Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/edwGvTOz4MegcH4xEcRSab7V1V0.roa
File: edwGvTOz4MegcH4xEcRSab7V1V0.roa (raw, json)
Hash identifier: Ye5Z3N3BoElXGw/GlTO3NjIiS5KLDvSh5ad84Uhucds=
Subject key identifier: 79:DC:06:BD:33:B3:E0:C7:A0:70:7E:31:11:C4:52:69:BE:D5:D5:5D
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 01845F19996796EFC86D1B55759F5F8096F0
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/edwGvTOz4MegcH4xEcRSab7V1V0.roa
Signing time: Thu 10 Nov 2022 01:13:43 +0000
ROA not before: Thu 10 Nov 2022 01:13:43 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:184:51c3:ad7c/128 maxlen: 128
2001:67c:64:ffff:0:184:3fbd:71f7/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:184:4250:a4df/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:5f:19:99:67:96:ef:c8:6d:1b:55:75:9f:5f:80:96:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Nov 10 01:13:43 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=79dc06bd33b3e0c7a0707e3111c45269bed5d55d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:7b:85:69:71:f0:a9:7f:70:11:b4:69:59:fe:
83:d5:0e:a5:8c:e1:07:fd:78:55:75:89:b3:91:86:
08:c0:8f:61:a2:44:3c:2e:7c:35:21:13:04:ce:68:
00:fb:25:70:95:04:e6:a3:2c:25:c5:c6:d6:68:97:
33:d2:c4:7d:68:06:6a:ea:72:ef:2d:7d:b5:86:8a:
fe:bc:63:80:73:68:5d:07:f3:f8:2c:aa:c3:0c:20:
77:4e:fa:40:dc:7e:f2:56:5d:6a:34:0a:db:f2:b3:
f9:f9:b7:cb:bf:b2:91:56:6f:f3:56:73:05:aa:1f:
36:3b:54:9a:db:c8:35:00:54:d8:00:fa:77:7c:5c:
19:14:27:ac:e3:e1:93:1d:7e:e6:e2:d5:25:2b:c3:
b6:74:5a:e9:d4:74:ed:18:cd:3e:0c:d7:e9:d8:74:
00:2a:9c:0a:10:c2:0a:b7:94:af:c7:74:ec:5e:06:
61:36:9b:ec:c6:26:ba:36:28:71:a0:6c:1b:0e:4d:
ac:38:89:0d:da:a1:cc:3e:1d:c8:85:5c:9d:b6:57:
23:74:9d:8a:b7:ad:f2:d3:b6:2f:f9:9d:51:4e:3c:
eb:c1:df:05:71:4c:b5:6b:e7:9e:f1:0d:5d:bc:68:
15:89:e5:10:fd:6b:22:87:e5:f0:25:2e:85:36:46:
ae:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:DC:06:BD:33:B3:E0:C7:A0:70:7E:31:11:C4:52:69:BE:D5:D5:5D
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/edwGvTOz4MegcH4xEcRSab7V1V0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
85:55:4a:77:f0:57:d8:fa:2c:ab:d5:64:f0:4e:9b:5b:3a:d7:
b4:01:f0:81:3d:5c:28:d8:82:75:ff:81:34:7b:77:9f:ff:38:
13:ac:cf:20:a7:0b:74:68:75:55:8c:88:d3:f9:9a:e7:39:4a:
9d:39:db:b6:1e:bd:f4:65:d6:b3:11:7b:29:81:b1:89:51:22:
e9:0e:62:df:e1:cb:1e:72:92:2d:2c:1f:86:10:df:e5:a1:44:
e3:42:19:b6:ca:8a:a9:88:d3:c7:f2:31:df:f2:7b:e0:f4:3d:
59:f3:08:76:15:0f:2a:2b:87:1b:4e:a0:2f:ba:0c:31:d5:ef:
43:e6:8c:68:d2:06:57:60:b8:41:47:27:8f:f4:39:c8:01:0f:
93:69:ec:73:18:55:5d:0e:30:37:95:a7:46:d2:28:37:dd:d9:
9a:50:53:2f:69:05:5d:52:dd:df:6d:92:71:5e:12:e0:ee:c3:
53:ea:72:cd:14:fc:e6:1d:64:35:6c:3d:cd:bd:dd:3b:63:09:
43:46:c1:7e:fc:d0:35:a8:b8:06:4a:15:2d:d6:91:11:dd:da:
24:0e:65:3c:b8:b8:0c:65:6a:d9:b8:c9:f6:5f:ba:d6:cc:15:
9a:47:a3:e5:8b:2a:67:b4:db:cb:0f:6c:3a:c8:06:06:99:6d:
c5:a2:97:4a
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYRfGZlnlu/IbRtVdZ9fgJbwMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcyMDQ3YmUxNWIyNzU5MDJkY2Y2MTdkYzNkMGUxNmRjMWYz
MDgwMjIwHhcNMjIxMTEwMDExMzQzWhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3OWRjMDZiZDMzYjNlMGM3YTA3MDdlMzExMWM0NTI2OWJlZDVkNTVkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgHuFaXHwqX9wEbRpWf6D1Q6ljOEH
/XhVdYmzkYYIwI9hokQ8Lnw1IRMEzmgA+yVwlQTmoywlxcbWaJcz0sR9aAZq6nLv
LX21hor+vGOAc2hdB/P4LKrDDCB3TvpA3H7yVl1qNArb8rP5+bfLv7KRVm/zVnMF
qh82O1Sa28g1AFTYAPp3fFwZFCes4+GTHX7m4tUlK8O2dFrp1HTtGM0+DNfp2HQA
KpwKEMIKt5Svx3TsXgZhNpvsxia6NihxoGwbDk2sOIkN2qHMPh3IhVydtlcjdJ2K
t63y07Yv+Z1RTjzrwd8FcUy1a+ee8Q1dvGgVieUQ/Wsih+XwJS6FNkau+QIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFHncBr0zs+DHoHB+MRHEUmm+1dVdMB8GA1UdIwQY
MBaAFHIEe+FbJ1kC3PYX3D0OFtwfMIAiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMt
MWFiZTNhYzEwYWE2LzEvZWR3R3ZUT3o0TWVnY0g0eEVjUlNhYjdWMVYwLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMtMWFiZTNhYzEwYWE2
LzEvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBAIVVSnfwV9j6LKvVZPBO
m1s617QB8IE9XCjYgnX/gTR7d5//OBOszyCnC3RodVWMiNP5muc5Sp0527YevfRl
1rMReymBsYlRIukOYt/hyx5yki0sH4YQ3+WhRONCGbbKiqmI08fyMd/ye+D0PVnz
CHYVDyorhxtOoC+6DDHV70PmjGjSBldguEFHJ4/0OcgBD5Np7HMYVV0OMDeVp0bS
KDfd2ZpQUy9pBV1S3d9tknFeEuDuw1Pqcs0U/OYdZDVsPc293TtjCUNGwX780DWo
uAZKFS3WkRHd2iQOZTy4uAxlatm4yfZfutbMFZpHo+WLKme028sPbDrIBgaZbcWi
l0o=
-----END CERTIFICATE-----
Generated at Mon Jun 9 00:10:22 2025 by rpki-client