Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/8egLFe_8_hSOx9WD4vOh-MJQ0H8.roa
File: 8egLFe_8_hSOx9WD4vOh-MJQ0H8.roa (raw, json)
Hash identifier: moMhy7vDFqKDeQVu7TI2erWJ6IsinxDRQVOP5tX3bcg=
Subject key identifier: F1:E8:0B:15:EF:FC:FE:14:8E:C7:D5:83:E2:F3:A1:F8:C2:50:D0:7F
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 018533F31453B4DD115A40FA761A7771229B
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/8egLFe_8_hSOx9WD4vOh-MJQ0H8.roa
Signing time: Wed 21 Dec 2022 09:10:46 +0000
ROA not before: Wed 21 Dec 2022 09:10:46 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:33:f3:14:53:b4:dd:11:5a:40:fa:76:1a:77:71:22:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Dec 21 09:10:46 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=f1e80b15effcfe148ec7d583e2f3a1f8c250d07f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:c4:8c:c6:28:eb:bd:cf:9b:cd:50:a8:1c:81:
fb:f6:27:74:32:47:6c:13:b3:de:0e:96:db:81:6e:
0a:e0:38:e0:fb:7d:70:c1:19:c9:a8:37:87:83:eb:
e6:60:b5:34:d0:e4:45:3e:a2:01:41:92:73:6b:30:
2c:5b:a3:09:90:8e:c9:00:79:0a:20:80:b9:b6:05:
20:f3:00:32:0a:68:b3:cb:36:f5:2d:73:36:55:73:
ca:bc:1b:c5:b3:7e:e9:cc:f1:da:0f:8e:bd:99:30:
c4:7a:d2:15:75:05:01:b1:e1:05:0d:e1:e2:66:f5:
83:e5:67:24:a9:a8:ea:89:e8:6f:ca:4f:0b:c9:70:
67:71:c2:71:f1:cf:ac:e9:56:45:a3:24:af:6f:d3:
6e:73:c5:2d:05:98:b3:33:3d:35:84:12:52:d8:ff:
37:a2:05:ca:32:83:13:c7:9b:a0:38:3d:be:15:be:
48:cf:55:57:23:19:c7:df:6e:9a:b4:ab:0e:92:fd:
8a:a1:af:a1:81:54:10:4b:a4:24:91:2a:a9:24:a1:
73:78:fd:fa:d8:c5:7e:f3:95:d9:81:b7:69:82:cd:
76:c6:3a:9f:b5:2e:b5:83:c3:c0:40:ba:fb:8c:10:
2f:17:5c:91:42:e6:c3:53:36:b4:71:c3:1b:4d:27:
2b:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:E8:0B:15:EF:FC:FE:14:8E:C7:D5:83:E2:F3:A1:F8:C2:50:D0:7F
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/8egLFe_8_hSOx9WD4vOh-MJQ0H8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
7a:be:44:28:0e:0f:95:44:66:69:11:ae:91:dd:88:72:b5:ef:
6b:59:b5:ed:90:49:e8:b8:36:2b:98:35:55:53:8c:f4:08:18:
b5:3d:bb:1b:77:31:10:81:99:52:6e:09:83:c1:7e:99:1a:75:
74:55:03:f1:52:c6:7d:be:45:21:c2:11:04:66:d6:e7:e8:2e:
01:d5:29:10:86:af:e7:c4:78:e0:48:52:c3:13:36:e7:8f:73:
6c:51:5d:2b:c9:a0:6c:dc:b4:a0:15:b4:b2:4a:c2:dc:c4:87:
cf:3b:7a:da:02:ab:56:b5:d1:d5:f3:7f:c9:7e:a7:2a:70:9c:
df:87:0d:90:73:ed:32:10:d3:56:0e:a5:e5:a9:6b:63:d9:67:
dc:9c:0d:00:3b:df:eb:1d:61:63:18:a2:68:70:47:fc:57:df:
bc:da:98:4e:9a:8a:ae:60:83:fd:9c:a3:59:2b:10:40:33:eb:
7a:f4:1f:43:3b:c3:71:8a:83:37:b4:ed:6c:7c:69:ca:eb:e9:
81:5d:df:64:47:cd:52:b1:41:06:dd:d9:5e:25:3d:ed:08:f0:
64:50:40:df:48:f9:3c:f8:72:c5:14:fb:aa:10:a3:45:e5:af:
bc:6a:8d:89:d1:fd:52:08:5c:a2:b3:d3:80:ef:87:38:9a:0c:
72:c3:d5:97
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYUz8xRTtN0RWkD6dhp3cSKbMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcyMDQ3YmUxNWIyNzU5MDJkY2Y2MTdkYzNkMGUxNmRjMWYz
MDgwMjIwHhcNMjIxMjIxMDkxMDQ2WhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmMWU4MGIxNWVmZmNmZTE0OGVjN2Q1ODNlMmYzYTFmOGMyNTBkMDdmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp8SMxijrvc+bzVCoHIH79id0Mkds
E7PeDpbbgW4K4Djg+31wwRnJqDeHg+vmYLU00ORFPqIBQZJzazAsW6MJkI7JAHkK
IIC5tgUg8wAyCmizyzb1LXM2VXPKvBvFs37pzPHaD469mTDEetIVdQUBseEFDeHi
ZvWD5Wckqajqiehvyk8LyXBnccJx8c+s6VZFoySvb9Nuc8UtBZizMz01hBJS2P83
ogXKMoMTx5ugOD2+Fb5Iz1VXIxnH326atKsOkv2Koa+hgVQQS6QkkSqpJKFzeP36
2MV+85XZgbdpgs12xjqftS61g8PAQLr7jBAvF1yRQubDUza0ccMbTScrlwIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFPHoCxXv/P4UjsfVg+LzofjCUNB/MB8GA1UdIwQY
MBaAFHIEe+FbJ1kC3PYX3D0OFtwfMIAiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMt
MWFiZTNhYzEwYWE2LzEvOGVnTEZlXzhfaFNPeDlXRDR2T2gtTUpRMEg4LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMtMWFiZTNhYzEwYWE2
LzEvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBAHq+RCgOD5VEZmkRrpHd
iHK172tZte2QSei4NiuYNVVTjPQIGLU9uxt3MRCBmVJuCYPBfpkadXRVA/FSxn2+
RSHCEQRm1ufoLgHVKRCGr+fEeOBIUsMTNuePc2xRXSvJoGzctKAVtLJKwtzEh887
etoCq1a10dXzf8l+pypwnN+HDZBz7TIQ01YOpeWpa2PZZ9ycDQA73+sdYWMYomhw
R/xX37zamE6aiq5gg/2co1krEEAz63r0H0M7w3GKgze07Wx8acrr6YFd32RHzVKx
QQbd2V4lPe0I8GRQQN9I+Tz4csUU+6oQo0Xlr7xqjYnR/VIIXKKz04DvhziaDHLD
1Zc=
-----END CERTIFICATE-----
Generated at Mon Jun 9 02:42:42 2025 by rpki-client