Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/eOj-UJSEJtyKrIgFwsCTEEskBdQ.roa
File: eOj-UJSEJtyKrIgFwsCTEEskBdQ.roa (raw, json)
Hash identifier: UzBvMpNcllfxH+yKL2oyTka7GwpK+67VpKYfpZmXjR8=
Subject key identifier: 78:E8:FE:50:94:84:26:DC:8A:AC:88:05:C2:C0:93:10:4B:24:05:D4
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 6CBCEDE3
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/eOj-UJSEJtyKrIgFwsCTEEskBdQ.roa
Signing time: Tue 22 Feb 2022 09:04:19 +0000
ROA not before: Tue 22 Feb 2022 09:04:19 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:17f:1bf4:40b5/128 maxlen: 128
2001:67c:64:ffff:0:17f:20ac:a2bd/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1824320995 (0x6cbcede3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Feb 22 09:04:19 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=78e8fe50948426dc8aac8805c2c093104b2405d4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:ee:fe:a0:04:57:7d:d2:ce:d4:9f:45:6e:4d:
b9:0d:93:45:6e:a2:50:2d:a2:55:92:5d:d1:a5:9a:
35:8c:65:84:75:ef:a0:31:f5:e1:9a:74:02:5e:a7:
49:09:63:e1:3e:10:de:57:d4:42:19:69:d5:b8:ea:
6f:74:36:f8:20:2f:4d:97:d0:ef:6a:03:de:f4:e1:
28:0a:fd:c4:f1:9e:ad:d9:0e:2c:fb:90:4d:79:54:
a2:28:84:8a:f2:b3:de:ce:ad:ab:a3:30:ee:0f:3e:
be:e4:7f:08:77:50:d0:c7:d8:a7:3b:93:6c:bb:e1:
db:c4:64:58:09:e6:b2:f6:b3:bd:6c:b3:51:0b:e1:
85:18:fd:62:b7:5f:7f:9d:45:6b:46:80:ac:6e:db:
8d:4b:85:1c:56:f8:44:81:e8:4b:1e:b0:2e:b1:a5:
0e:89:c9:60:58:c9:df:de:c9:91:1c:5b:9a:db:bc:
6a:19:fb:29:60:a6:c8:14:af:a7:78:d3:c9:53:8f:
e5:e8:0e:03:90:b2:34:6f:65:83:ad:b4:ca:5a:94:
1d:e4:7f:82:57:d5:58:9e:2d:df:d5:83:35:72:20:
a2:88:78:a5:b4:34:33:cd:48:1a:1b:64:4f:c6:d6:
b6:4f:a0:16:dc:89:c8:f6:b3:56:b3:56:82:e2:16:
86:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:E8:FE:50:94:84:26:DC:8A:AC:88:05:C2:C0:93:10:4B:24:05:D4
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/eOj-UJSEJtyKrIgFwsCTEEskBdQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
17:f3:57:fd:de:e0:f2:e8:e0:00:10:38:37:2d:9a:b4:2c:e6:
1e:9f:a3:95:52:b6:20:92:dc:96:c9:d7:e8:3d:5c:2f:e4:03:
6c:db:c9:d7:da:3c:ba:b7:26:62:2f:b8:93:b7:62:64:a5:b8:
94:0b:c0:34:7c:ee:1e:69:b7:48:4a:04:11:ef:c9:2f:cc:a9:
2c:eb:64:fb:4f:0f:15:b6:7d:ac:b7:52:12:db:4e:66:8d:05:
cd:66:b0:da:61:f5:95:9e:78:34:c1:3a:33:b5:6a:49:6a:00:
8e:b2:70:47:d1:0a:95:82:4e:9c:b3:92:83:4d:9f:57:6d:3a:
0a:e6:f9:ee:b2:6f:f2:d1:16:0b:ca:08:91:d0:58:78:ce:b1:
72:71:9c:12:de:33:ec:88:24:ee:2c:1d:5d:e4:3a:d7:21:5c:
66:6b:d3:4b:b0:2b:34:21:aa:4b:46:3b:7c:f9:b1:68:49:b8:
e9:40:20:e2:d2:58:9e:0a:94:52:4e:a4:58:46:ad:b4:7c:1d:
2d:b2:ba:6e:1c:2a:b8:4c:29:49:18:76:9f:c7:16:8d:00:c4:
13:8b:de:76:48:0f:8b:9d:d0:e8:9a:d6:3c:a1:ed:6e:ea:96:
4e:f8:d7:c2:64:f9:e7:19:c4:c6:4f:00:93:36:4b:df:d3:25:
ad:b3:67:e9
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgIEbLzt4zANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg3
MjA0N2JlMTViMjc1OTAyZGNmNjE3ZGMzZDBlMTZkYzFmMzA4MDIyMB4XDTIyMDIy
MjA5MDQxOVoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoNzhlOGZlNTA5NDg0
MjZkYzhhYWM4ODA1YzJjMDkzMTA0YjI0MDVkNDCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAO7u/qAEV33SztSfRW5NuQ2TRW6iUC2iVZJd0aWaNYxlhHXv
oDH14Zp0Al6nSQlj4T4Q3lfUQhlp1bjqb3Q2+CAvTZfQ72oD3vThKAr9xPGerdkO
LPuQTXlUoiiEivKz3s6tq6Mw7g8+vuR/CHdQ0MfYpzuTbLvh28RkWAnmsvazvWyz
UQvhhRj9Yrdff51Fa0aArG7bjUuFHFb4RIHoSx6wLrGlDonJYFjJ397JkRxbmtu8
ahn7KWCmyBSvp3jTyVOP5egOA5CyNG9lg620ylqUHeR/glfVWJ4t39WDNXIgooh4
pbQ0M81IGhtkT8bWtk+gFtyJyPazVrNWguIWhiUCAwEAAaOCAhowggIWMB0GA1Ud
DgQWBBR46P5QlIQm3IqsiAXCwJMQSyQF1DAfBgNVHSMEGDAWgBRyBHvhWydZAtz2
F9w9DhbcHzCAIjAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L2NnUjc0VnNuV1FMYzloZmNQUTRXM0I4d2dDSS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvNWUvNzk4NDQ3LTIxZjQtNDVhYi05OWRjLTFhYmUzYWMxMGFhNi8x
L2VPai1VSlNFSnR5S3JJZ0Z3c0NURUVza0JkUS5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNWUv
Nzk4NDQ3LTIxZjQtNDVhYi05OWRjLTFhYmUzYWMxMGFhNi8xL2NnUjc0VnNuV1FM
YzloZmNQUTRXM0I4d2dDSS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAw
BggrBgEFBQcBBwEB/wQhMB8wDAQCAAEwBgMEA8EAGDAPBAIAAjAJAwcAIAEGfABk
MA0GCSqGSIb3DQEBCwUAA4IBAQAX81f93uDy6OAAEDg3LZq0LOYen6OVUrYgktyW
ydfoPVwv5ANs28nX2jy6tyZiL7iTt2JkpbiUC8A0fO4eabdISgQR78kvzKks62T7
Tw8Vtn2st1IS205mjQXNZrDaYfWVnng0wToztWpJagCOsnBH0QqVgk6cs5KDTZ9X
bToK5vnusm/y0RYLygiR0Fh4zrFycZwS3jPsiCTuLB1d5DrXIVxma9NLsCs0IapL
Rjt8+bFoSbjpQCDi0lieCpRSTqRYRq20fB0tsrpuHCq4TClJGHafxxaNAMQTi952
SA+LndDomtY8oe1u6pZO+NfCZPnnGcTGTwCTNkvf0yWts2fp
-----END CERTIFICATE-----
Generated at Mon Jun 9 02:43:31 2025 by rpki-client