHrM36-gpY.roa
Signing time: Thu 30 Mar 2023 08:11:29 +0000
ROA not before: Thu 30 Mar 2023 08:11:29 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:31:92:61:f7:0e:48:98:63:bc:16:69:0b:59:7d:ec:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Mar 30 08:11:29 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=793faa66ac0c4e37dbaa475b1cc1eb337ebe8296
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:62:33:93:08:81:7d:e2:99:cf:18:c1:e9:66:
c7:b4:a6:5a:ab:a4:e8:fd:d0:1b:20:c5:70:10:e9:
cf:df:09:66:14:82:17:1c:3a:33:ca:b7:ff:94:e4:
49:d7:7a:b9:2d:a7:05:3f:f9:74:67:ea:60:36:d9:
6c:cf:03:a4:8a:01:fd:f5:1c:6c:6c:ed:61:43:e2:
50:5c:14:fb:8a:78:63:31:b0:a1:59:11:f3:c8:f0:
c2:a6:9a:c5:39:a8:d4:c5:01:20:02:aa:ca:65:bc:
e4:db:ae:4a:04:49:2b:67:4d:75:28:ec:df:a4:0a:
be:ee:78:95:d3:7c:fa:f3:29:67:09:e2:b4:c5:84:
8b:67:e7:d6:d2:54:e9:a7:09:65:86:ca:6c:e9:75:
b9:67:89:d7:41:73:f9:20:6b:46:d1:1b:e3:9c:9e:
74:c3:2c:74:63:95:d6:a6:d0:b5:63:62:c8:df:0a:
4c:4f:c4:79:b7:64:76:e6:3e:c5:60:4a:c2:e6:d8:
39:0b:4e:46:ff:b4:1e:ab:c8:88:f0:17:5a:93:0a:
9b:51:61:ec:f2:15:48:f7:5f:93:53:1f:68:85:c6:
d8:bd:8d:d6:2d:26:f4:54:7c:31:0f:65:f6:78:27:
87:62:cf:76:8e:7b:21:b8:53:16:cd:64:1a:26:62:
6e:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:3F:AA:66:AC:0C:4E:37:DB:AA:47:5B:1C:C1:EB:33:7E:BE:82:96
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/eT-qZqwMTjfbqkdbHMHrM36-gpY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
23:f5:8e:90:ad:84:2b:90:ad:7e:7b:52:a8:68:8e:fd:99:08:
98:d0:2b:6a:09:2a:79:dc:05:e1:e8:b2:80:86:78:ed:cb:3e:
31:0e:fa:15:80:56:c1:b2:cd:bf:06:e4:a0:50:ed:ea:bc:fb:
4d:0c:bb:71:5e:ac:da:e5:a2:d9:f9:ef:f3:67:01:72:1d:41:
8d:18:9a:b6:15:f1:7a:7c:0a:a8:80:72:34:09:6d:57:1d:88:
32:4d:08:99:54:fb:9d:76:9e:a6:49:bf:08:33:cc:dd:e4:01:
a0:38:8a:27:40:a8:66:97:35:df:c0:4a:6e:9d:7d:b5:be:f4:
fc:3f:64:7b:38:26:da:f6:de:5a:f4:ed:ea:93:13:c0:de:2e:
3f:d9:54:de:ee:75:ca:b4:62:54:9b:c7:da:33:58:e7:15:76:
2d:0e:16:d1:fe:e1:f9:20:c7:42:23:96:ec:48:28:2e:59:29:
81:f1:8b:d9:7d:c7:ad:7e:63:76:ae:7a:52:c8:11:d1:a3:16:
0f:71:8e:7d:91:9f:35:f8:a4:33:92:d2:99:66:83:14:40:68:
f6:b0:b4:f1:7e:b3:d1:fd:b8:ae:ce:9f:97:a6:97:81:bd:60:
e1:97:4c:70:b3:c7:17:a9:28:45:b1:47:00:cd:a9:35:35:20:
3a:68:e2:63
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYcxkmH3DkiYY7wWaQtZfezyMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcyMDQ3YmUxNWIyNzU5MDJkY2Y2MTdkYzNkMGUxNmRjMWYz
MDgwMjIwHhcNMjMwMzMwMDgxMTI5WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3OTNmYWE2NmFjMGM0ZTM3ZGJhYTQ3NWIxY2MxZWIzMzdlYmU4Mjk2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl2IzkwiBfeKZzxjB6WbHtKZaq6To
/dAbIMVwEOnP3wlmFIIXHDozyrf/lORJ13q5LacFP/l0Z+pgNtlszwOkigH99Rxs
bO1hQ+JQXBT7inhjMbChWRHzyPDCpprFOajUxQEgAqrKZbzk265KBEkrZ011KOzf
pAq+7niV03z68ylnCeK0xYSLZ+fW0lTppwllhsps6XW5Z4nXQXP5IGtG0RvjnJ50
wyx0Y5XWptC1Y2LI3wpMT8R5t2R25j7FYErC5tg5C05G/7Qeq8iI8BdakwqbUWHs
8hVI91+TUx9ohcbYvY3WLSb0VHwxD2X2eCeHYs92jnshuFMWzWQaJmJuVQIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFHk/qmasDE4326pHWxzB6zN+voKWMB8GA1UdIwQY
MBaAFHIEe+FbJ1kC3PYX3D0OFtwfMIAiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMt
MWFiZTNhYzEwYWE2LzEvZVQtcVpxd01UamZicWtkYkhNSHJNMzYtZ3BZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMtMWFiZTNhYzEwYWE2
LzEvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBACP1jpCthCuQrX57Uqho
jv2ZCJjQK2oJKnncBeHosoCGeO3LPjEO+hWAVsGyzb8G5KBQ7eq8+00Mu3FerNrl
otn57/NnAXIdQY0YmrYV8Xp8CqiAcjQJbVcdiDJNCJlU+512nqZJvwgzzN3kAaA4
iidAqGaXNd/ASm6dfbW+9Pw/ZHs4Jtr23lr07eqTE8DeLj/ZVN7udcq0YlSbx9oz
WOcVdi0OFtH+4fkgx0IjluxIKC5ZKYHxi9l9x61+Y3auelLIEdGjFg9xjn2RnzX4
pDOS0plmgxRAaPawtPF+s9H9uK7On5eml4G9YOGXTHCzxxepKEWxRwDNqTU1IDpo
4mM=
-----END CERTIFICATE-----
Generated at Mon Jun 9 00:12:08 2025 by rpki-client