Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/eh28gnPmazXpKX1zDNF6d3fDkIg.roa
File: eh28gnPmazXpKX1zDNF6d3fDkIg.roa (raw, json)
Hash identifier: ZbEudKJU9ENrIqmR0EmWuJsPfnUgmfBk/l08Arq6w3M=
Subject key identifier: 7A:1D:BC:82:73:E6:6B:35:E9:29:7D:73:0C:D1:7A:77:77:C3:90:88
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0184222AF375BA7E336A947AFD818706B80C
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/eh28gnPmazXpKX1zDNF6d3fDkIg.roa
Signing time: Sat 29 Oct 2022 05:15:50 +0000
ROA not before: Sat 29 Oct 2022 05:15:50 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:22:2a:f3:75:ba:7e:33:6a:94:7a:fd:81:87:06:b8:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Oct 29 05:15:50 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=7a1dbc8273e66b35e9297d730cd17a7777c39088
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:36:ed:1e:f9:5d:04:17:cb:a0:70:98:ba:c6:
d1:7e:2e:93:51:42:6f:5a:cd:b1:05:d4:73:64:77:
00:a1:df:3a:9a:c5:01:ac:2f:70:ad:81:cb:c0:a5:
69:2a:a4:db:08:8c:ea:5e:ef:49:1c:15:57:04:8f:
93:9b:be:1f:88:81:10:4e:19:76:a6:1e:14:3f:a5:
ce:cc:6a:42:90:4d:67:e3:b7:9a:59:c4:2e:30:3f:
36:58:45:38:76:83:fb:fe:a2:4c:28:6f:32:82:87:
e4:e6:ca:01:10:5b:8f:99:b1:e5:cf:61:01:90:d5:
16:5c:37:42:b8:82:8c:fa:ab:52:57:9c:2a:f6:5e:
50:db:98:2f:bc:d8:dc:b1:8e:45:cf:54:36:b8:37:
09:54:94:cb:69:06:e6:06:c1:ce:54:b4:44:d0:94:
4d:a2:bd:86:80:db:9a:8d:b1:39:99:84:f0:c1:81:
20:18:ed:00:69:49:0a:8a:fe:b3:7e:5d:61:e9:8c:
d0:cc:8c:5b:02:55:08:5f:28:f3:05:f3:79:07:d7:
54:02:cd:ac:5e:59:b2:47:3b:60:c9:0d:ae:ca:c8:
7b:c4:31:5c:19:79:f6:8d:07:87:57:7b:b9:7d:40:
ac:9f:c1:cc:0c:3c:67:fc:54:a9:bb:c7:40:68:cb:
44:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:1D:BC:82:73:E6:6B:35:E9:29:7D:73:0C:D1:7A:77:77:C3:90:88
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/eh28gnPmazXpKX1zDNF6d3fDkIg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
54:a5:fc:06:51:31:bf:2a:48:07:5a:5d:75:d0:c5:03:4e:0a:
50:ee:1e:65:b2:dd:22:3e:f2:7d:58:61:aa:49:12:60:ce:a4:
da:af:a0:b0:2b:df:da:ce:f4:87:14:a4:9c:57:5c:35:59:ba:
37:0d:7e:a3:ac:36:ca:38:51:94:16:81:88:74:1f:34:41:25:
4f:ae:2c:e4:c6:f7:16:ff:a7:62:9a:0b:0a:2b:58:24:5f:03:
84:c4:d6:03:fc:d5:49:8f:40:8f:24:16:43:1f:cd:92:36:1e:
87:9c:ec:70:6f:cd:ab:d2:f8:81:88:f7:14:db:9d:5e:af:ec:
59:b9:e2:cf:df:b2:63:36:2b:f6:56:7e:0f:c3:be:9b:dd:63:
ad:a0:9f:04:4c:d3:2f:06:19:f3:9b:c1:78:20:f3:c5:ac:3b:
09:4f:bf:7f:d3:6a:92:1c:06:a0:38:62:9f:d8:ec:7b:97:b6:
89:85:7b:95:0f:9d:29:93:ef:6c:3c:64:80:e4:0e:7f:1e:dc:
5f:bd:52:b1:d3:45:1a:a5:cc:9d:20:76:48:88:ac:2c:31:f4:
48:89:28:bb:86:16:82:d5:94:0b:de:76:30:bc:b4:09:41:73:
e5:42:16:21:7b:b8:5b:84:a0:56:7e:e7:ae:d3:d6:49:08:67:
55:ba:3a:d4
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYQiKvN1un4zapR6/YGHBrgMMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcyMDQ3YmUxNWIyNzU5MDJkY2Y2MTdkYzNkMGUxNmRjMWYz
MDgwMjIwHhcNMjIxMDI5MDUxNTUwWhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3YTFkYmM4MjczZTY2YjM1ZTkyOTdkNzMwY2QxN2E3Nzc3YzM5MDg4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmjbtHvldBBfLoHCYusbRfi6TUUJv
Ws2xBdRzZHcAod86msUBrC9wrYHLwKVpKqTbCIzqXu9JHBVXBI+Tm74fiIEQThl2
ph4UP6XOzGpCkE1n47eaWcQuMD82WEU4doP7/qJMKG8ygofk5soBEFuPmbHlz2EB
kNUWXDdCuIKM+qtSV5wq9l5Q25gvvNjcsY5Fz1Q2uDcJVJTLaQbmBsHOVLRE0JRN
or2GgNuajbE5mYTwwYEgGO0AaUkKiv6zfl1h6YzQzIxbAlUIXyjzBfN5B9dUAs2s
XlmyRztgyQ2uysh7xDFcGXn2jQeHV3u5fUCsn8HMDDxn/FSpu8dAaMtEVwIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFHodvIJz5ms16Sl9cwzRend3w5CIMB8GA1UdIwQY
MBaAFHIEe+FbJ1kC3PYX3D0OFtwfMIAiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMt
MWFiZTNhYzEwYWE2LzEvZWgyOGduUG1helhwS1gxekRORjZkM2ZEa0lnLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMtMWFiZTNhYzEwYWE2
LzEvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBAFSl/AZRMb8qSAdaXXXQ
xQNOClDuHmWy3SI+8n1YYapJEmDOpNqvoLAr39rO9IcUpJxXXDVZujcNfqOsNso4
UZQWgYh0HzRBJU+uLOTG9xb/p2KaCworWCRfA4TE1gP81UmPQI8kFkMfzZI2Hoec
7HBvzavS+IGI9xTbnV6v7Fm54s/fsmM2K/ZWfg/DvpvdY62gnwRM0y8GGfObwXgg
88WsOwlPv3/TapIcBqA4Yp/Y7HuXtomFe5UPnSmT72w8ZIDkDn8e3F+9UrHTRRql
zJ0gdkiIrCwx9EiJKLuGFoLVlAvedjC8tAlBc+VCFiF7uFuEoFZ+567T1kkIZ1W6
OtQ=
-----END CERTIFICATE-----
Generated at Thu May 1 06:46:46 2025 by rpki-client