Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/e9_Zpskt6sHG4Y3sfvqGhCF0CPs.roa
File: e9_Zpskt6sHG4Y3sfvqGhCF0CPs.roa (raw, json)
Hash identifier: inlxvpn5jA87kE5wNQ8h4lq4ovg0kj+33LMAwSoy1EE=
Subject key identifier: 7B:DF:D9:A6:C9:2D:EA:C1:C6:E1:8D:EC:7E:FA:86:84:21:74:08:FB
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0185F05914946F20CFB2E7A7370F576605EB
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/e9_Zpskt6sHG4Y3sfvqGhCF0CPs.roa
Signing time: Thu 26 Jan 2023 23:10:47 +0000
ROA not before: Thu 26 Jan 2023 23:10:47 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:f0:59:14:94:6f:20:cf:b2:e7:a7:37:0f:57:66:05:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Jan 26 23:10:47 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=7bdfd9a6c92deac1c6e18dec7efa8684217408fb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:e5:7a:f7:2d:c4:d1:30:c8:d7:ff:eb:62:a3:
5a:81:87:60:70:4f:a9:ef:25:74:d3:7f:72:4f:e4:
0e:37:b0:d0:ee:7f:5c:86:08:41:7c:a0:55:21:fa:
4a:73:7c:b8:ae:cf:49:d6:24:67:23:33:a1:a1:b8:
28:dc:c7:90:bb:c7:ed:ca:63:de:f3:a2:77:92:09:
65:de:df:99:9d:95:6d:a1:96:fb:a7:a9:13:7e:ac:
a0:cd:0c:70:a8:c2:05:c7:a3:00:a2:f0:78:13:98:
29:50:8d:16:eb:6a:75:59:78:a2:7d:08:4c:50:12:
4d:cb:4e:e5:01:f5:71:e2:51:16:ed:21:30:b1:2e:
5a:54:b1:e1:af:d3:7e:a4:76:2c:87:20:fa:b2:96:
60:91:79:64:b4:03:c5:50:c2:0b:5c:fd:c1:36:c9:
59:f4:8f:9a:f9:ec:6b:eb:2d:ed:44:af:ce:f0:ee:
ce:e0:b2:6b:2f:96:2f:81:3e:ac:f3:af:83:07:cd:
4b:10:e2:84:9d:e3:2d:4e:93:06:70:c8:c3:e5:1b:
8e:e2:98:6a:43:ce:76:f6:e9:42:91:c5:2a:9c:c0:
29:2b:a8:ad:6b:8f:54:b4:e9:7c:6b:21:bf:8e:36:
ba:23:34:e2:2c:74:44:4e:5e:f1:fc:be:42:cf:82:
b5:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:DF:D9:A6:C9:2D:EA:C1:C6:E1:8D:EC:7E:FA:86:84:21:74:08:FB
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/e9_Zpskt6sHG4Y3sfvqGhCF0CPs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
05:a8:a4:45:ec:79:6e:93:94:c2:fa:f6:63:f0:dd:37:8c:be:
b9:b4:38:0b:54:db:5b:55:ab:21:66:da:91:1a:82:43:38:a7:
e8:6a:d0:de:0d:e0:8e:02:d0:1c:4a:05:7d:b7:db:95:fc:67:
9f:f8:32:f1:58:9f:7b:64:8d:cb:6b:44:ec:54:66:12:62:d8:
37:c9:3d:19:a2:b7:9b:49:50:b6:87:b2:3c:db:a5:77:72:cb:
ed:0c:fb:7c:a4:40:53:90:ee:8e:2f:60:3f:bf:42:e7:55:5b:
71:94:db:3e:3f:db:ea:44:16:9c:75:a3:fc:11:19:12:66:28:
b5:c8:27:a5:e8:9b:71:e6:a4:4e:c5:49:db:8b:05:86:19:fa:
59:1f:c0:d0:ec:c7:97:5f:9b:56:35:19:07:5b:68:e8:1f:e0:
9f:42:6c:8b:15:32:92:66:24:a3:09:36:59:65:d6:4b:02:18:
6b:6e:30:bd:5c:a8:69:63:c7:6c:2e:b5:26:9d:bb:ed:43:4c:
b2:f1:fd:bc:76:5d:96:e3:58:be:7b:c0:13:5d:38:2b:05:78:
30:4d:0c:e1:8d:dc:9b:b1:2e:2a:b1:66:06:b0:7a:0c:ce:09:
ea:cf:99:5a:be:c3:f7:8a:e6:31:66:04:e8:11:d5:80:90:2a:
fb:dd:01:b4
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYXwWRSUbyDPsuenNw9XZgXrMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcyMDQ3YmUxNWIyNzU5MDJkY2Y2MTdkYzNkMGUxNmRjMWYz
MDgwMjIwHhcNMjMwMTI2MjMxMDQ3WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3YmRmZDlhNmM5MmRlYWMxYzZlMThkZWM3ZWZhODY4NDIxNzQwOGZiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4eV69y3E0TDI1//rYqNagYdgcE+p
7yV0039yT+QON7DQ7n9chghBfKBVIfpKc3y4rs9J1iRnIzOhobgo3MeQu8ftymPe
86J3kgll3t+ZnZVtoZb7p6kTfqygzQxwqMIFx6MAovB4E5gpUI0W62p1WXiifQhM
UBJNy07lAfVx4lEW7SEwsS5aVLHhr9N+pHYshyD6spZgkXlktAPFUMILXP3BNslZ
9I+a+exr6y3tRK/O8O7O4LJrL5YvgT6s86+DB81LEOKEneMtTpMGcMjD5RuO4phq
Q8529ulCkcUqnMApK6ita49UtOl8ayG/jja6IzTiLHRETl7x/L5Cz4K1ZQIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFHvf2abJLerBxuGN7H76hoQhdAj7MB8GA1UdIwQY
MBaAFHIEe+FbJ1kC3PYX3D0OFtwfMIAiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMt
MWFiZTNhYzEwYWE2LzEvZTlfWnBza3Q2c0hHNFkzc2Z2cUdoQ0YwQ1BzLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMtMWFiZTNhYzEwYWE2
LzEvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBAAWopEXseW6TlML69mPw
3TeMvrm0OAtU21tVqyFm2pEagkM4p+hq0N4N4I4C0BxKBX2325X8Z5/4MvFYn3tk
jctrROxUZhJi2DfJPRmit5tJULaHsjzbpXdyy+0M+3ykQFOQ7o4vYD+/QudVW3GU
2z4/2+pEFpx1o/wRGRJmKLXIJ6Xom3HmpE7FSduLBYYZ+lkfwNDsx5dfm1Y1GQdb
aOgf4J9CbIsVMpJmJKMJNlll1ksCGGtuML1cqGljx2wutSadu+1DTLLx/bx2XZbj
WL57wBNdOCsFeDBNDOGN3JuxLiqxZgawegzOCerPmVq+w/eK5jFmBOgR1YCQKvvd
AbQ=
-----END CERTIFICATE-----
Generated at Wed Apr 30 21:27:41 2025 by rpki-client