Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/eZ5FgDuBi4dK1g1-k_pqCS0roEo.roa
File: eZ5FgDuBi4dK1g1-k_pqCS0roEo.roa (raw, json)
Hash identifier: Mly/eZCQg0iofSEFAmlsHVr3ALYLOhQ9DNvBDf5ZfxE=
Subject key identifier: 79:9E:45:80:3B:81:8B:87:4A:D6:0D:7E:93:FA:6A:09:2D:2B:A0:4A
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 018429E394A7A8BCF91DE99D10C98F27FAD5
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/eZ5FgDuBi4dK1g1-k_pqCS0roEo.roa
Signing time: Sun 30 Oct 2022 17:14:51 +0000
ROA not before: Sun 30 Oct 2022 17:14:51 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:29:e3:94:a7:a8:bc:f9:1d:e9:9d:10:c9:8f:27:fa:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Oct 30 17:14:51 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=799e45803b818b874ad60d7e93fa6a092d2ba04a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:e0:17:72:74:5c:41:27:e3:71:f7:0d:0a:6f:
cc:90:51:2f:d4:dc:5c:ae:e8:43:ae:cf:01:89:4f:
25:a0:2d:72:25:5b:0f:f3:a5:fa:84:f1:89:13:75:
a6:ce:d2:90:3b:aa:86:d3:5d:0d:fd:45:93:9c:e2:
13:22:26:15:04:20:13:3c:2f:75:ba:ae:b3:d1:56:
bf:86:73:b5:12:92:99:35:fe:c2:04:49:1f:eb:96:
ae:e7:ec:1c:5f:d8:d6:55:a9:24:23:79:7a:ce:46:
e6:6e:0b:de:48:bd:a6:20:ac:b3:f0:63:c4:6c:83:
06:75:68:12:8e:1a:89:1d:a4:b4:54:36:c7:68:26:
79:5e:71:9e:da:de:39:29:b2:00:8f:0c:01:f8:82:
00:84:4f:a9:1e:79:f0:cb:1e:b7:be:8f:c8:21:e8:
8e:a8:b5:9c:bf:2a:46:97:46:eb:e9:c3:60:78:41:
cb:cb:ad:92:19:58:ef:2b:38:50:98:cb:c7:17:c0:
4c:e5:ce:25:9b:24:98:b1:6c:3d:0c:4d:65:36:a2:
78:a0:3d:d7:1d:32:85:c8:5e:1a:3f:e8:c2:34:e2:
aa:b6:3b:53:dd:14:3b:58:a0:3c:fc:3c:0f:60:33:
53:9c:4b:50:59:70:33:a6:b4:31:d3:b1:c7:9c:43:
8c:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:9E:45:80:3B:81:8B:87:4A:D6:0D:7E:93:FA:6A:09:2D:2B:A0:4A
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/eZ5FgDuBi4dK1g1-k_pqCS0roEo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
2f:97:53:54:c8:91:bf:da:1b:de:3f:e7:c5:42:6d:07:c4:83:
9b:ef:3b:bb:e5:c0:0d:02:04:5f:df:c4:2e:fa:a9:49:fc:f8:
16:2c:d0:3e:b1:54:8b:2c:ab:b0:65:1b:36:76:77:73:5f:dc:
0b:f8:03:42:ac:c0:2c:5b:74:d7:85:80:61:6c:cb:30:ec:4d:
49:9e:0a:1f:5b:82:2b:d4:00:e3:38:ef:3e:97:ac:bf:56:5c:
60:00:b3:78:5a:7b:63:02:83:0b:f6:af:08:39:4b:63:41:af:
6d:95:0d:87:27:05:a7:39:fc:6a:fb:f8:c5:84:1d:cf:e0:da:
d3:54:76:85:0d:66:4f:61:dd:69:b8:78:ec:ed:71:42:10:5c:
e7:95:d5:2d:1d:3e:28:37:a3:35:c9:fe:13:48:d5:06:48:42:
a8:8f:80:11:c4:0a:90:c6:ab:06:1b:3b:f2:dc:a9:f2:96:f3:
89:88:61:bb:88:74:59:0d:98:ad:62:8d:b3:09:e6:b1:56:8f:
96:99:2e:82:d6:19:8e:6d:a4:98:41:f0:d8:d1:3f:43:66:f8:
ba:1a:c3:94:2a:9f:13:cb:9d:bc:92:9c:24:1f:0c:ca:76:cc:
73:a0:ec:1e:5d:a6:43:fe:25:36:a5:0f:6e:73:7d:f7:a6:25:
b0:01:23:ac
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYQp45SnqLz5HemdEMmPJ/rVMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcyMDQ3YmUxNWIyNzU5MDJkY2Y2MTdkYzNkMGUxNmRjMWYz
MDgwMjIwHhcNMjIxMDMwMTcxNDUxWhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3OTllNDU4MDNiODE4Yjg3NGFkNjBkN2U5M2ZhNmEwOTJkMmJhMDRhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6eAXcnRcQSfjcfcNCm/MkFEv1Nxc
ruhDrs8BiU8loC1yJVsP86X6hPGJE3WmztKQO6qG010N/UWTnOITIiYVBCATPC91
uq6z0Va/hnO1EpKZNf7CBEkf65au5+wcX9jWVakkI3l6zkbmbgveSL2mIKyz8GPE
bIMGdWgSjhqJHaS0VDbHaCZ5XnGe2t45KbIAjwwB+IIAhE+pHnnwyx63vo/IIeiO
qLWcvypGl0br6cNgeEHLy62SGVjvKzhQmMvHF8BM5c4lmySYsWw9DE1lNqJ4oD3X
HTKFyF4aP+jCNOKqtjtT3RQ7WKA8/DwPYDNTnEtQWXAzprQx07HHnEOMbQIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFHmeRYA7gYuHStYNfpP6agktK6BKMB8GA1UdIwQY
MBaAFHIEe+FbJ1kC3PYX3D0OFtwfMIAiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMt
MWFiZTNhYzEwYWE2LzEvZVo1RmdEdUJpNGRLMWcxLWtfcHFDUzByb0VvLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMtMWFiZTNhYzEwYWE2
LzEvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBAC+XU1TIkb/aG94/58VC
bQfEg5vvO7vlwA0CBF/fxC76qUn8+BYs0D6xVIssq7BlGzZ2d3Nf3Av4A0KswCxb
dNeFgGFsyzDsTUmeCh9bgivUAOM47z6XrL9WXGAAs3hae2MCgwv2rwg5S2NBr22V
DYcnBac5/Gr7+MWEHc/g2tNUdoUNZk9h3Wm4eOztcUIQXOeV1S0dPig3ozXJ/hNI
1QZIQqiPgBHECpDGqwYbO/LcqfKW84mIYbuIdFkNmK1ijbMJ5rFWj5aZLoLWGY5t
pJhB8NjRP0Nm+Loaw5QqnxPLnbySnCQfDMp2zHOg7B5dpkP+JTalD25zffemJbAB
I6w=
-----END CERTIFICATE-----
Generated at Wed Apr 30 17:42:32 2025 by rpki-client