Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/E67IzVdEvM2sz-tCN3X6FZ8bK1U.roa
File: E67IzVdEvM2sz-tCN3X6FZ8bK1U.roa (raw, json)
Hash identifier: mvJHVQmjEk77PM4l8hpidrQWO4U6Io0IiDGCz498Syg=
Subject key identifier: 13:AE:C8:CD:57:44:BC:CD:AC:CF:EB:42:37:75:FA:15:9F:1B:2B:55
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 01852146F0F28BAE7257361DC5369B6CCCA5
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/E67IzVdEvM2sz-tCN3X6FZ8bK1U.roa
Signing time: Sat 17 Dec 2022 18:09:35 +0000
ROA not before: Sat 17 Dec 2022 18:09:35 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:21:46:f0:f2:8b:ae:72:57:36:1d:c5:36:9b:6c:cc:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Dec 17 18:09:35 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=13aec8cd5744bccdaccfeb423775fa159f1b2b55
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:62:b7:40:4a:52:f5:e9:e2:40:43:7c:e8:a9:
b9:70:67:b2:ff:f0:92:3e:6f:52:59:e9:4f:4e:62:
3d:b0:94:f8:9e:0f:f0:f1:b3:42:ba:f8:58:d3:80:
fe:ae:63:53:b5:6c:7a:d8:80:4a:92:f7:75:55:fd:
b8:46:a6:46:a9:59:bd:d7:e7:5d:fd:7a:96:76:3e:
ee:4d:98:4c:b2:c1:c4:fd:8f:54:21:2f:09:d4:81:
57:3e:70:b2:17:51:3a:96:fe:b1:68:c4:ae:e3:ac:
8d:d5:02:bc:0c:ea:e3:f0:a6:eb:ad:66:8a:c3:37:
ff:85:98:fc:63:93:92:d3:01:89:e8:4f:9a:36:35:
a0:43:11:ce:6e:57:5f:f1:30:26:74:ae:49:32:a4:
ff:d0:a6:de:d1:61:2d:ad:0c:cc:57:58:98:f7:a5:
6c:03:a3:d3:95:b9:ed:40:cc:75:77:4c:bf:69:27:
6e:5f:37:51:cf:ee:0b:e4:2d:30:81:b7:db:c0:04:
aa:fe:69:b7:34:52:74:96:b8:82:7a:8c:66:c3:1f:
59:98:e9:db:cb:da:18:51:a6:c0:08:79:cf:29:43:
b8:58:f9:4c:3e:8e:b7:a9:47:bc:29:88:cd:fd:b8:
db:81:c9:14:6f:34:53:e0:8f:02:c5:ae:4b:d3:1d:
86:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:AE:C8:CD:57:44:BC:CD:AC:CF:EB:42:37:75:FA:15:9F:1B:2B:55
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/E67IzVdEvM2sz-tCN3X6FZ8bK1U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
05:cd:37:e3:40:39:3d:93:63:88:fa:63:69:d0:0b:0d:73:17:
7b:a6:06:ba:de:cd:08:b4:43:63:46:34:6d:70:32:c1:d9:c6:
b3:64:79:63:02:bb:20:2e:bf:e5:ae:be:50:7d:70:24:10:12:
6f:20:22:c8:6d:4d:fa:c3:fb:1b:7f:2f:d6:f3:58:1a:db:fa:
b0:8a:71:36:dc:ac:2d:68:48:26:23:b5:7c:0e:d0:13:2d:4d:
d4:0d:46:5b:08:5a:27:72:fb:44:4f:13:39:9c:41:7c:88:73:
95:2f:b1:eb:f9:60:b1:a5:05:98:1f:b2:3c:84:d6:ad:b7:d3:
59:25:da:ef:fc:e9:a6:7f:b2:86:22:3d:30:a6:a3:bc:a4:28:
7a:84:ef:91:a8:61:20:fb:71:ca:ca:a1:3f:47:4d:16:c8:ad:
d8:11:d0:85:14:6e:28:43:78:0a:c4:b2:d5:8d:f8:0d:ce:77:
c9:ff:13:9a:5b:ae:d6:65:be:4a:f2:a6:dc:aa:4b:b9:55:6f:
e6:69:4f:b8:9b:81:4d:7c:95:f5:59:bf:0a:c3:5c:0d:96:cb:
b3:94:ee:a5:b7:b1:3b:3d:c6:2e:52:02:75:51:16:94:08:8e:
cc:57:35:44:63:49:73:75:ef:e8:f9:43:43:17:ed:21:e6:72:
b8:8b:25:c3
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYUhRvDyi65yVzYdxTabbMylMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcyMDQ3YmUxNWIyNzU5MDJkY2Y2MTdkYzNkMGUxNmRjMWYz
MDgwMjIwHhcNMjIxMjE3MTgwOTM1WhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxM2FlYzhjZDU3NDRiY2NkYWNjZmViNDIzNzc1ZmExNTlmMWIyYjU1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgWK3QEpS9eniQEN86Km5cGey//CS
Pm9SWelPTmI9sJT4ng/w8bNCuvhY04D+rmNTtWx62IBKkvd1Vf24RqZGqVm91+dd
/XqWdj7uTZhMssHE/Y9UIS8J1IFXPnCyF1E6lv6xaMSu46yN1QK8DOrj8KbrrWaK
wzf/hZj8Y5OS0wGJ6E+aNjWgQxHObldf8TAmdK5JMqT/0Kbe0WEtrQzMV1iY96Vs
A6PTlbntQMx1d0y/aSduXzdRz+4L5C0wgbfbwASq/mm3NFJ0lriCeoxmwx9ZmOnb
y9oYUabACHnPKUO4WPlMPo63qUe8KYjN/bjbgckUbzRT4I8Cxa5L0x2G/wIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFBOuyM1XRLzNrM/rQjd1+hWfGytVMB8GA1UdIwQY
MBaAFHIEe+FbJ1kC3PYX3D0OFtwfMIAiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMt
MWFiZTNhYzEwYWE2LzEvRTY3SXpWZEV2TTJzei10Q04zWDZGWjhiSzFVLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMtMWFiZTNhYzEwYWE2
LzEvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBAAXNN+NAOT2TY4j6Y2nQ
Cw1zF3umBrrezQi0Q2NGNG1wMsHZxrNkeWMCuyAuv+WuvlB9cCQQEm8gIshtTfrD
+xt/L9bzWBrb+rCKcTbcrC1oSCYjtXwO0BMtTdQNRlsIWidy+0RPEzmcQXyIc5Uv
sev5YLGlBZgfsjyE1q2301kl2u/86aZ/soYiPTCmo7ykKHqE75GoYSD7ccrKoT9H
TRbIrdgR0IUUbihDeArEstWN+A3Od8n/E5pbrtZlvkryptyqS7lVb+ZpT7ibgU18
lfVZvwrDXA2Wy7OU7qW3sTs9xi5SAnVRFpQIjsxXNURjSXN17+j5Q0MX7SHmcriL
JcM=
-----END CERTIFICATE-----
Generated at Wed Apr 30 17:51:08 2025 by rpki-client