Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/ECzA0CsDF9kldUm4K1tMwp_2U4Q.roa
File: ECzA0CsDF9kldUm4K1tMwp_2U4Q.roa (raw, json)
Hash identifier: q26tCorhXwbY4i7ebwpXufdPK/2m68vXLhHra0uCP60=
Subject key identifier: 10:2C:C0:D0:2B:03:17:D9:25:75:49:B8:2B:5B:4C:C2:9F:F6:53:84
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 6CA9A862
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/ECzA0CsDF9kldUm4K1tMwp_2U4Q.roa
Signing time: Tue 22 Feb 2022 02:08:41 +0000
ROA not before: Tue 22 Feb 2022 02:08:41 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:17f:1bf4:40b5/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1823058018 (0x6ca9a862)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Feb 22 02:08:41 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=102cc0d02b0317d9257549b82b5b4cc29ff65384
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:f2:6f:6d:07:bb:70:c3:cd:73:ed:7f:12:a7:
02:32:9a:e9:6f:5d:92:61:40:36:9d:06:b4:d4:ec:
25:bf:48:ad:d9:94:2b:b6:89:18:14:42:14:8f:ea:
c4:0b:c0:87:70:cc:e0:e7:75:80:fe:8b:38:1f:69:
55:35:ac:e5:aa:73:28:29:4e:6d:57:6e:f0:9b:19:
06:4e:16:67:ed:1a:57:8e:f8:0e:14:e2:0a:46:c6:
7b:46:4e:b3:54:9c:75:28:d2:33:cc:a2:c1:4c:fe:
e1:7e:1d:ae:3f:29:15:db:41:79:e5:03:64:23:1c:
94:36:d0:3c:e7:a6:13:2f:56:7f:17:ab:af:bb:e5:
d3:5d:02:87:5e:62:3a:0a:28:60:72:27:2d:d2:36:
93:c7:78:eb:70:f5:74:84:01:76:6d:bd:0a:54:98:
59:52:a6:91:9d:50:96:4f:77:71:fc:e2:cb:65:d3:
fa:51:54:8b:b5:e8:c8:8d:0c:67:61:8a:36:ba:15:
37:c3:9a:ce:5b:d4:fc:94:8c:13:f1:cb:85:82:fc:
23:0b:15:a8:35:38:ad:03:7c:00:93:19:90:f1:b6:
f6:c7:f0:0e:5a:91:cb:7f:cf:c3:89:5c:83:97:c6:
40:78:3b:c1:d5:80:58:b5:1e:b7:73:59:71:00:f4:
03:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:2C:C0:D0:2B:03:17:D9:25:75:49:B8:2B:5B:4C:C2:9F:F6:53:84
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/ECzA0CsDF9kldUm4K1tMwp_2U4Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
aa:7a:66:92:54:d4:2c:3a:6c:e3:ee:e6:b5:ac:94:8f:60:50:
e9:4e:43:79:89:cb:7b:4c:80:ea:0d:c8:eb:8e:94:90:1e:9d:
81:75:88:8e:0a:a4:14:2a:dd:42:1b:71:a7:65:dc:81:b7:ce:
7c:bf:9c:5f:f6:53:a6:40:12:29:b7:db:5b:e7:2a:18:0d:a6:
2f:7c:f9:6a:9b:cc:86:7f:77:7e:10:d1:50:73:15:00:b7:88:
43:08:79:6a:93:cb:db:8d:a6:3d:d9:20:65:df:47:74:6d:5a:
85:0c:f2:4c:f4:f5:87:95:a9:cf:4f:d8:e5:74:8b:6c:78:0e:
e2:74:da:e8:33:38:68:99:2b:08:6b:ce:bd:c5:b4:ec:7b:05:
ea:5f:ed:4e:d1:08:f2:05:0f:8d:f3:ff:a1:17:45:cf:40:c0:
a7:d3:9f:fd:25:a0:55:95:6d:14:01:2c:de:b3:6b:58:62:91:
dd:6e:55:58:ca:5e:46:67:1f:44:c1:c8:97:ae:58:03:4f:38:
24:ff:13:8e:f6:f3:61:ed:c1:e8:8f:4f:54:c6:24:23:69:25:
81:90:7f:38:cd:1a:d8:cb:c6:88:d6:2c:25:56:b8:50:f7:81:
a3:92:55:2f:42:b5:81:10:e5:50:f3:5e:a5:c3:93:5d:45:89:
9c:d5:b5:08
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgIEbKmoYjANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg3
MjA0N2JlMTViMjc1OTAyZGNmNjE3ZGMzZDBlMTZkYzFmMzA4MDIyMB4XDTIyMDIy
MjAyMDg0MVoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoMTAyY2MwZDAyYjAz
MTdkOTI1NzU0OWI4MmI1YjRjYzI5ZmY2NTM4NDCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBALnyb20Hu3DDzXPtfxKnAjKa6W9dkmFANp0GtNTsJb9IrdmU
K7aJGBRCFI/qxAvAh3DM4Od1gP6LOB9pVTWs5apzKClObVdu8JsZBk4WZ+0aV474
DhTiCkbGe0ZOs1ScdSjSM8yiwUz+4X4drj8pFdtBeeUDZCMclDbQPOemEy9Wfxer
r7vl010Ch15iOgooYHInLdI2k8d463D1dIQBdm29ClSYWVKmkZ1Qlk93cfziy2XT
+lFUi7XoyI0MZ2GKNroVN8OazlvU/JSME/HLhYL8IwsVqDU4rQN8AJMZkPG29sfw
DlqRy3/Pw4lcg5fGQHg7wdWAWLUet3NZcQD0A5ECAwEAAaOCAhowggIWMB0GA1Ud
DgQWBBQQLMDQKwMX2SV1SbgrW0zCn/ZThDAfBgNVHSMEGDAWgBRyBHvhWydZAtz2
F9w9DhbcHzCAIjAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L2NnUjc0VnNuV1FMYzloZmNQUTRXM0I4d2dDSS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvNWUvNzk4NDQ3LTIxZjQtNDVhYi05OWRjLTFhYmUzYWMxMGFhNi8x
L0VDekEwQ3NERjlrbGRVbTRLMXRNd3BfMlU0US5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNWUv
Nzk4NDQ3LTIxZjQtNDVhYi05OWRjLTFhYmUzYWMxMGFhNi8xL2NnUjc0VnNuV1FM
YzloZmNQUTRXM0I4d2dDSS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAw
BggrBgEFBQcBBwEB/wQhMB8wDAQCAAEwBgMEA8EAGDAPBAIAAjAJAwcAIAEGfABk
MA0GCSqGSIb3DQEBCwUAA4IBAQCqemaSVNQsOmzj7ua1rJSPYFDpTkN5ict7TIDq
DcjrjpSQHp2BdYiOCqQUKt1CG3GnZdyBt858v5xf9lOmQBIpt9tb5yoYDaYvfPlq
m8yGf3d+ENFQcxUAt4hDCHlqk8vbjaY92SBl30d0bVqFDPJM9PWHlanPT9jldIts
eA7idNroMzhomSsIa869xbTsewXqX+1O0QjyBQ+N8/+hF0XPQMCn05/9JaBVlW0U
ASzes2tYYpHdblVYyl5GZx9EwciXrlgDTzgk/xOO9vNh7cHoj09UxiQjaSWBkH84
zRrYy8aI1iwlVrhQ94GjklUvQrWBEOVQ816lw5NdRYmc1bUI
-----END CERTIFICATE-----
Generated at Wed Apr 30 19:56:28 2025 by rpki-client