Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/egtxCcMCCBLfW-fUTb6dQmbLYro.roa
File: egtxCcMCCBLfW-fUTb6dQmbLYro.roa (raw, json)
Hash identifier: Iutz5rhm+NsCotcvYf9tbjVtCds9soL6gyBXnHcUZKI=
Subject key identifier: 7A:0B:71:09:C3:02:08:12:DF:5B:E7:D4:4D:BE:9D:42:66:CB:62:BA
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0185409B0F22F54322B586C111EEB935DB7D
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/egtxCcMCCBLfW-fUTb6dQmbLYro.roa
Signing time: Fri 23 Dec 2022 20:09:41 +0000
ROA not before: Fri 23 Dec 2022 20:09:41 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:185:3dcc:d8f/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:40:9b:0f:22:f5:43:22:b5:86:c1:11:ee:b9:35:db:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Dec 23 20:09:41 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=7a0b7109c3020812df5be7d44dbe9d4266cb62ba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:4d:5f:b7:9e:80:ec:40:bb:6a:61:67:3d:16:
46:6f:13:ad:47:7c:a9:20:7c:b3:5f:39:d4:9b:1e:
84:22:7f:e5:9b:b3:d4:ad:94:50:b1:f9:45:89:3f:
cf:5f:cb:dc:67:59:b3:a6:8a:b1:bc:97:fa:db:e1:
fc:3d:11:85:22:59:be:d4:c7:68:97:65:6f:75:ca:
b5:93:7a:7b:b3:04:d5:7c:89:6e:6b:bc:bc:c6:30:
c2:37:2a:04:5d:bc:a3:0a:36:8c:81:2b:45:88:3e:
32:2f:34:12:72:a1:d1:68:4e:6f:b8:3c:ab:e9:69:
39:03:61:1e:0a:3f:37:52:10:a4:75:2e:92:cd:49:
ed:c3:e7:20:0c:53:37:11:ed:59:49:40:1f:a4:25:
f5:19:74:3f:d7:ac:03:80:05:ca:32:15:f2:01:f1:
2d:16:1b:30:5a:fa:2f:8c:9b:9f:f4:24:83:37:2f:
45:b4:22:b1:81:43:8f:3c:7a:69:f5:e2:c4:f1:5b:
99:70:76:69:17:ad:7c:1e:ac:ef:52:0a:67:9c:43:
26:47:3a:fc:bd:fe:72:c5:a2:56:45:57:d0:c9:91:
79:ac:55:f8:50:af:92:02:26:62:c8:f5:15:dd:ba:
bd:67:9a:fa:b1:32:8c:2c:b6:73:57:2e:25:db:37:
3b:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:0B:71:09:C3:02:08:12:DF:5B:E7:D4:4D:BE:9D:42:66:CB:62:BA
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/egtxCcMCCBLfW-fUTb6dQmbLYro.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
57:05:05:04:78:9b:3a:7c:f5:3e:f4:25:a2:1f:7f:0c:46:ab:
a2:a4:1f:55:0a:8d:9d:62:6c:e1:d3:14:33:af:50:da:0a:a4:
82:84:47:77:e4:14:cd:18:a1:ee:ec:16:1e:06:c6:14:06:ee:
55:3c:e9:87:6d:f4:ef:0c:36:db:a4:46:40:30:93:49:b0:10:
98:83:16:ab:c7:77:f3:46:11:2a:41:07:cf:4a:fe:be:09:af:
fd:84:80:2b:62:b6:8f:4f:e8:2d:a3:42:07:86:70:13:84:f1:
66:41:e9:8b:01:e1:92:d0:96:97:98:7d:0c:7a:c5:6a:fe:7e:
f8:32:fa:fc:89:71:55:60:19:44:50:2a:03:f4:81:89:a4:d5:
24:aa:a0:f3:9b:5f:b6:ff:50:65:7a:3f:9a:43:34:04:cf:78:
1a:d8:50:38:5f:a6:b1:01:c2:05:f1:4d:01:21:6a:0b:6b:04:
16:3c:88:13:aa:d4:a6:61:91:81:cf:d7:70:b5:00:c8:3f:f0:
c7:68:e1:a1:17:9e:78:6b:7d:6a:2d:fc:00:77:62:e5:9c:de:
b6:e1:8e:bd:cc:08:04:79:cd:db:6e:ee:3e:91:92:be:f5:c6:
fd:d1:9c:3c:4e:8e:a7:c8:5a:f0:7c:d3:4f:87:ce:f1:9a:80:
03:b1:42:c3
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYVAmw8i9UMitYbBEe65Ndt9MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcyMDQ3YmUxNWIyNzU5MDJkY2Y2MTdkYzNkMGUxNmRjMWYz
MDgwMjIwHhcNMjIxMjIzMjAwOTQxWhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3YTBiNzEwOWMzMDIwODEyZGY1YmU3ZDQ0ZGJlOWQ0MjY2Y2I2MmJhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgk1ft56A7EC7amFnPRZGbxOtR3yp
IHyzXznUmx6EIn/lm7PUrZRQsflFiT/PX8vcZ1mzpoqxvJf62+H8PRGFIlm+1Mdo
l2Vvdcq1k3p7swTVfIlua7y8xjDCNyoEXbyjCjaMgStFiD4yLzQScqHRaE5vuDyr
6Wk5A2EeCj83UhCkdS6SzUntw+cgDFM3Ee1ZSUAfpCX1GXQ/16wDgAXKMhXyAfEt
FhswWvovjJuf9CSDNy9FtCKxgUOPPHpp9eLE8VuZcHZpF618HqzvUgpnnEMmRzr8
vf5yxaJWRVfQyZF5rFX4UK+SAiZiyPUV3bq9Z5r6sTKMLLZzVy4l2zc7eQIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFHoLcQnDAggS31vn1E2+nUJmy2K6MB8GA1UdIwQY
MBaAFHIEe+FbJ1kC3PYX3D0OFtwfMIAiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMt
MWFiZTNhYzEwYWE2LzEvZWd0eENjTUNDQkxmVy1mVVRiNmRRbWJMWXJvLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMtMWFiZTNhYzEwYWE2
LzEvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBAFcFBQR4mzp89T70JaIf
fwxGq6KkH1UKjZ1ibOHTFDOvUNoKpIKER3fkFM0Yoe7sFh4GxhQG7lU86Ydt9O8M
NtukRkAwk0mwEJiDFqvHd/NGESpBB89K/r4Jr/2EgCtito9P6C2jQgeGcBOE8WZB
6YsB4ZLQlpeYfQx6xWr+fvgy+vyJcVVgGURQKgP0gYmk1SSqoPObX7b/UGV6P5pD
NATPeBrYUDhfprEBwgXxTQEhagtrBBY8iBOq1KZhkYHP13C1AMg/8Mdo4aEXnnhr
fWot/AB3YuWc3rbhjr3MCAR5zdtu7j6Rkr71xv3RnDxOjqfIWvB800+HzvGagAOx
QsM=
-----END CERTIFICATE-----
Generated at Thu May 1 06:52:05 2025 by rpki-client