Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/eZMs2T2bucKY7RvmZ5yROCwk2x8.roa
File: eZMs2T2bucKY7RvmZ5yROCwk2x8.roa (raw, json)
Hash identifier: Dq9NfA4LN9iFCOKgS52fIP7of3grbdhjN4veB0SqQEg=
Subject key identifier: 79:93:2C:D9:3D:9B:B9:C2:98:ED:1B:E6:67:9C:91:38:2C:24:DB:1F
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 9181E683
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/eZMs2T2bucKY7RvmZ5yROCwk2x8.roa
Signing time: Fri 01 Jul 2022 16:10:25 +0000
ROA not before: Fri 01 Jul 2022 16:10:25 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2441209475 (0x9181e683)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Jul 1 16:10:25 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=79932cd93d9bb9c298ed1be6679c91382c24db1f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:09:80:32:d9:6a:85:47:0a:e6:d5:36:73:29:
31:e4:38:ee:d5:a2:c7:4e:ea:f5:fe:ab:33:62:43:
d1:09:72:48:bb:11:1e:49:34:75:a0:2a:66:9e:aa:
a2:29:14:ca:c0:27:ed:a9:02:f2:68:d9:8d:6d:1d:
31:06:51:a4:d1:cc:28:1b:43:ee:b3:30:c0:8a:80:
32:29:fb:b9:97:dd:d5:36:a3:4a:ec:3d:a7:11:5e:
56:b2:57:f3:c8:1c:32:de:0f:91:34:d7:47:46:52:
44:c9:0c:5a:1c:1b:c2:1b:e8:ce:09:93:9b:71:7f:
d0:3e:4c:74:8d:36:db:09:ef:f4:b3:2e:ec:eb:0f:
c0:ad:1a:68:66:ef:4d:7b:ff:98:ab:85:26:65:12:
11:7d:c9:ec:20:3e:98:df:41:87:3c:14:f2:49:f8:
80:20:fa:b0:bf:eb:d7:22:93:7a:df:5c:80:d6:50:
1a:22:02:62:b6:2f:61:96:89:5d:e1:e4:0a:f2:64:
da:fa:9a:d5:94:66:da:8c:02:11:f1:6e:ee:71:cd:
4a:ba:06:be:38:0e:51:d4:40:e5:05:3b:f4:52:df:
7c:39:2b:a9:64:d4:d8:f3:7e:da:a8:2f:d6:9d:0c:
31:0d:56:4f:fc:c0:8c:e0:48:5b:4a:6a:de:77:c5:
c5:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:93:2C:D9:3D:9B:B9:C2:98:ED:1B:E6:67:9C:91:38:2C:24:DB:1F
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/eZMs2T2bucKY7RvmZ5yROCwk2x8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
aa:31:c6:30:f2:04:cf:c5:a9:06:d2:0d:08:93:db:24:10:77:
3f:eb:ab:a9:31:0a:e1:43:15:24:48:85:df:c0:d4:b1:81:b8:
c9:c2:76:58:1e:d6:9c:bf:e1:f6:61:81:8a:6b:34:a5:f5:20:
e6:63:d8:d3:fd:e4:37:94:7b:94:51:30:b6:9b:32:ea:20:57:
8e:4c:47:0b:85:27:f5:41:d5:d8:a4:1b:21:49:41:2b:91:98:
cd:36:cf:ca:50:4f:10:ce:55:5f:1e:4d:dc:10:0c:13:67:b6:
d3:5a:25:c7:b6:0a:b0:34:dd:8c:9a:06:3a:11:4d:ec:1b:d5:
98:49:3e:70:04:9e:ad:3b:0a:7e:8e:d7:ef:e9:88:8f:36:5a:
51:32:3c:95:8d:5d:0b:bd:60:87:81:72:d3:1a:f6:b3:cd:66:
f1:74:c6:a1:be:87:bc:50:88:1e:b3:23:a1:ca:be:db:37:10:
5c:c7:43:e2:7c:4d:a0:19:f8:20:6c:da:ea:83:81:33:39:d2:
84:78:da:bc:30:a7:0b:42:eb:06:85:39:09:76:a6:06:39:4d:
25:d1:aa:fd:4e:2b:ea:4e:9b:d0:14:7d:85:ed:1b:2c:cc:01:
0f:3e:91:63:3d:48:6a:e1:d2:35:34:75:95:93:5e:98:6f:05:
27:ea:ca:f0
-----BEGIN CERTIFICATE-----
MIIFATCCA+mgAwIBAgIFAJGB5oMwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMo
NzIwNDdiZTE1YjI3NTkwMmRjZjYxN2RjM2QwZTE2ZGMxZjMwODAyMjAeFw0yMjA3
MDExNjEwMjVaFw0yMzA3MDEwMDAwMDBaMDMxMTAvBgNVBAMTKDc5OTMyY2Q5M2Q5
YmI5YzI5OGVkMWJlNjY3OWM5MTM4MmMyNGRiMWYwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQCSCYAy2WqFRwrm1TZzKTHkOO7VosdO6vX+qzNiQ9EJcki7
ER5JNHWgKmaeqqIpFMrAJ+2pAvJo2Y1tHTEGUaTRzCgbQ+6zMMCKgDIp+7mX3dU2
o0rsPacRXlayV/PIHDLeD5E010dGUkTJDFocG8Ib6M4Jk5txf9A+THSNNtsJ7/Sz
LuzrD8CtGmhm7017/5irhSZlEhF9yewgPpjfQYc8FPJJ+IAg+rC/69cik3rfXIDW
UBoiAmK2L2GWiV3h5AryZNr6mtWUZtqMAhHxbu5xzUq6Br44DlHUQOUFO/RS33w5
K6lk1NjzftqoL9adDDENVk/8wIzgSFtKat53xcWVAgMBAAGjggIaMIICFjAdBgNV
HQ4EFgQUeZMs2T2bucKY7RvmZ5yROCwk2x8wHwYDVR0jBBgwFoAUcgR74VsnWQLc
9hfcPQ4W3B8wgCIwDgYDVR0PAQH/BAQDAgeAMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvREVGQVVM
VC9jZ1I3NFZzbldRTGM5aGZjUFE0VzNCOHdnQ0kuY2VyMIGNBggrBgEFBQcBCwSB
gDB+MHwGCCsGAQUFBzALhnByc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9y
eS9ERUZBVUxULzVlLzc5ODQ0Ny0yMWY0LTQ1YWItOTlkYy0xYWJlM2FjMTBhYTYv
MS9lWk1zMlQyYnVjS1k3UnZtWjV5Uk9Dd2syeDgucm9hMIGBBgNVHR8EejB4MHag
dKByhnByc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzVl
Lzc5ODQ0Ny0yMWY0LTQ1YWItOTlkYy0xYWJlM2FjMTBhYTYvMS9jZ1I3NFZzbldR
TGM5aGZjUFE0VzNCOHdnQ0kuY3JsMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw
MAYIKwYBBQUHAQcBAf8EITAfMAwEAgABMAYDBAPBABgwDwQCAAIwCQMHACABBnwA
ZDANBgkqhkiG9w0BAQsFAAOCAQEAqjHGMPIEz8WpBtINCJPbJBB3P+urqTEK4UMV
JEiF38DUsYG4ycJ2WB7WnL/h9mGBims0pfUg5mPY0/3kN5R7lFEwtpsy6iBXjkxH
C4Un9UHV2KQbIUlBK5GYzTbPylBPEM5VXx5N3BAME2e201olx7YKsDTdjJoGOhFN
7BvVmEk+cASerTsKfo7X7+mIjzZaUTI8lY1dC71gh4Fy0xr2s81m8XTGob6HvFCI
HrMjocq+2zcQXMdD4nxNoBn4IGza6oOBMznShHjavDCnC0LrBoU5CXamBjlNJdGq
/U4r6k6b0BR9he0bLMwBDz6RYz1IauHSNTR1lZNemG8FJ+rK8A==
-----END CERTIFICATE-----
Generated at Thu May 1 12:57:49 2025 by rpki-client