Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/eodMO51k9HPn5MX1Ia5sy2fU8PE.roa
File: eodMO51k9HPn5MX1Ia5sy2fU8PE.roa (raw, json)
Hash identifier: rKHqUUIOm4WHwe79KrQ7Cr4lLD/YAYn3iri8Fj4CYTw=
Subject key identifier: 7A:87:4C:3B:9D:64:F4:73:E7:E4:C5:F5:21:AE:6C:CB:67:D4:F0:F1
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 018A40CCE66F3FB3534953BBAD28F320F240
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/eodMO51k9HPn5MX1Ia5sy2fU8PE.roa
Signing time: Tue 29 Aug 2023 10:18:04 +0000
ROA not before: Tue 29 Aug 2023 10:18:04 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:40:cc:e6:6f:3f:b3:53:49:53:bb:ad:28:f3:20:f2:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Aug 29 10:18:04 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=7a874c3b9d64f473e7e4c5f521ae6ccb67d4f0f1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:90:c6:56:16:b2:d6:67:e4:90:6a:7d:0c:4c:
00:15:a2:5e:96:18:4c:97:83:d7:18:86:88:61:c1:
e7:df:0a:97:95:4e:07:df:3a:0d:e2:8a:6c:59:f8:
5d:ec:ed:df:e1:a8:7f:9b:f1:fd:bd:b4:5f:19:6f:
24:b3:1a:5b:de:2e:44:c9:87:a1:75:0f:ab:76:67:
a7:46:99:b3:32:44:6b:91:4e:14:3f:3b:1e:12:dd:
61:22:7c:46:a0:41:71:b5:94:c5:2a:c4:bd:2f:de:
88:e6:a8:f0:42:24:8b:30:17:24:01:b9:2b:4f:28:
cf:d9:3d:2b:6e:e0:47:45:63:9e:ac:72:1a:e7:bf:
94:99:3e:02:ef:76:35:93:30:55:39:e6:16:b5:3e:
8f:04:74:ee:7c:0f:f0:cf:92:f4:83:9c:be:3b:cd:
1a:17:19:c3:38:ff:3c:da:15:17:b9:68:c5:db:50:
9f:d9:46:82:cd:04:ee:3f:60:c6:1d:83:0b:60:bb:
61:82:aa:fd:b1:e7:d3:63:51:04:03:3f:72:40:43:
45:8a:80:02:e3:fc:16:03:48:67:3a:90:88:07:1b:
e6:c2:6c:21:bf:b2:83:89:84:46:1e:6a:e6:c2:c7:
8d:13:74:b1:7a:83:dc:75:ff:af:44:5b:92:98:fb:
db:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:87:4C:3B:9D:64:F4:73:E7:E4:C5:F5:21:AE:6C:CB:67:D4:F0:F1
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/eodMO51k9HPn5MX1Ia5sy2fU8PE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
8f:b2:a6:78:23:74:1b:93:21:06:6c:c1:7e:77:dd:a2:b0:50:
21:77:02:25:26:53:15:57:28:a5:cd:69:ae:18:8b:a9:29:0d:
1a:67:23:3a:54:46:ef:52:bb:aa:90:c6:7c:fd:48:7f:2b:32:
df:f9:36:6b:6c:34:7b:6f:24:97:34:05:fe:0a:70:44:e2:fa:
bf:68:31:6c:de:79:8b:0d:f4:7a:cf:5b:57:7e:d5:53:40:28:
1f:13:20:be:1f:15:7c:6b:b5:09:14:1c:87:27:c0:53:12:4e:
ad:19:20:d2:22:87:03:11:0f:4e:27:73:3b:78:1b:71:8b:87:
fa:72:06:4b:22:f9:70:34:fe:f0:27:39:3c:a6:0e:5f:2d:6a:
63:07:5a:2e:9b:4e:fc:f6:1b:7f:01:92:4c:0a:49:81:3a:fc:
8a:8e:d6:cb:ac:39:9c:dd:eb:66:f6:87:27:6c:f4:3b:2a:aa:
3e:b6:81:0b:4c:01:96:c1:35:81:eb:67:26:40:bb:93:b4:80:
2a:e3:9e:6f:d8:a2:09:ca:a3:15:24:cc:8b:03:b1:f8:ac:26:
10:8b:03:b9:94:29:cf:71:ce:1b:78:b7:ea:76:00:a7:0e:ed:
be:40:0d:d3:fa:7d:a2:e2:4c:dc:97:e9:17:4c:3b:34:ee:0c:
30:10:2c:02
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYpAzOZvP7NTSVO7rSjzIPJAMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcyMDQ3YmUxNWIyNzU5MDJkY2Y2MTdkYzNkMGUxNmRjMWYz
MDgwMjIwHhcNMjMwODI5MTAxODA0WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3YTg3NGMzYjlkNjRmNDczZTdlNGM1ZjUyMWFlNmNjYjY3ZDRmMGYxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtJDGVhay1mfkkGp9DEwAFaJelhhM
l4PXGIaIYcHn3wqXlU4H3zoN4opsWfhd7O3f4ah/m/H9vbRfGW8ksxpb3i5EyYeh
dQ+rdmenRpmzMkRrkU4UPzseEt1hInxGoEFxtZTFKsS9L96I5qjwQiSLMBckAbkr
TyjP2T0rbuBHRWOerHIa57+UmT4C73Y1kzBVOeYWtT6PBHTufA/wz5L0g5y+O80a
FxnDOP882hUXuWjF21Cf2UaCzQTuP2DGHYMLYLthgqr9sefTY1EEAz9yQENFioAC
4/wWA0hnOpCIBxvmwmwhv7KDiYRGHmrmwseNE3SxeoPcdf+vRFuSmPvbmQIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFHqHTDudZPRz5+TF9SGubMtn1PDxMB8GA1UdIwQY
MBaAFHIEe+FbJ1kC3PYX3D0OFtwfMIAiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMt
MWFiZTNhYzEwYWE2LzEvZW9kTU81MWs5SFBuNU1YMUlhNXN5MmZVOFBFLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMtMWFiZTNhYzEwYWE2
LzEvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBAI+ypngjdBuTIQZswX53
3aKwUCF3AiUmUxVXKKXNaa4Yi6kpDRpnIzpURu9Su6qQxnz9SH8rMt/5NmtsNHtv
JJc0Bf4KcETi+r9oMWzeeYsN9HrPW1d+1VNAKB8TIL4fFXxrtQkUHIcnwFMSTq0Z
INIihwMRD04nczt4G3GLh/pyBksi+XA0/vAnOTymDl8tamMHWi6bTvz2G38BkkwK
SYE6/IqO1susOZzd62b2hyds9Dsqqj62gQtMAZbBNYHrZyZAu5O0gCrjnm/YognK
oxUkzIsDsfisJhCLA7mUKc9xzht4t+p2AKcO7b5ADdP6faLiTNyX6RdMOzTuDDAQ
LAI=
-----END CERTIFICATE-----
Generated at Fri May 2 13:20:48 2025 by rpki-client