Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/8Eq3alwRDcuYgFIeqPFgzZP2zk0.roa
File: 8Eq3alwRDcuYgFIeqPFgzZP2zk0.roa (raw, json)
Hash identifier: AK+TQlCTccEVu5N1VTUfVueZxhuLlZO1LH4XuDRbBfE=
Subject key identifier: F0:4A:B7:6A:5C:11:0D:CB:98:80:52:1E:A8:F1:60:CD:93:F6:CE:4D
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0186567EC4B90B658853479A4C921934D23F
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/8Eq3alwRDcuYgFIeqPFgzZP2zk0.roa
Signing time: Wed 15 Feb 2023 19:13:13 +0000
ROA not before: Wed 15 Feb 2023 19:13:13 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:56:7e:c4:b9:0b:65:88:53:47:9a:4c:92:19:34:d2:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Feb 15 19:13:13 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=f04ab76a5c110dcb9880521ea8f160cd93f6ce4d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:94:16:dc:37:e3:e1:c6:82:cc:a8:53:bd:9c:
92:67:da:dc:97:e6:aa:43:b2:4e:62:6a:cc:df:b8:
59:69:9c:0b:10:8e:63:cd:8c:b9:59:78:c6:04:7d:
11:48:7b:a6:3b:ed:84:39:32:a2:8b:a1:ee:e5:ce:
1f:c3:1b:f7:85:5f:1b:df:33:e3:22:e3:08:c4:ad:
e3:b4:d7:81:a9:84:4f:53:45:60:48:06:cc:59:df:
bd:b6:97:73:91:72:9f:81:2b:ec:6e:98:38:f1:9c:
03:ae:98:37:3d:0a:6b:9d:17:20:c4:51:97:e9:7b:
47:8e:1a:d0:79:b3:44:e4:09:28:35:65:ea:42:fe:
06:a6:61:2c:4f:a2:d4:9b:aa:9a:9f:fb:d0:91:96:
83:13:ef:63:70:1b:79:8a:c5:98:c5:07:1f:30:72:
86:30:5a:29:fa:e1:ab:07:64:e7:95:0e:06:63:47:
75:a7:6d:2c:12:93:6f:d2:4a:48:c3:0f:32:08:4b:
aa:67:52:4f:d8:a0:21:e4:a1:d3:8b:05:d4:b3:72:
1a:3e:22:7d:38:67:7d:e7:42:22:fa:d9:0f:14:54:
cd:0f:57:6f:cf:f4:00:33:3d:39:e1:d3:b1:b3:b1:
29:85:59:d0:ac:7c:c6:75:dd:57:cc:2e:11:58:e4:
19:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:4A:B7:6A:5C:11:0D:CB:98:80:52:1E:A8:F1:60:CD:93:F6:CE:4D
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/8Eq3alwRDcuYgFIeqPFgzZP2zk0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
05:88:43:42:0c:dd:78:6c:77:85:30:7b:d8:ec:95:4d:cf:b7:
74:a8:ec:89:ee:6b:f6:4d:39:7a:1b:a5:93:f9:ee:99:81:13:
05:ff:0e:47:1b:c3:3c:00:07:bb:f1:94:38:7d:6c:34:9e:4b:
ae:db:56:26:0d:88:af:8b:8f:26:ad:09:af:ae:2b:f8:dc:00:
05:8d:d2:38:12:d7:42:51:57:d8:27:a5:25:5e:80:89:80:62:
56:6a:16:de:a3:5b:8a:5f:be:19:67:6d:ea:91:4e:ab:75:b8:
2e:c8:66:56:3b:7d:0a:07:ac:77:e1:f9:98:56:b4:7e:56:b2:
20:57:d3:0b:c5:26:6f:e4:cb:e4:1c:8f:6c:9a:c1:9e:02:56:
59:04:2e:db:27:ba:b6:33:3c:2e:e9:f0:a9:ee:bf:2d:d5:71:
c1:d8:2c:f0:06:0d:5c:aa:4f:5d:b0:71:df:72:1c:a8:b0:f5:
49:2e:94:2f:98:9b:5e:08:03:18:11:74:a9:b3:42:eb:73:f0:
54:fe:57:96:4f:8e:9d:2e:41:e9:a9:db:78:f4:3c:b6:9b:5a:
81:1f:a1:2d:ca:26:d8:02:74:22:ea:32:ee:b3:8b:c1:f7:af:
54:f5:3d:29:e3:c8:b2:2b:a4:52:b7:60:28:86:ca:1a:25:05:
6f:73:28:20
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYZWfsS5C2WIU0eaTJIZNNI/MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcyMDQ3YmUxNWIyNzU5MDJkY2Y2MTdkYzNkMGUxNmRjMWYz
MDgwMjIwHhcNMjMwMjE1MTkxMzEzWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmMDRhYjc2YTVjMTEwZGNiOTg4MDUyMWVhOGYxNjBjZDkzZjZjZTRkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnZQW3Dfj4caCzKhTvZySZ9rcl+aq
Q7JOYmrM37hZaZwLEI5jzYy5WXjGBH0RSHumO+2EOTKii6Hu5c4fwxv3hV8b3zPj
IuMIxK3jtNeBqYRPU0VgSAbMWd+9tpdzkXKfgSvsbpg48ZwDrpg3PQprnRcgxFGX
6XtHjhrQebNE5AkoNWXqQv4GpmEsT6LUm6qan/vQkZaDE+9jcBt5isWYxQcfMHKG
MFop+uGrB2TnlQ4GY0d1p20sEpNv0kpIww8yCEuqZ1JP2KAh5KHTiwXUs3IaPiJ9
OGd950Ii+tkPFFTND1dvz/QAMz054dOxs7EphVnQrHzGdd1XzC4RWOQZowIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFPBKt2pcEQ3LmIBSHqjxYM2T9s5NMB8GA1UdIwQY
MBaAFHIEe+FbJ1kC3PYX3D0OFtwfMIAiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMt
MWFiZTNhYzEwYWE2LzEvOEVxM2Fsd1JEY3VZZ0ZJZXFQRmd6WlAyemswLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMtMWFiZTNhYzEwYWE2
LzEvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBAAWIQ0IM3Xhsd4Uwe9js
lU3Pt3So7Inua/ZNOXobpZP57pmBEwX/DkcbwzwAB7vxlDh9bDSeS67bViYNiK+L
jyatCa+uK/jcAAWN0jgS10JRV9gnpSVegImAYlZqFt6jW4pfvhlnbeqRTqt1uC7I
ZlY7fQoHrHfh+ZhWtH5WsiBX0wvFJm/ky+Qcj2yawZ4CVlkELtsnurYzPC7p8Knu
vy3VccHYLPAGDVyqT12wcd9yHKiw9UkulC+Ym14IAxgRdKmzQutz8FT+V5ZPjp0u
Qemp23j0PLabWoEfoS3KJtgCdCLqMu6zi8H3r1T1PSnjyLIrpFK3YCiGyholBW9z
KCA=
-----END CERTIFICATE-----
Generated at Mon Jun 9 21:42:52 2025 by rpki-client