Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/tWXnEWyLDKTlBedZmH-Q2Ff-ens.roa
File: tWXnEWyLDKTlBedZmH-Q2Ff-ens.roa (raw, json)
Hash identifier: EVjAVvevD9y2R69YSNrMKaaXeFEjbC4QREiJ7QFmn3g=
Subject key identifier: B5:65:E7:11:6C:8B:0C:A4:E5:05:E7:59:98:7F:90:D8:57:FE:7A:7B
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 018750775A46718844C274996AF77EF2A438
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/tWXnEWyLDKTlBedZmH-Q2Ff-ens.roa
Signing time: Wed 05 Apr 2023 08:10:11 +0000
ROA not before: Wed 05 Apr 2023 08:10:11 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:187:4695:a68a/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:50:77:5a:46:71:88:44:c2:74:99:6a:f7:7e:f2:a4:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Apr 5 08:10:11 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=b565e7116c8b0ca4e505e759987f90d857fe7a7b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:02:60:5e:af:f7:fb:7d:bf:e9:c7:bf:b0:33:
d1:2d:b7:17:d2:30:97:ac:19:b9:ec:fb:ce:42:dc:
c1:59:15:e6:48:72:b6:17:59:a6:2a:fa:58:ea:e0:
e2:86:9c:ac:f0:9e:98:d5:86:bd:f6:04:fb:69:e8:
46:e4:14:41:8a:61:fd:d6:5e:c8:77:81:6a:c4:80:
c8:30:12:97:52:7b:66:ad:93:1b:c3:44:b6:62:ef:
d5:29:0a:f0:53:37:2b:67:78:60:49:5f:04:83:c2:
f0:9f:91:f8:50:a4:b5:1a:33:27:6f:db:6b:9a:4a:
02:85:ae:4f:08:22:75:d7:a8:68:b8:c1:ec:73:cf:
23:7c:f8:2b:f6:12:d8:9c:f7:52:fa:09:82:e9:eb:
8c:e2:e4:96:01:65:e4:e7:57:fa:a7:9f:80:4f:1f:
ff:13:4f:85:92:02:86:68:95:fc:9b:4a:0c:1e:4b:
b9:83:04:f2:d2:ac:f7:3b:83:68:59:c6:ae:bb:dc:
31:62:d8:a1:b5:c0:60:aa:b4:47:32:ab:e2:72:2a:
89:5b:41:20:6c:d0:51:41:48:e9:91:0a:c2:01:1d:
32:67:e5:c2:41:fc:25:f4:1d:bc:93:57:f2:7c:26:
9c:4f:9c:24:7c:31:fb:9c:2c:df:19:dd:67:b9:ae:
db:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:65:E7:11:6C:8B:0C:A4:E5:05:E7:59:98:7F:90:D8:57:FE:7A:7B
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/tWXnEWyLDKTlBedZmH-Q2Ff-ens.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
6c:00:3b:9c:3a:e6:08:a8:b3:ee:ff:9f:26:f9:54:5e:99:b4:
cf:9c:51:9d:cd:41:5d:36:10:97:89:54:86:13:b9:9e:58:d1:
f6:be:1e:c7:b3:8e:48:22:43:75:d3:fa:75:0d:24:cf:ef:93:
44:0b:0e:9f:9c:67:7a:88:1d:d1:a9:85:5e:95:81:d6:9d:e0:
18:d5:5d:42:e6:7a:d7:a0:f7:32:e6:77:b1:60:7b:26:bc:41:
9e:ca:1c:55:f8:3b:e0:ec:48:98:88:e1:2b:e2:85:a0:e6:4b:
87:fb:89:6b:32:fb:f2:9a:42:4f:50:54:db:e8:59:4f:7d:04:
f9:18:1d:b3:3d:ff:16:c0:8f:d2:d6:3e:17:f5:65:ee:bc:db:
52:0b:64:d6:be:8d:56:50:05:ac:3e:44:ed:b2:bd:6b:ad:3a:
2e:3a:5c:79:08:0e:02:7d:15:40:cc:1b:b3:78:59:a2:cf:5b:
23:48:97:9e:f4:ac:b8:cd:d0:4d:32:25:40:c4:82:70:7b:04:
3e:7f:a5:79:90:ae:84:c7:aa:34:33:0a:8a:b8:33:9e:5f:5a:
44:e9:38:1e:ad:d3:bb:e9:51:bb:2f:3e:50:fa:6b:f7:08:c0:
9a:f2:0e:05:11:c9:23:b5:70:e1:20:54:f5:05:38:81:f1:25:
2e:8f:85:b2
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYdQd1pGcYhEwnSZavd+8qQ4MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcyMDQ3YmUxNWIyNzU5MDJkY2Y2MTdkYzNkMGUxNmRjMWYz
MDgwMjIwHhcNMjMwNDA1MDgxMDExWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiNTY1ZTcxMTZjOGIwY2E0ZTUwNWU3NTk5ODdmOTBkODU3ZmU3YTdiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAswJgXq/3+32/6ce/sDPRLbcX0jCX
rBm57PvOQtzBWRXmSHK2F1mmKvpY6uDihpys8J6Y1Ya99gT7aehG5BRBimH91l7I
d4FqxIDIMBKXUntmrZMbw0S2Yu/VKQrwUzcrZ3hgSV8Eg8Lwn5H4UKS1GjMnb9tr
mkoCha5PCCJ116houMHsc88jfPgr9hLYnPdS+gmC6euM4uSWAWXk51f6p5+ATx//
E0+FkgKGaJX8m0oMHku5gwTy0qz3O4NoWcauu9wxYtihtcBgqrRHMqviciqJW0Eg
bNBRQUjpkQrCAR0yZ+XCQfwl9B28k1fyfCacT5wkfDH7nCzfGd1nua7buwIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFLVl5xFsiwyk5QXnWZh/kNhX/np7MB8GA1UdIwQY
MBaAFHIEe+FbJ1kC3PYX3D0OFtwfMIAiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMt
MWFiZTNhYzEwYWE2LzEvdFdYbkVXeUxES1RsQmVkWm1ILVEyRmYtZW5zLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMtMWFiZTNhYzEwYWE2
LzEvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBAGwAO5w65gios+7/nyb5
VF6ZtM+cUZ3NQV02EJeJVIYTuZ5Y0fa+HsezjkgiQ3XT+nUNJM/vk0QLDp+cZ3qI
HdGphV6Vgdad4BjVXULmeteg9zLmd7Fgeya8QZ7KHFX4O+DsSJiI4SvihaDmS4f7
iWsy+/KaQk9QVNvoWU99BPkYHbM9/xbAj9LWPhf1Ze6821ILZNa+jVZQBaw+RO2y
vWutOi46XHkIDgJ9FUDMG7N4WaLPWyNIl570rLjN0E0yJUDEgnB7BD5/pXmQroTH
qjQzCoq4M55fWkTpOB6t07vpUbsvPlD6a/cIwJryDgURySO1cOEgVPUFOIHxJS6P
hbI=
-----END CERTIFICATE-----
Generated at Tue Jun 10 09:33:26 2025 by rpki-client