Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/M-eRJxa6RGlioavVs7xZvV_RbO8.roa
File: M-eRJxa6RGlioavVs7xZvV_RbO8.roa (raw, json)
Hash identifier: DpkuoAuPaNSMCdcreAOU/sz4H8wCnz00ct2PVAAuI3A=
Subject key identifier: 33:E7:91:27:16:BA:44:69:62:A1:AB:D5:B3:BC:59:BD:5F:D1:6C:EF
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0181D8C95A83401B848F40A1D3CDFC6016A4
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/M-eRJxa6RGlioavVs7xZvV_RbO8.roa
Signing time: Thu 07 Jul 2022 13:11:23 +0000
ROA not before: Thu 07 Jul 2022 13:11:23 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:81:d8:c9:5a:83:40:1b:84:8f:40:a1:d3:cd:fc:60:16:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Jul 7 13:11:23 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=33e7912716ba446962a1abd5b3bc59bd5fd16cef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:9f:0f:bd:39:8f:e4:fc:5d:26:e8:bb:a6:ef:
11:1c:38:d0:d5:3d:38:72:5f:9d:9d:8e:8a:ed:b7:
5f:8e:cb:a1:34:c2:c6:30:6b:76:4c:d0:bc:77:ec:
31:c5:2a:7d:e4:e9:c2:65:1f:09:fb:43:21:56:c5:
ab:05:f8:e6:cd:c5:9f:d4:2a:88:1b:1f:62:a4:1b:
32:7c:33:c2:6e:4b:1e:bf:3b:34:a7:c9:39:4f:65:
a1:79:18:94:de:2f:d4:6c:7d:5c:9d:64:58:08:8f:
99:de:98:79:9c:ce:87:fc:e9:eb:60:e0:04:8a:7f:
46:f6:9d:01:89:c7:f7:3f:17:ed:0b:2d:97:63:bf:
13:53:5b:91:e4:cb:1f:28:06:89:37:16:22:41:95:
9c:d7:e6:6c:27:33:e0:a0:2f:9e:37:1b:71:b9:51:
32:64:7e:9d:31:6e:21:fb:ae:1c:ef:0e:63:6f:43:
e4:b1:6e:7c:fc:5e:5f:dd:44:e9:ea:91:2a:8b:d8:
40:31:79:1f:44:73:d5:76:26:20:90:c4:4d:e3:f9:
30:fc:de:5f:1e:ce:49:0b:30:c3:9f:59:9e:63:af:
9e:17:14:b7:32:80:67:f9:67:63:c4:6c:9d:54:fb:
d3:ab:9e:ba:96:43:30:09:38:f7:cc:60:d6:ce:02:
84:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:E7:91:27:16:BA:44:69:62:A1:AB:D5:B3:BC:59:BD:5F:D1:6C:EF
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/M-eRJxa6RGlioavVs7xZvV_RbO8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
4a:b4:e2:43:72:fd:00:e8:a5:f7:3e:ff:f9:70:1c:a4:9c:9a:
7b:2e:68:c6:86:58:d8:40:15:a4:9a:b0:eb:06:94:b9:87:12:
72:c9:24:db:28:52:27:a6:86:e3:9c:d7:11:8b:db:13:41:2a:
18:82:70:3d:70:6f:34:cd:77:e4:09:e2:a9:9c:90:a6:d3:21:
86:81:0a:4b:dc:78:f6:bd:00:07:5b:b6:de:00:45:ca:ad:25:
d9:3d:96:b5:86:df:33:33:54:06:2a:04:50:47:cd:a8:6e:47:
72:3c:7b:42:67:84:1e:a4:76:37:88:51:0f:aa:6d:46:63:b8:
cf:fc:96:be:0f:7a:23:5d:70:91:83:0a:2a:6f:1d:f3:6a:0a:
b0:4b:8a:97:9a:78:0a:b0:69:b9:69:42:40:86:55:a3:5c:91:
72:bd:c2:4d:23:64:6b:3b:2b:f7:f1:95:67:a1:43:36:ba:b4:
6e:3f:9a:61:c8:69:44:ff:f0:50:a7:44:ea:02:16:b1:71:3a:
b6:e1:cb:5b:f2:73:5a:9a:6e:34:88:87:d3:67:91:de:83:ad:
b0:f0:d5:de:90:47:76:c4:35:7d:2c:50:97:71:b7:43:4c:0e:
34:f2:50:05:44:9e:8d:b5:1d:0f:1a:ee:fc:65:c2:19:d6:90:
a7:26:75:ba
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYHYyVqDQBuEj0Ch0838YBakMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcyMDQ3YmUxNWIyNzU5MDJkY2Y2MTdkYzNkMGUxNmRjMWYz
MDgwMjIwHhcNMjIwNzA3MTMxMTIzWhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzM2U3OTEyNzE2YmE0NDY5NjJhMWFiZDViM2JjNTliZDVmZDE2Y2VmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsZ8PvTmP5PxdJui7pu8RHDjQ1T04
cl+dnY6K7bdfjsuhNMLGMGt2TNC8d+wxxSp95OnCZR8J+0MhVsWrBfjmzcWf1CqI
Gx9ipBsyfDPCbksevzs0p8k5T2WheRiU3i/UbH1cnWRYCI+Z3ph5nM6H/OnrYOAE
in9G9p0Bicf3PxftCy2XY78TU1uR5MsfKAaJNxYiQZWc1+ZsJzPgoC+eNxtxuVEy
ZH6dMW4h+64c7w5jb0PksW58/F5f3UTp6pEqi9hAMXkfRHPVdiYgkMRN4/kw/N5f
Hs5JCzDDn1meY6+eFxS3MoBn+WdjxGydVPvTq566lkMwCTj3zGDWzgKEYQIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFDPnkScWukRpYqGr1bO8Wb1f0WzvMB8GA1UdIwQY
MBaAFHIEe+FbJ1kC3PYX3D0OFtwfMIAiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMt
MWFiZTNhYzEwYWE2LzEvTS1lUkp4YTZSR2xpb2F2VnM3eFp2Vl9SYk84LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMtMWFiZTNhYzEwYWE2
LzEvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBAEq04kNy/QDopfc+//lw
HKScmnsuaMaGWNhAFaSasOsGlLmHEnLJJNsoUiemhuOc1xGL2xNBKhiCcD1wbzTN
d+QJ4qmckKbTIYaBCkvcePa9AAdbtt4ARcqtJdk9lrWG3zMzVAYqBFBHzahuR3I8
e0JnhB6kdjeIUQ+qbUZjuM/8lr4PeiNdcJGDCipvHfNqCrBLipeaeAqwablpQkCG
VaNckXK9wk0jZGs7K/fxlWehQza6tG4/mmHIaUT/8FCnROoCFrFxOrbhy1vyc1qa
bjSIh9Nnkd6DrbDw1d6QR3bENX0sUJdxt0NMDjTyUAVEno21HQ8a7vxlwhnWkKcm
dbo=
-----END CERTIFICATE-----
Generated at Fri May 2 13:18:45 2025 by rpki-client