Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/erYoTBMeoOcUGJIJ7tsp3GQoIEM.roa
File: erYoTBMeoOcUGJIJ7tsp3GQoIEM.roa (raw, json)
Hash identifier: F7xkUWJOcdMHl98TrrUO+Z/CBG8OlmVzkDL+pPB/onI=
Subject key identifier: 7A:B6:28:4C:13:1E:A0:E7:14:18:92:09:EE:DB:29:DC:64:28:20:43
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 01841DA879540AE45C56B16885F0C72756C5
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/erYoTBMeoOcUGJIJ7tsp3GQoIEM.roa
Signing time: Fri 28 Oct 2022 08:14:51 +0000
ROA not before: Fri 28 Oct 2022 08:14:51 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:1d:a8:79:54:0a:e4:5c:56:b1:68:85:f0:c7:27:56:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Oct 28 08:14:51 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=7ab6284c131ea0e714189209eedb29dc64282043
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:fd:72:02:3e:76:ae:0a:f6:99:07:a1:8a:25:
6b:b9:da:50:64:98:c7:79:04:49:53:a3:89:7a:03:
cb:f9:99:41:67:95:96:be:73:0e:2d:70:3f:f8:d6:
4e:47:bd:74:7a:95:e8:5e:a7:c2:de:a3:23:c6:b4:
0e:f3:ce:05:ab:ef:c6:b2:2e:00:10:e3:29:a6:1c:
6c:c0:7b:0b:3c:2a:c4:92:83:94:c0:e1:f6:f9:99:
ef:eb:89:7c:71:a2:b6:42:05:27:9f:c8:78:eb:e1:
56:63:e0:b6:fb:9e:15:f3:ea:52:72:8b:31:eb:d4:
c8:77:6b:1c:64:51:0d:25:cd:7f:4f:94:78:69:42:
96:c0:4c:6b:21:33:17:32:90:fd:87:69:92:98:14:
50:c9:12:92:c4:9c:11:55:85:0a:27:6a:bf:6b:8b:
51:39:4e:f5:12:98:5a:f9:66:90:28:f8:b0:4d:77:
ac:81:5d:05:dd:6b:46:cc:25:e9:ee:ae:90:ff:df:
0f:c1:ae:2d:f1:ce:63:7a:90:c2:89:2c:b6:86:04:
9f:08:71:da:0d:1d:17:db:95:82:7e:c5:9e:fb:19:
18:8e:2e:96:3e:73:fb:8c:a6:30:82:01:0d:65:57:
94:f8:55:82:ec:4a:86:20:36:5d:72:01:29:c7:74:
b1:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:B6:28:4C:13:1E:A0:E7:14:18:92:09:EE:DB:29:DC:64:28:20:43
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/erYoTBMeoOcUGJIJ7tsp3GQoIEM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
26:0f:e6:33:91:ec:c5:a9:3e:54:ab:83:41:78:0a:6d:1e:81:
d2:68:a0:85:33:ad:9c:54:ed:78:d5:79:12:d4:8f:7e:9d:e3:
32:10:61:8f:03:a7:c7:b9:fd:97:92:ba:0e:fe:71:5f:c5:4b:
a0:61:53:99:08:f2:99:5d:4f:e5:de:da:78:c4:8f:7e:cd:08:
67:74:93:cf:ab:df:db:4a:5d:64:94:f4:44:33:e5:0d:ac:af:
51:21:7f:86:f8:5e:af:3e:5d:66:e7:56:b9:ce:fe:77:63:b3:
aa:ba:7b:80:1d:b3:c8:8b:eb:fb:d9:24:1a:d5:c9:81:88:f6:
cc:21:5a:70:9a:22:3e:9d:b6:2e:ee:fe:ca:9e:e1:96:dc:38:
48:8d:dc:c9:91:d0:13:48:51:45:78:9f:e7:4b:68:2b:c8:24:
3a:5e:e8:4b:00:ed:70:ff:37:36:dd:3e:08:ed:ca:d4:36:d4:
3a:4a:dc:75:22:d2:e7:a9:20:e1:61:07:36:6f:be:55:5a:3e:
86:8d:79:18:ad:10:c5:03:9b:e0:df:76:2c:b5:07:f1:c9:22:
d5:73:88:42:d1:6e:12:7c:21:c5:5c:d7:c2:68:53:65:29:0f:
39:c1:43:15:02:a7:70:d9:b0:ad:34:f9:54:ba:57:45:2d:90:
18:34:f3:36
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYQdqHlUCuRcVrFohfDHJ1bFMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcyMDQ3YmUxNWIyNzU5MDJkY2Y2MTdkYzNkMGUxNmRjMWYz
MDgwMjIwHhcNMjIxMDI4MDgxNDUxWhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3YWI2Mjg0YzEzMWVhMGU3MTQxODkyMDllZWRiMjlkYzY0MjgyMDQzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxv1yAj52rgr2mQehiiVrudpQZJjH
eQRJU6OJegPL+ZlBZ5WWvnMOLXA/+NZOR710epXoXqfC3qMjxrQO884Fq+/Gsi4A
EOMpphxswHsLPCrEkoOUwOH2+Znv64l8caK2QgUnn8h46+FWY+C2+54V8+pScosx
69TId2scZFENJc1/T5R4aUKWwExrITMXMpD9h2mSmBRQyRKSxJwRVYUKJ2q/a4tR
OU71Epha+WaQKPiwTXesgV0F3WtGzCXp7q6Q/98Pwa4t8c5jepDCiSy2hgSfCHHa
DR0X25WCfsWe+xkYji6WPnP7jKYwggENZVeU+FWC7EqGIDZdcgEpx3Sx4wIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFHq2KEwTHqDnFBiSCe7bKdxkKCBDMB8GA1UdIwQY
MBaAFHIEe+FbJ1kC3PYX3D0OFtwfMIAiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMt
MWFiZTNhYzEwYWE2LzEvZXJZb1RCTWVvT2NVR0pJSjd0c3AzR1FvSUVNLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMtMWFiZTNhYzEwYWE2
LzEvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBACYP5jOR7MWpPlSrg0F4
Cm0egdJooIUzrZxU7XjVeRLUj36d4zIQYY8Dp8e5/ZeSug7+cV/FS6BhU5kI8pld
T+Xe2njEj37NCGd0k8+r39tKXWSU9EQz5Q2sr1Ehf4b4Xq8+XWbnVrnO/ndjs6q6
e4Ads8iL6/vZJBrVyYGI9swhWnCaIj6dti7u/sqe4ZbcOEiN3MmR0BNIUUV4n+dL
aCvIJDpe6EsA7XD/NzbdPgjtytQ21DpK3HUi0uepIOFhBzZvvlVaPoaNeRitEMUD
m+Dfdiy1B/HJItVziELRbhJ8IcVc18JoU2UpDznBQxUCp3DZsK00+VS6V0UtkBg0
8zY=
-----END CERTIFICATE-----
Generated at Fri May 2 13:20:47 2025 by rpki-client