Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/EAhVzmLDKjjV3MFJibXzDSxVGUo.roa
File: EAhVzmLDKjjV3MFJibXzDSxVGUo.roa (raw, json)
Hash identifier: 9RwdjZ11+Ku/puZ+/juzKKhghwJuZf3C18zDFC4/Ubc=
Subject key identifier: 10:08:55:CE:62:C3:2A:38:D5:DC:C1:49:89:B5:F3:0D:2C:55:19:4A
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0183F9CF3CAF13E43A3E524912DE0DBD5DCF
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/EAhVzmLDKjjV3MFJibXzDSxVGUo.roa
Signing time: Fri 21 Oct 2022 09:10:51 +0000
ROA not before: Fri 21 Oct 2022 09:10:51 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:f9:cf:3c:af:13:e4:3a:3e:52:49:12:de:0d:bd:5d:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Oct 21 09:10:51 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=100855ce62c32a38d5dcc14989b5f30d2c55194a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:d9:38:52:31:35:a1:3b:17:5c:b9:a9:2b:ff:
f8:aa:e8:8e:83:9b:16:3a:87:2c:74:62:b9:0e:89:
7e:c1:b5:c0:1b:9a:56:c9:cf:85:c8:cd:69:31:ab:
be:fd:c9:44:9e:fa:ab:4b:aa:a1:e2:bc:1f:dd:53:
bd:eb:52:25:37:cd:d4:09:83:f2:f8:7b:86:87:05:
c6:12:60:d3:8d:22:0a:c3:53:cb:d8:7b:48:9f:2f:
29:c0:d4:2f:b5:6e:31:90:ef:a5:3b:89:7a:f3:10:
8f:1d:ea:18:62:5e:2f:e5:c2:be:6a:05:3d:fb:5c:
83:a7:f7:08:6b:89:8e:c8:1a:55:ac:85:c6:f5:f1:
de:bf:57:e2:21:c1:38:ef:c7:95:c9:c8:17:65:8f:
7d:b6:94:68:5f:3b:27:b4:a4:96:48:dd:65:20:db:
af:80:bb:b4:d7:01:9f:4e:60:65:92:18:9e:20:31:
d6:77:34:f1:aa:7f:c1:d0:28:9f:a2:45:75:10:46:
15:43:b7:eb:9a:ec:22:72:bb:f0:81:1d:4a:8f:c1:
9e:3c:f6:38:25:c6:5f:2e:ad:f4:52:32:c6:1a:e5:
95:9e:21:03:2d:4b:6e:6c:38:8b:49:67:bc:0c:89:
39:b0:8c:f2:b9:e7:86:d4:f5:f1:20:98:8c:b2:76:
30:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:08:55:CE:62:C3:2A:38:D5:DC:C1:49:89:B5:F3:0D:2C:55:19:4A
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/EAhVzmLDKjjV3MFJibXzDSxVGUo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
4e:8d:9d:81:b3:8e:95:3a:e3:84:42:ae:d0:f2:79:32:ca:62:
ef:09:7b:d6:bf:77:87:4c:12:e7:a2:7e:ad:80:6a:ed:5a:64:
11:99:f5:f7:89:15:2f:b5:5b:3a:90:39:e8:ca:4f:73:20:48:
fe:45:bb:54:8a:55:92:6b:2e:1f:1d:26:77:8b:6f:68:09:c5:
c9:96:be:f3:e9:f5:5c:97:88:08:fb:07:0c:bd:53:2c:7b:0c:
49:c0:38:40:b4:50:29:3b:90:c1:aa:f3:6d:98:07:9b:ad:2e:
4f:49:51:8b:9d:d1:9b:26:7a:6a:02:3d:80:81:4c:b9:fc:82:
74:c0:bc:ea:9a:0b:06:ce:a7:32:c6:10:3d:0e:f6:06:b0:9a:
4a:3c:f9:f8:40:12:05:62:a1:da:11:90:e1:78:23:8d:8b:f4:
62:06:ab:2c:f1:88:32:02:f6:ab:a7:44:2e:27:9d:77:f4:dc:
53:68:31:ca:f4:36:87:0d:6c:ae:ef:2a:f7:d1:55:33:e4:ab:
55:3b:72:37:2d:01:13:79:30:6c:0a:f9:f6:5d:9d:73:ab:87:
93:50:0d:75:c4:83:2f:31:be:a8:79:20:28:5f:1d:18:5d:5e:
f7:a9:77:27:9f:38:89:bc:2f:32:6d:81:23:5c:0c:1b:92:37:
d8:b7:ac:3c
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYP5zzyvE+Q6PlJJEt4NvV3PMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcyMDQ3YmUxNWIyNzU5MDJkY2Y2MTdkYzNkMGUxNmRjMWYz
MDgwMjIwHhcNMjIxMDIxMDkxMDUxWhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxMDA4NTVjZTYyYzMyYTM4ZDVkY2MxNDk4OWI1ZjMwZDJjNTUxOTRhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjNk4UjE1oTsXXLmpK//4quiOg5sW
OocsdGK5Dol+wbXAG5pWyc+FyM1pMau+/clEnvqrS6qh4rwf3VO961IlN83UCYPy
+HuGhwXGEmDTjSIKw1PL2HtIny8pwNQvtW4xkO+lO4l68xCPHeoYYl4v5cK+agU9
+1yDp/cIa4mOyBpVrIXG9fHev1fiIcE478eVycgXZY99tpRoXzsntKSWSN1lINuv
gLu01wGfTmBlkhieIDHWdzTxqn/B0CifokV1EEYVQ7frmuwicrvwgR1Kj8GePPY4
JcZfLq30UjLGGuWVniEDLUtubDiLSWe8DIk5sIzyueeG1PXxIJiMsnYwhQIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFBAIVc5iwyo41dzBSYm18w0sVRlKMB8GA1UdIwQY
MBaAFHIEe+FbJ1kC3PYX3D0OFtwfMIAiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMt
MWFiZTNhYzEwYWE2LzEvRUFoVnptTERLampWM01GSmliWHpEU3hWR1VvLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMtMWFiZTNhYzEwYWE2
LzEvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBAE6NnYGzjpU644RCrtDy
eTLKYu8Je9a/d4dMEueifq2Aau1aZBGZ9feJFS+1WzqQOejKT3MgSP5Fu1SKVZJr
Lh8dJneLb2gJxcmWvvPp9VyXiAj7Bwy9Uyx7DEnAOEC0UCk7kMGq822YB5utLk9J
UYud0ZsmemoCPYCBTLn8gnTAvOqaCwbOpzLGED0O9gawmko8+fhAEgViodoRkOF4
I42L9GIGqyzxiDIC9qunRC4nnXf03FNoMcr0NocNbK7vKvfRVTPkq1U7cjctARN5
MGwK+fZdnXOrh5NQDXXEgy8xvqh5IChfHRhdXvepdyefOIm8LzJtgSNcDBuSN9i3
rDw=
-----END CERTIFICATE-----
Generated at Thu May 1 18:14:32 2025 by rpki-client