Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/efm9XLZYBMBk0fM-LnBbxCFa-zc.roa
File: efm9XLZYBMBk0fM-LnBbxCFa-zc.roa (raw, json)
Hash identifier: aJTvf9fMFFunqmxJgAhV2/ofl0jScMq2LV+l30gUkjI=
Subject key identifier: 79:F9:BD:5C:B6:58:04:C0:64:D1:F3:3E:2E:70:5B:C4:21:5A:FB:37
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 01863BAA66D224AE8B5940966E771E7C0C51
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/efm9XLZYBMBk0fM-LnBbxCFa-zc.roa
Signing time: Fri 10 Feb 2023 14:11:08 +0000
ROA not before: Fri 10 Feb 2023 14:11:08 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:3b:aa:66:d2:24:ae:8b:59:40:96:6e:77:1e:7c:0c:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Feb 10 14:11:08 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=79f9bd5cb65804c064d1f33e2e705bc4215afb37
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:95:f7:96:c9:8a:e4:1c:07:49:9a:4a:91:25:
e8:45:03:23:af:48:31:cb:d7:63:74:64:5f:17:8d:
e7:6d:64:c5:ed:f9:92:72:27:ec:85:e6:dd:ce:bb:
95:ea:51:14:29:09:ba:3d:c4:08:76:e6:a9:35:40:
d0:4d:25:49:f6:2d:31:d1:0f:58:c6:6e:c0:e4:5d:
ad:15:1f:14:07:b2:ec:df:61:c0:0d:3a:5a:a4:69:
aa:d0:c8:18:17:81:35:20:64:16:af:59:25:03:4d:
5b:3b:38:6a:e9:cb:55:9b:84:5b:f6:91:fc:7a:bb:
78:db:e0:c7:8e:0d:1f:36:c1:8e:b1:e4:21:a9:65:
ab:a0:f0:82:b7:bd:d1:4b:3f:74:48:b8:f5:7c:78:
eb:ed:1a:fc:43:01:09:1c:28:bd:c8:8d:c8:5c:a8:
42:62:16:6e:d0:03:7f:23:fc:1b:30:5f:be:ff:68:
2c:53:a3:0b:99:4f:a4:69:93:b1:23:2a:34:e0:f6:
52:cc:ab:c7:f4:fc:0b:30:8a:8c:33:62:1d:85:e7:
37:05:3f:ed:79:9d:54:85:31:0d:91:fa:83:de:88:
36:b6:05:a5:a3:b3:cc:2f:fd:c7:66:03:f4:a3:e4:
79:b6:d4:95:b2:b1:0f:f1:57:14:c6:eb:f4:b3:b1:
98:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:F9:BD:5C:B6:58:04:C0:64:D1:F3:3E:2E:70:5B:C4:21:5A:FB:37
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/efm9XLZYBMBk0fM-LnBbxCFa-zc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
ab:0d:fe:f6:22:16:98:5d:bd:f3:37:8e:96:89:5b:42:61:4e:
5d:9e:fa:c1:bb:49:25:55:c4:e2:7a:a9:de:d7:51:6b:92:0d:
db:ab:ea:30:98:66:98:53:5a:cc:76:aa:ce:9e:6e:30:b2:27:
ea:cf:5a:f6:30:fe:74:14:71:c1:4e:57:6e:65:69:21:be:b1:
97:e0:a1:cd:d9:31:c1:47:03:48:98:e5:fb:09:dd:79:b2:c3:
a9:d0:a2:af:6f:9d:db:7b:c2:76:3f:12:7a:ad:02:e7:bc:fa:
37:b3:f1:bf:02:9b:df:3b:0c:b8:67:1f:db:37:94:6a:30:39:
cb:96:6b:f3:06:d0:6c:71:0d:6d:ef:a9:b0:5d:df:ec:7d:37:
67:a7:d7:62:f8:d5:86:10:a1:23:e9:ad:73:4f:30:71:6c:d6:
ca:41:86:c5:30:bc:80:66:50:ff:98:17:7a:77:2b:cb:27:a1:
85:13:7b:e5:69:44:99:29:dc:34:06:d3:0e:66:63:02:f3:0b:
65:fc:14:52:c3:ae:c8:82:4b:c7:0d:0e:fa:fb:8e:39:23:e2:
13:2b:62:c2:33:50:12:f9:7b:c7:8c:24:e7:bb:12:f6:53:79:
7b:bd:22:47:54:2f:12:b9:ad:8b:81:b6:aa:bf:c6:5f:93:67:
a9:4e:55:1b
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYY7qmbSJK6LWUCWbncefAxRMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcyMDQ3YmUxNWIyNzU5MDJkY2Y2MTdkYzNkMGUxNmRjMWYz
MDgwMjIwHhcNMjMwMjEwMTQxMTA4WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3OWY5YmQ1Y2I2NTgwNGMwNjRkMWYzM2UyZTcwNWJjNDIxNWFmYjM3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvZX3lsmK5BwHSZpKkSXoRQMjr0gx
y9djdGRfF43nbWTF7fmScifshebdzruV6lEUKQm6PcQIduapNUDQTSVJ9i0x0Q9Y
xm7A5F2tFR8UB7Ls32HADTpapGmq0MgYF4E1IGQWr1klA01bOzhq6ctVm4Rb9pH8
ert42+DHjg0fNsGOseQhqWWroPCCt73RSz90SLj1fHjr7Rr8QwEJHCi9yI3IXKhC
YhZu0AN/I/wbMF++/2gsU6MLmU+kaZOxIyo04PZSzKvH9PwLMIqMM2Idhec3BT/t
eZ1UhTENkfqD3og2tgWlo7PML/3HZgP0o+R5ttSVsrEP8VcUxuv0s7GYewIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFHn5vVy2WATAZNHzPi5wW8QhWvs3MB8GA1UdIwQY
MBaAFHIEe+FbJ1kC3PYX3D0OFtwfMIAiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMt
MWFiZTNhYzEwYWE2LzEvZWZtOVhMWllCTUJrMGZNLUxuQmJ4Q0ZhLXpjLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMtMWFiZTNhYzEwYWE2
LzEvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBAKsN/vYiFphdvfM3jpaJ
W0JhTl2e+sG7SSVVxOJ6qd7XUWuSDdur6jCYZphTWsx2qs6ebjCyJ+rPWvYw/nQU
ccFOV25laSG+sZfgoc3ZMcFHA0iY5fsJ3Xmyw6nQoq9vndt7wnY/EnqtAue8+jez
8b8Cm987DLhnH9s3lGowOcuWa/MG0GxxDW3vqbBd3+x9N2en12L41YYQoSPprXNP
MHFs1spBhsUwvIBmUP+YF3p3K8snoYUTe+VpRJkp3DQG0w5mYwLzC2X8FFLDrsiC
S8cNDvr7jjkj4hMrYsIzUBL5e8eMJOe7EvZTeXu9IkdULxK5rYuBtqq/xl+TZ6lO
VRs=
-----END CERTIFICATE-----
Generated at Thu May 1 00:42:18 2025 by rpki-client