Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/eG93JdJJImaTTBrQ9c_S-BHY6dU.roa
File: eG93JdJJImaTTBrQ9c_S-BHY6dU.roa (raw, json)
Hash identifier: EGHssRmT/cQ+KQX8PM8dXlA68jVbUD3fMAWHk6ii1cE=
Subject key identifier: 78:6F:77:25:D2:49:22:66:93:4C:1A:D0:F5:CF:D2:F8:11:D8:E9:D5
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0182207744DDA9B01F9829DB9DA483BD5D5A
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/eG93JdJJImaTTBrQ9c_S-BHY6dU.roa
Signing time: Thu 21 Jul 2022 11:14:23 +0000
ROA not before: Thu 21 Jul 2022 11:14:23 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:20:77:44:dd:a9:b0:1f:98:29:db:9d:a4:83:bd:5d:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Jul 21 11:14:23 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=786f7725d2492266934c1ad0f5cfd2f811d8e9d5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:27:21:d6:32:3d:a2:d5:83:4c:20:a4:9e:f5:
f0:ae:83:f0:c6:49:47:0c:b7:a0:0b:c3:15:c6:81:
02:95:b1:b1:cd:08:bf:b0:7b:ed:f8:ec:dc:63:34:
1e:d9:4a:0a:e0:dc:3e:aa:73:4a:fe:4a:e3:4d:a6:
64:44:95:49:f6:cf:36:75:3e:c4:ea:2e:b3:7d:05:
6c:c9:10:28:e9:69:e8:20:92:07:8c:70:69:07:ef:
8e:0f:0c:b6:34:c7:a5:ba:ce:68:57:65:d4:50:8f:
90:97:d4:49:3d:c5:d8:a1:7a:c6:8b:aa:53:9b:05:
8b:02:75:33:6a:c9:ac:22:6c:fa:a3:d9:f0:b8:f1:
ad:dc:c1:fb:a6:0a:7e:cb:ef:f1:28:26:2c:f4:f7:
7d:d2:c5:ef:15:69:a6:4c:7d:a1:b0:9a:4b:dd:c4:
e1:27:db:a3:b1:ad:30:04:24:af:47:6e:cd:d8:e3:
8b:1a:d9:d2:14:b3:4b:53:c1:36:2f:33:73:c1:a7:
51:5a:57:77:a6:85:a8:3b:8b:1c:73:b6:67:78:a3:
ed:5f:e8:24:37:62:5d:d6:33:a8:1c:dc:40:d2:22:
8e:cb:06:5c:65:4a:e7:d0:b7:16:5d:2e:88:6b:c2:
59:7c:88:81:8a:0a:d9:27:c6:8b:b7:48:20:88:bb:
84:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:6F:77:25:D2:49:22:66:93:4C:1A:D0:F5:CF:D2:F8:11:D8:E9:D5
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/eG93JdJJImaTTBrQ9c_S-BHY6dU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
28:69:45:23:1e:d7:a7:cf:53:cc:12:38:4f:cc:70:68:35:31:
5d:78:e8:db:ce:11:85:ca:8c:3d:3a:62:c1:46:d1:19:fb:93:
44:9e:22:a9:a3:90:59:4d:25:98:e7:44:98:c1:67:a3:3e:24:
89:62:36:c2:3b:41:3f:ee:ca:89:98:03:4d:a7:a1:f8:a2:cc:
b5:5a:4c:a5:ec:90:39:7b:66:5f:d5:1b:e2:9e:f1:b6:03:11:
fc:34:b8:e3:00:88:17:5a:98:34:2a:b7:37:69:ca:fd:c7:c2:
5a:a1:cb:11:d5:8c:f2:52:14:86:c7:07:9c:63:a5:b3:6e:1d:
bd:d6:42:35:f7:ad:b0:ac:a9:3e:9a:3d:63:0c:87:4e:21:5a:
90:36:04:93:53:c7:20:30:30:a5:f2:28:12:8c:ed:5a:2d:df:
9b:3f:f5:f6:fb:ab:de:4e:e3:09:19:bf:34:af:c3:12:8f:67:
97:b7:ec:86:49:47:b0:d4:bf:c6:b5:23:74:03:bb:86:7e:2c:
f0:3a:d2:fa:eb:7e:d2:5c:2a:ec:39:db:b0:3b:6a:6e:cf:6d:
d7:eb:05:57:fa:19:c6:9c:bb:79:b3:e1:b2:49:87:20:a0:69:
8b:95:45:7d:01:74:2c:e6:f4:e9:f9:96:f2:11:7b:97:56:8c:
57:6e:67:42
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYIgd0TdqbAfmCnbnaSDvV1aMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcyMDQ3YmUxNWIyNzU5MDJkY2Y2MTdkYzNkMGUxNmRjMWYz
MDgwMjIwHhcNMjIwNzIxMTExNDIzWhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3ODZmNzcyNWQyNDkyMjY2OTM0YzFhZDBmNWNmZDJmODExZDhlOWQ1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjCch1jI9otWDTCCknvXwroPwxklH
DLegC8MVxoEClbGxzQi/sHvt+OzcYzQe2UoK4Nw+qnNK/krjTaZkRJVJ9s82dT7E
6i6zfQVsyRAo6WnoIJIHjHBpB++ODwy2NMelus5oV2XUUI+Ql9RJPcXYoXrGi6pT
mwWLAnUzasmsImz6o9nwuPGt3MH7pgp+y+/xKCYs9Pd90sXvFWmmTH2hsJpL3cTh
J9ujsa0wBCSvR27N2OOLGtnSFLNLU8E2LzNzwadRWld3poWoO4scc7ZneKPtX+gk
N2Jd1jOoHNxA0iKOywZcZUrn0LcWXS6Ia8JZfIiBigrZJ8aLt0ggiLuE+wIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFHhvdyXSSSJmk0wa0PXP0vgR2OnVMB8GA1UdIwQY
MBaAFHIEe+FbJ1kC3PYX3D0OFtwfMIAiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMt
MWFiZTNhYzEwYWE2LzEvZUc5M0pkSkpJbWFUVEJyUTljX1MtQkhZNmRVLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMtMWFiZTNhYzEwYWE2
LzEvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBAChpRSMe16fPU8wSOE/M
cGg1MV146NvOEYXKjD06YsFG0Rn7k0SeIqmjkFlNJZjnRJjBZ6M+JIliNsI7QT/u
yomYA02nofiizLVaTKXskDl7Zl/VG+Ke8bYDEfw0uOMAiBdamDQqtzdpyv3Hwlqh
yxHVjPJSFIbHB5xjpbNuHb3WQjX3rbCsqT6aPWMMh04hWpA2BJNTxyAwMKXyKBKM
7Vot35s/9fb7q95O4wkZvzSvwxKPZ5e37IZJR7DUv8a1I3QDu4Z+LPA60vrrftJc
Kuw527A7am7PbdfrBVf6Gcacu3mz4bJJhyCgaYuVRX0BdCzm9On5lvIRe5dWjFdu
Z0I=
-----END CERTIFICATE-----
Generated at Mon May 5 04:55:05 2025 by rpki-client