Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/EK0nDTdIzdFzkopmD5QSQ4w_SpU.roa
File: EK0nDTdIzdFzkopmD5QSQ4w_SpU.roa (raw, json)
Hash identifier: Bu9IdG0uT5kqHDSk66FYgLITFqbTMlbq8klRfKW+AgU=
Subject key identifier: 10:AD:27:0D:37:48:CD:D1:73:92:8A:66:0F:94:12:43:8C:3F:4A:95
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0183FB86B24DA029A49174DC7234B26505ED
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/EK0nDTdIzdFzkopmD5QSQ4w_SpU.roa
Signing time: Fri 21 Oct 2022 17:10:52 +0000
ROA not before: Fri 21 Oct 2022 17:10:52 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:fb:86:b2:4d:a0:29:a4:91:74:dc:72:34:b2:65:05:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Oct 21 17:10:52 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=10ad270d3748cdd173928a660f9412438c3f4a95
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:de:cf:68:24:0b:75:77:bb:aa:cd:16:12:f7:
c7:95:4e:04:d9:8e:0c:51:11:26:dc:c6:71:f4:9a:
f0:0c:f3:ad:42:1c:8f:72:a7:4a:cd:82:26:4d:43:
6a:b3:2c:d7:47:d4:be:64:20:86:33:8c:36:4d:bd:
9b:53:b9:34:18:33:bb:83:68:4a:ff:cd:74:9a:e0:
82:7b:2e:73:c6:47:19:89:51:c4:07:cd:45:4e:21:
5a:0e:cb:c0:e7:0e:9f:81:ba:92:2c:9b:75:de:10:
df:f3:c8:a9:12:b7:65:84:3e:d2:19:5a:f8:05:5f:
22:b7:35:a6:6d:79:a0:32:a0:27:9b:99:98:e3:dd:
99:78:e0:c3:b9:72:0c:03:17:91:fb:76:e7:bb:6c:
b9:33:ab:71:4b:82:e1:77:35:75:db:ef:e4:c0:0f:
8a:84:87:d9:ea:75:38:33:40:b7:38:1c:34:b4:fe:
95:4a:8b:c7:88:fc:64:50:c3:c4:85:0f:72:61:eb:
54:ca:f5:89:4e:0d:ff:4e:94:b1:95:84:69:37:3d:
e5:a3:5c:2a:59:9e:a9:6d:6f:e1:a0:65:2f:fe:e1:
f0:00:e9:f7:62:af:47:51:d5:fb:e2:20:89:47:be:
2e:5d:d1:e9:48:c2:ce:96:ce:d5:0e:56:94:81:1f:
6c:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:AD:27:0D:37:48:CD:D1:73:92:8A:66:0F:94:12:43:8C:3F:4A:95
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/EK0nDTdIzdFzkopmD5QSQ4w_SpU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
26:81:a1:36:78:75:45:da:e4:a5:74:b8:a8:98:c7:51:8d:c2:
ee:2b:d8:4d:44:23:db:de:1f:27:29:c7:5e:81:bd:ce:10:07:
ae:28:32:06:e1:0b:f9:d0:5a:23:73:b2:06:e5:60:77:ef:2c:
24:a2:f5:ca:eb:77:fd:2f:41:66:7a:ab:22:86:45:7c:ff:4d:
e4:25:cb:5b:4b:8f:69:4b:a8:b9:c4:42:31:db:36:3e:0e:71:
b3:e0:54:2f:f7:f3:d3:7b:ff:71:f4:a6:9d:53:fb:bd:47:23:
90:c4:59:fc:60:75:35:cd:b1:0f:da:15:91:fb:95:3a:fa:90:
ec:51:76:f9:b0:69:8f:31:1d:1f:84:57:9e:6c:cf:4b:ec:fe:
49:9b:9d:b9:e5:6a:70:fe:61:ad:99:d9:82:d4:ef:ec:a7:20:
26:fb:6e:a9:99:f8:e8:dc:9c:ab:87:95:15:ef:c6:d1:0a:0c:
69:40:2e:c9:7d:6d:2f:4a:6d:f3:5c:18:fa:3a:ee:34:82:ff:
c5:4c:55:e8:7f:ff:10:12:d8:6b:02:72:87:9f:35:c5:6e:ba:
6a:59:29:a5:60:52:1f:8b:b4:e0:b1:be:d0:93:10:4f:07:68:
b0:bd:d6:74:94:73:37:a4:ba:18:62:eb:64:23:de:16:dc:51:
a1:29:5b:c8
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYP7hrJNoCmkkXTccjSyZQXtMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcyMDQ3YmUxNWIyNzU5MDJkY2Y2MTdkYzNkMGUxNmRjMWYz
MDgwMjIwHhcNMjIxMDIxMTcxMDUyWhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxMGFkMjcwZDM3NDhjZGQxNzM5MjhhNjYwZjk0MTI0MzhjM2Y0YTk1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnd7PaCQLdXe7qs0WEvfHlU4E2Y4M
UREm3MZx9JrwDPOtQhyPcqdKzYImTUNqsyzXR9S+ZCCGM4w2Tb2bU7k0GDO7g2hK
/810muCCey5zxkcZiVHEB81FTiFaDsvA5w6fgbqSLJt13hDf88ipErdlhD7SGVr4
BV8itzWmbXmgMqAnm5mY492ZeODDuXIMAxeR+3bnu2y5M6txS4LhdzV12+/kwA+K
hIfZ6nU4M0C3OBw0tP6VSovHiPxkUMPEhQ9yYetUyvWJTg3/TpSxlYRpNz3lo1wq
WZ6pbW/hoGUv/uHwAOn3Yq9HUdX74iCJR74uXdHpSMLOls7VDlaUgR9sewIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFBCtJw03SM3Rc5KKZg+UEkOMP0qVMB8GA1UdIwQY
MBaAFHIEe+FbJ1kC3PYX3D0OFtwfMIAiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMt
MWFiZTNhYzEwYWE2LzEvRUswbkRUZEl6ZEZ6a29wbUQ1UVNRNHdfU3BVLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMtMWFiZTNhYzEwYWE2
LzEvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBACaBoTZ4dUXa5KV0uKiY
x1GNwu4r2E1EI9veHycpx16Bvc4QB64oMgbhC/nQWiNzsgblYHfvLCSi9crrd/0v
QWZ6qyKGRXz/TeQly1tLj2lLqLnEQjHbNj4OcbPgVC/389N7/3H0pp1T+71HI5DE
WfxgdTXNsQ/aFZH7lTr6kOxRdvmwaY8xHR+EV55sz0vs/kmbnbnlanD+Ya2Z2YLU
7+ynICb7bqmZ+OjcnKuHlRXvxtEKDGlALsl9bS9KbfNcGPo67jSC/8VMVeh//xAS
2GsCcoefNcVuumpZKaVgUh+LtOCxvtCTEE8HaLC91nSUczekuhhi62Qj3hbcUaEp
W8g=
-----END CERTIFICATE-----
Generated at Fri May 2 16:46:11 2025 by rpki-client