Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/evupjZ19bwkEQxw3IT2Ip0s4foQ.roa
File: evupjZ19bwkEQxw3IT2Ip0s4foQ.roa (raw, json)
Hash identifier: Ulo2YN+V7OBel0aB4QlM4B3wLrvYyTrEl1oeprIcytg=
Subject key identifier: 7A:FB:A9:8D:9D:7D:6F:09:04:43:1C:37:21:3D:88:A7:4B:38:7E:84
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0185CC13BE3025FCAEA2E239CA23254DBA29
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/evupjZ19bwkEQxw3IT2Ip0s4foQ.roa
Signing time: Thu 19 Jan 2023 22:08:43 +0000
ROA not before: Thu 19 Jan 2023 22:08:43 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:cc:13:be:30:25:fc:ae:a2:e2:39:ca:23:25:4d:ba:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Jan 19 22:08:43 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=7afba98d9d7d6f0904431c37213d88a74b387e84
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:43:90:6e:3f:b6:45:6f:d9:de:e5:8e:56:b8:
d5:e2:ec:b1:2d:93:72:a0:57:cb:92:47:09:14:33:
0a:be:f6:44:38:7a:5d:7b:a6:b0:1b:f5:99:65:b9:
dc:c5:df:1e:ae:6a:0f:ae:ea:2c:c5:ea:9c:28:60:
f2:cf:15:62:cf:08:dc:0f:38:64:63:8b:84:c6:96:
ef:c6:81:62:a7:6f:1e:3f:04:8a:ac:b1:af:6e:92:
03:90:01:42:69:08:25:fd:4f:f6:04:cf:47:87:c4:
28:43:1b:34:6e:c4:00:99:4a:61:46:04:08:10:2e:
03:62:be:83:8a:30:5a:bf:7e:e9:ab:94:44:b2:dc:
6b:09:1f:4a:5b:5d:86:b8:bd:ff:eb:92:99:48:03:
74:e2:24:8c:1e:3e:35:82:9c:bc:de:80:0e:0c:ee:
db:c5:af:38:10:ef:b7:bf:a0:f0:89:56:a3:75:96:
f1:93:a6:3e:7a:02:97:d6:e0:9d:66:98:a7:da:06:
68:3b:0d:b4:af:14:b6:02:f2:f2:2c:d5:18:71:82:
f8:77:64:e5:d3:47:94:9d:5b:27:7d:10:e7:b2:c9:
97:8e:20:56:9d:4d:5f:71:58:f9:49:15:39:f8:dc:
55:b5:a2:10:e5:ba:7e:e0:b6:81:dc:41:2a:34:61:
d4:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:FB:A9:8D:9D:7D:6F:09:04:43:1C:37:21:3D:88:A7:4B:38:7E:84
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/evupjZ19bwkEQxw3IT2Ip0s4foQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
14:59:40:b4:f6:91:c5:e7:5a:13:45:64:e0:c1:6a:8a:9a:4a:
d4:8f:9a:01:46:83:70:cd:9d:45:16:d0:7d:d3:77:43:bd:af:
6b:0e:48:89:da:39:fd:8b:29:ae:6f:aa:3c:10:a3:67:75:f6:
84:bc:c9:c1:85:97:cb:72:7a:f7:00:5e:3b:f7:91:9d:c1:37:
01:d3:bd:1b:fe:13:21:63:ed:84:80:df:76:da:12:10:a5:68:
76:a4:fd:b1:78:e3:69:0c:7d:b6:47:33:64:7d:93:c2:56:55:
ab:15:3e:bc:fe:63:71:8d:22:1f:16:96:e3:44:f9:bf:78:86:
01:e7:8a:3d:df:7d:03:89:ac:4b:ce:3d:c9:6b:d1:9d:83:16:
9d:fa:a7:1b:dc:5c:d8:4f:a7:21:f8:91:ec:11:ec:91:e7:72:
0d:50:b1:79:6a:be:39:80:29:1c:a4:09:11:b6:7c:50:7b:d2:
64:03:0e:3d:3c:b4:80:92:7c:b4:07:09:c3:4f:25:62:ec:96:
20:df:44:24:07:4e:9f:25:76:50:2b:39:b3:bc:39:b3:e0:4d:
ac:31:6a:00:98:b3:ec:89:27:2f:f7:27:c9:3d:73:7c:cd:d0:
96:ee:e0:8a:bd:0a:4d:1f:e3:0c:fb:ed:00:0e:62:e7:29:af:
2c:6b:c8:10
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYXME74wJfyuouI5yiMlTbopMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcyMDQ3YmUxNWIyNzU5MDJkY2Y2MTdkYzNkMGUxNmRjMWYz
MDgwMjIwHhcNMjMwMTE5MjIwODQzWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3YWZiYTk4ZDlkN2Q2ZjA5MDQ0MzFjMzcyMTNkODhhNzRiMzg3ZTg0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlUOQbj+2RW/Z3uWOVrjV4uyxLZNy
oFfLkkcJFDMKvvZEOHpde6awG/WZZbncxd8ermoPruosxeqcKGDyzxVizwjcDzhk
Y4uExpbvxoFip28ePwSKrLGvbpIDkAFCaQgl/U/2BM9Hh8QoQxs0bsQAmUphRgQI
EC4DYr6DijBav37pq5REstxrCR9KW12GuL3/65KZSAN04iSMHj41gpy83oAODO7b
xa84EO+3v6DwiVajdZbxk6Y+egKX1uCdZpin2gZoOw20rxS2AvLyLNUYcYL4d2Tl
00eUnVsnfRDnssmXjiBWnU1fcVj5SRU5+NxVtaIQ5bp+4LaB3EEqNGHUUwIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFHr7qY2dfW8JBEMcNyE9iKdLOH6EMB8GA1UdIwQY
MBaAFHIEe+FbJ1kC3PYX3D0OFtwfMIAiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMt
MWFiZTNhYzEwYWE2LzEvZXZ1cGpaMTlid2tFUXh3M0lUMklwMHM0Zm9RLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMtMWFiZTNhYzEwYWE2
LzEvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBABRZQLT2kcXnWhNFZODB
aoqaStSPmgFGg3DNnUUW0H3Td0O9r2sOSInaOf2LKa5vqjwQo2d19oS8ycGFl8ty
evcAXjv3kZ3BNwHTvRv+EyFj7YSA33baEhClaHak/bF442kMfbZHM2R9k8JWVasV
Prz+Y3GNIh8WluNE+b94hgHnij3ffQOJrEvOPclr0Z2DFp36pxvcXNhPpyH4kewR
7JHncg1QsXlqvjmAKRykCRG2fFB70mQDDj08tICSfLQHCcNPJWLsliDfRCQHTp8l
dlArObO8ObPgTawxagCYs+yJJy/3J8k9c3zN0Jbu4Iq9Ck0f4wz77QAOYucpryxr
yBA=
-----END CERTIFICATE-----
Generated at Thu May 1 01:21:59 2025 by rpki-client