Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/Ezvbdotdj2ASVhcd_ZKFpx5qYVA.roa
File: Ezvbdotdj2ASVhcd_ZKFpx5qYVA.roa (raw, json)
Hash identifier: 49Jm/cV6scpfr5Xk8UFFvnYQXyygMzTKeNFkgOQ7d/I=
Subject key identifier: 13:3B:DB:76:8B:5D:8F:60:12:56:17:1D:FD:92:85:A7:1E:6A:61:50
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 01856394EC2938E5B9ADABACBDF4EE46B7E6
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/Ezvbdotdj2ASVhcd_ZKFpx5qYVA.roa
Signing time: Fri 30 Dec 2022 15:09:41 +0000
ROA not before: Fri 30 Dec 2022 15:09:41 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:185:3dcc:d8f/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:63:94:ec:29:38:e5:b9:ad:ab:ac:bd:f4:ee:46:b7:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Dec 30 15:09:41 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=133bdb768b5d8f601256171dfd9285a71e6a6150
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:d2:89:5a:11:d5:2d:b0:55:d0:ac:fc:de:9e:
3b:cc:71:b0:c4:ef:6a:2d:17:27:f3:db:f3:ff:ba:
cf:30:55:3d:df:da:08:1b:31:fc:96:08:78:96:7f:
3a:9d:73:2a:35:fc:58:c2:5a:4c:a6:1b:39:5a:97:
18:72:7b:9a:29:ce:89:bd:df:83:f5:80:28:92:19:
8c:9f:06:ce:3b:8b:c0:f6:9e:c3:46:23:81:a6:26:
6b:da:a3:1d:37:82:c6:59:3e:1f:03:aa:80:4a:22:
09:e3:a0:e9:a8:43:b2:f1:d1:8a:82:63:70:6a:f1:
85:36:90:5a:53:df:3d:e1:c5:39:09:59:53:50:e4:
49:a5:b3:46:ce:b1:fd:05:dd:3c:b2:38:7f:9a:b6:
63:bf:b1:e3:72:10:2d:85:bd:5e:1c:15:d8:d0:b9:
38:21:ff:a6:46:e5:09:5c:24:fa:77:4d:e2:4b:15:
64:a3:62:98:75:25:4e:28:ba:e5:3b:f3:bf:c5:fc:
bd:34:ff:33:3f:59:09:f8:e1:21:6c:4b:0a:6b:2a:
3e:f7:b2:ba:ed:b7:6e:dc:54:4e:17:71:90:57:a4:
b2:74:a7:5e:f7:95:26:27:6b:11:a3:99:6d:7a:05:
f5:c2:eb:7a:02:5f:df:54:5e:5b:c1:c8:b4:67:c8:
66:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:3B:DB:76:8B:5D:8F:60:12:56:17:1D:FD:92:85:A7:1E:6A:61:50
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/Ezvbdotdj2ASVhcd_ZKFpx5qYVA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
04:3b:b5:03:84:20:5b:b9:e5:34:b4:bd:c4:e7:16:c7:3d:63:
af:60:ac:b7:22:91:1d:2c:2f:47:ad:eb:ac:d8:9c:a8:d2:34:
e2:49:be:07:48:69:db:2e:aa:03:da:c2:41:40:f1:46:0c:0f:
54:ca:e6:f0:6d:24:d4:96:d1:12:26:2f:50:63:f3:e7:44:bd:
0b:03:fa:41:7b:24:68:76:d3:ff:da:39:6e:85:6c:ec:dd:53:
4c:a0:e4:34:7e:60:16:5d:67:5e:37:10:a6:d7:0f:50:a7:fa:
b9:36:7d:30:84:8f:26:58:75:92:a6:62:c4:90:88:d6:23:ce:
a0:9a:8c:ba:52:e4:81:c3:6e:0a:ed:cd:b3:a4:f9:24:81:5c:
54:e2:23:4e:b3:96:f6:5b:07:e0:c8:b9:e6:1c:e0:72:7e:db:
48:b7:b9:cc:5a:b3:f6:32:ce:e5:3e:22:63:48:63:d9:02:e3:
f5:62:e1:b4:2b:d7:d0:d3:0f:a2:78:1c:4c:14:08:42:a4:e9:
48:09:2c:14:80:f8:d6:1c:c1:46:6f:5b:b4:46:fc:38:07:02:
48:4e:2c:d1:16:72:eb:32:57:6c:29:9a:02:9a:80:f0:d7:af:
4e:3c:44:15:a7:42:6e:58:6d:8b:54:9f:20:64:0d:81:da:d8:
9b:c0:8e:fe
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYVjlOwpOOW5rausvfTuRrfmMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcyMDQ3YmUxNWIyNzU5MDJkY2Y2MTdkYzNkMGUxNmRjMWYz
MDgwMjIwHhcNMjIxMjMwMTUwOTQxWhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxMzNiZGI3NjhiNWQ4ZjYwMTI1NjE3MWRmZDkyODVhNzFlNmE2MTUwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgNKJWhHVLbBV0Kz83p47zHGwxO9q
LRcn89vz/7rPMFU939oIGzH8lgh4ln86nXMqNfxYwlpMphs5WpcYcnuaKc6Jvd+D
9YAokhmMnwbOO4vA9p7DRiOBpiZr2qMdN4LGWT4fA6qASiIJ46DpqEOy8dGKgmNw
avGFNpBaU9894cU5CVlTUORJpbNGzrH9Bd08sjh/mrZjv7HjchAthb1eHBXY0Lk4
If+mRuUJXCT6d03iSxVko2KYdSVOKLrlO/O/xfy9NP8zP1kJ+OEhbEsKayo+97K6
7bdu3FROF3GQV6SydKde95UmJ2sRo5ltegX1wut6Al/fVF5bwci0Z8hmewIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFBM723aLXY9gElYXHf2ShaceamFQMB8GA1UdIwQY
MBaAFHIEe+FbJ1kC3PYX3D0OFtwfMIAiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMt
MWFiZTNhYzEwYWE2LzEvRXp2YmRvdGRqMkFTVmhjZF9aS0ZweDVxWVZBLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMtMWFiZTNhYzEwYWE2
LzEvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBAAQ7tQOEIFu55TS0vcTn
Fsc9Y69grLcikR0sL0et66zYnKjSNOJJvgdIadsuqgPawkFA8UYMD1TK5vBtJNSW
0RImL1Bj8+dEvQsD+kF7JGh20//aOW6FbOzdU0yg5DR+YBZdZ143EKbXD1Cn+rk2
fTCEjyZYdZKmYsSQiNYjzqCajLpS5IHDbgrtzbOk+SSBXFTiI06zlvZbB+DIueYc
4HJ+20i3ucxas/YyzuU+ImNIY9kC4/Vi4bQr19DTD6J4HEwUCEKk6UgJLBSA+NYc
wUZvW7RG/DgHAkhOLNEWcusyV2wpmgKagPDXr048RBWnQm5YbYtUnyBkDYHa2JvA
jv4=
-----END CERTIFICATE-----
Generated at Mon Jun 9 06:13:29 2025 by rpki-client