Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/EYZGIgFqqPKjNzxLT1cMMS7rGF8.roa
File: EYZGIgFqqPKjNzxLT1cMMS7rGF8.roa (raw, json)
Hash identifier: r+ugQxJ5ZP2QLTeEWV6HAJjKsXNZQ6qjK0HDGtMA/wU=
Subject key identifier: 11:86:46:22:01:6A:A8:F2:A3:37:3C:4B:4F:57:0C:31:2E:EB:18:5F
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 018205DC74BE5F3899FD1012924732B65F03
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/EYZGIgFqqPKjNzxLT1cMMS7rGF8.roa
Signing time: Sat 16 Jul 2022 07:15:09 +0000
ROA not before: Sat 16 Jul 2022 07:15:09 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:05:dc:74:be:5f:38:99:fd:10:12:92:47:32:b6:5f:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Jul 16 07:15:09 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=11864622016aa8f2a3373c4b4f570c312eeb185f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:6f:b3:42:ab:cd:0b:65:aa:5d:7e:d7:9c:dd:
28:99:1c:b0:0b:12:c3:96:34:f2:12:06:fd:f1:07:
45:c5:68:c8:fd:4f:60:56:a6:f6:1a:db:75:3f:5c:
e7:9b:e3:b9:6f:c0:c7:8b:01:bb:9e:c5:45:db:5f:
c5:e4:7f:99:2b:19:a0:89:00:64:27:dd:35:27:ba:
ad:c5:d5:cd:a3:8e:d4:2c:21:be:f8:43:2a:c0:f2:
49:3b:35:2c:0f:43:04:76:83:49:28:0f:9b:55:77:
2c:39:f5:10:4e:a9:34:47:b3:e5:2e:c8:80:27:b2:
13:bd:05:8f:b1:78:71:24:a7:02:47:e7:24:ba:35:
b9:9a:e6:db:00:5f:92:51:20:e1:67:e2:83:0c:d1:
15:e5:a6:04:a8:f4:7b:42:bf:3e:2e:41:f7:76:b1:
f0:47:a1:14:8c:08:9d:09:5a:4f:43:61:a2:e8:e2:
a7:5c:50:49:e0:ce:48:f3:47:ef:33:54:f8:63:4f:
c6:58:4d:4d:9c:57:0b:5c:9b:5a:75:a4:b0:5f:5f:
9c:4b:d5:31:dc:3a:cc:a3:44:34:bf:b9:2e:4a:30:
55:07:ee:db:82:51:d2:36:92:06:37:1b:7f:a9:1b:
9b:25:02:f4:90:96:b0:da:a9:d2:fa:d9:cd:e8:a6:
57:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:86:46:22:01:6A:A8:F2:A3:37:3C:4B:4F:57:0C:31:2E:EB:18:5F
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/EYZGIgFqqPKjNzxLT1cMMS7rGF8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
6f:e3:af:08:08:83:b8:cb:ed:9e:c1:35:89:3c:13:a6:ea:7d:
20:9d:f1:3a:9c:9d:d9:6a:bb:ca:65:80:f4:be:50:ef:de:21:
62:32:2a:f4:8f:e1:af:45:b7:fa:3e:e7:99:8c:a2:d7:fd:dd:
25:88:17:6e:47:85:7e:a2:14:13:04:42:2c:fd:9b:bc:04:b1:
fa:60:75:f8:46:b9:d4:10:b0:a3:32:72:4d:5f:ee:7e:7d:58:
f0:98:58:46:69:5f:5e:71:53:09:df:b2:be:38:48:96:a5:cb:
ae:a5:e8:ab:c9:7a:34:de:4b:58:17:62:31:14:fb:17:f8:65:
f8:54:fe:a2:b4:34:26:ed:c7:66:68:05:40:56:78:c4:78:f1:
cb:29:91:97:58:46:24:f0:48:24:83:18:2a:54:f5:87:3e:60:
83:79:a2:39:68:0f:09:71:ed:74:17:7d:84:b6:e3:d8:c0:73:
fd:2b:d6:e2:ee:9e:a0:48:d8:53:1e:91:1b:08:8b:e2:ee:50:
13:86:47:16:8a:c6:9b:2b:8d:19:54:5b:3a:b3:75:a3:79:69:
27:41:ca:d4:44:72:8f:24:24:d3:99:cf:a4:fd:85:5c:c1:a1:
53:60:e0:fb:5c:f8:3e:b6:ae:01:16:3a:6b:34:b4:14:16:8d:
8a:a3:77:25
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYIF3HS+XziZ/RASkkcytl8DMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcyMDQ3YmUxNWIyNzU5MDJkY2Y2MTdkYzNkMGUxNmRjMWYz
MDgwMjIwHhcNMjIwNzE2MDcxNTA5WhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxMTg2NDYyMjAxNmFhOGYyYTMzNzNjNGI0ZjU3MGMzMTJlZWIxODVmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1m+zQqvNC2WqXX7XnN0omRywCxLD
ljTyEgb98QdFxWjI/U9gVqb2Gtt1P1znm+O5b8DHiwG7nsVF21/F5H+ZKxmgiQBk
J901J7qtxdXNo47ULCG++EMqwPJJOzUsD0MEdoNJKA+bVXcsOfUQTqk0R7PlLsiA
J7ITvQWPsXhxJKcCR+ckujW5mubbAF+SUSDhZ+KDDNEV5aYEqPR7Qr8+LkH3drHw
R6EUjAidCVpPQ2Gi6OKnXFBJ4M5I80fvM1T4Y0/GWE1NnFcLXJtadaSwX1+cS9Ux
3DrMo0Q0v7kuSjBVB+7bglHSNpIGNxt/qRubJQL0kJaw2qnS+tnN6KZXdwIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFBGGRiIBaqjyozc8S09XDDEu6xhfMB8GA1UdIwQY
MBaAFHIEe+FbJ1kC3PYX3D0OFtwfMIAiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMt
MWFiZTNhYzEwYWE2LzEvRVlaR0lnRnFxUEtqTnp4TFQxY01NUzdyR0Y4LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMtMWFiZTNhYzEwYWE2
LzEvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBAG/jrwgIg7jL7Z7BNYk8
E6bqfSCd8Tqcndlqu8plgPS+UO/eIWIyKvSP4a9Ft/o+55mMotf93SWIF25HhX6i
FBMEQiz9m7wEsfpgdfhGudQQsKMyck1f7n59WPCYWEZpX15xUwnfsr44SJaly66l
6KvJejTeS1gXYjEU+xf4ZfhU/qK0NCbtx2ZoBUBWeMR48cspkZdYRiTwSCSDGCpU
9Yc+YIN5ojloDwlx7XQXfYS249jAc/0r1uLunqBI2FMekRsIi+LuUBOGRxaKxpsr
jRlUWzqzdaN5aSdBytREco8kJNOZz6T9hVzBoVNg4Ptc+D62rgEWOms0tBQWjYqj
dyU=
-----END CERTIFICATE-----
Generated at Fri May 2 13:51:05 2025 by rpki-client