Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/eZjst8jvVeAreJzKF9xgZgHOZ4A.roa
File: eZjst8jvVeAreJzKF9xgZgHOZ4A.roa (raw, json)
Hash identifier: PqfcUwU5+rVHX3n1WUiW3UyhGzuajkqWj2Nn9F3uaVA=
Subject key identifier: 79:98:EC:B7:C8:EF:55:E0:2B:78:9C:CA:17:DC:60:66:01:CE:67:80
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 01885F7A35D7BBFFD809877C3B0FC2C8778F
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/eZjst8jvVeAreJzKF9xgZgHOZ4A.roa
Signing time: Sat 27 May 2023 23:10:24 +0000
ROA not before: Sat 27 May 2023 23:10:24 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:187:4695:a68a/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64:ffff:0:187:fa9a:b088/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:187:b2b8:a7dd/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:5f:7a:35:d7:bb:ff:d8:09:87:7c:3b:0f:c2:c8:77:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: May 27 23:10:24 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=7998ecb7c8ef55e02b789cca17dc606601ce6780
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:b5:40:0d:b0:a6:37:06:d2:36:8b:38:13:08:
04:fb:28:ee:fa:30:6c:80:19:4d:11:a8:d9:95:12:
fe:95:ed:33:37:9e:35:f6:9e:58:22:0a:31:41:6e:
ab:58:41:b3:07:b0:f8:0b:d0:e6:d9:5f:e8:25:17:
af:7c:29:87:09:1a:90:8f:06:c1:d5:09:ac:3d:33:
ee:5f:cc:06:b6:bc:e8:10:84:51:e7:87:d2:d1:91:
4b:4b:1c:ad:a9:28:05:3c:ea:e1:63:f0:36:e0:99:
a2:9a:56:15:33:cc:d7:b3:d6:38:dd:8e:2d:7e:f0:
8b:4a:9f:64:38:ca:fe:80:4e:4d:9b:6b:79:ce:87:
59:af:7b:da:3f:bd:26:d8:28:ae:02:72:65:30:b2:
c9:f0:99:5b:98:8b:fe:39:05:65:d6:c7:b4:a1:3e:
46:db:5b:70:bc:7b:08:a6:f0:63:e9:90:45:82:8b:
07:cd:a5:9e:1f:a3:df:93:cc:c9:2e:ea:cb:15:6d:
51:c1:1e:11:01:f1:06:56:a9:18:60:95:fd:e8:bf:
dd:69:9c:90:23:9c:e1:25:b5:a5:46:83:c8:1e:eb:
4a:d8:11:39:6c:8f:d2:ef:23:87:79:f8:c1:c0:5d:
65:ce:30:15:f3:8f:d2:41:08:48:fa:04:32:1b:1e:
1c:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:98:EC:B7:C8:EF:55:E0:2B:78:9C:CA:17:DC:60:66:01:CE:67:80
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/eZjst8jvVeAreJzKF9xgZgHOZ4A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
43:ce:d8:aa:21:04:79:5a:b6:ab:b6:e8:80:e9:73:96:a2:36:
a6:85:62:2f:08:8b:ff:e6:7e:00:ba:a9:e8:fe:d9:3e:83:19:
c3:15:34:af:34:81:7b:29:9c:19:d5:c1:76:f8:3f:80:65:1a:
a6:ba:0f:7a:37:34:8d:19:1e:75:e8:c1:52:be:23:4c:14:0e:
f2:16:6f:74:61:23:62:b8:ed:c6:39:54:93:5a:9d:96:b2:0f:
b8:20:2f:1f:08:a7:35:e0:ef:cb:f9:9d:d7:67:84:bc:9c:93:
fb:fc:fb:ff:3e:61:69:2f:9a:9c:56:36:16:f1:fa:3c:97:03:
bc:7b:a8:1e:c1:8b:64:4a:09:9a:52:5f:22:4c:25:6f:b5:c8:
13:a8:6d:57:dd:69:19:32:99:4f:70:bf:da:b9:f5:6f:b9:69:
75:b3:5c:3b:1c:45:16:7b:2d:56:ae:df:dc:f8:a2:d5:22:87:
e0:5c:ad:63:70:c1:32:bd:a1:06:09:46:20:ec:b6:ef:0c:53:
75:cd:c5:f8:02:48:c3:61:42:66:88:f5:fb:45:ab:1e:8b:29:
0d:02:f6:e4:14:e9:0d:29:58:4b:42:36:2f:0a:6b:d3:b3:26:
c8:9e:0f:40:89:22:8c:1e:e6:ff:9b:3c:24:64:0b:9d:d4:04:
cd:1b:17:76
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYhfejXXu//YCYd8Ow/CyHePMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcyMDQ3YmUxNWIyNzU5MDJkY2Y2MTdkYzNkMGUxNmRjMWYz
MDgwMjIwHhcNMjMwNTI3MjMxMDI0WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3OTk4ZWNiN2M4ZWY1NWUwMmI3ODljY2ExN2RjNjA2NjAxY2U2NzgwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz7VADbCmNwbSNos4EwgE+yju+jBs
gBlNEajZlRL+le0zN5419p5YIgoxQW6rWEGzB7D4C9Dm2V/oJRevfCmHCRqQjwbB
1QmsPTPuX8wGtrzoEIRR54fS0ZFLSxytqSgFPOrhY/A24JmimlYVM8zXs9Y43Y4t
fvCLSp9kOMr+gE5Nm2t5zodZr3vaP70m2CiuAnJlMLLJ8JlbmIv+OQVl1se0oT5G
21twvHsIpvBj6ZBFgosHzaWeH6Pfk8zJLurLFW1RwR4RAfEGVqkYYJX96L/daZyQ
I5zhJbWlRoPIHutK2BE5bI/S7yOHefjBwF1lzjAV84/SQQhI+gQyGx4cnwIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFHmY7LfI71XgK3icyhfcYGYBzmeAMB8GA1UdIwQY
MBaAFHIEe+FbJ1kC3PYX3D0OFtwfMIAiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMt
MWFiZTNhYzEwYWE2LzEvZVpqc3Q4anZWZUFyZUp6S0Y5eGdaZ0hPWjRBLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMtMWFiZTNhYzEwYWE2
LzEvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBAEPO2KohBHlatqu26IDp
c5aiNqaFYi8Ii//mfgC6qej+2T6DGcMVNK80gXspnBnVwXb4P4BlGqa6D3o3NI0Z
HnXowVK+I0wUDvIWb3RhI2K47cY5VJNanZayD7ggLx8IpzXg78v5nddnhLyck/v8
+/8+YWkvmpxWNhbx+jyXA7x7qB7Bi2RKCZpSXyJMJW+1yBOobVfdaRkymU9wv9q5
9W+5aXWzXDscRRZ7LVau39z4otUih+BcrWNwwTK9oQYJRiDstu8MU3XNxfgCSMNh
QmaI9ftFqx6LKQ0C9uQU6Q0pWEtCNi8Ka9OzJsieD0CJIowe5v+bPCRkC53UBM0b
F3Y=
-----END CERTIFICATE-----
Generated at Mon Jun 9 11:17:27 2025 by rpki-client