Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/EVSy_MPCubft65hiorD43bqG2Dk.roa
File: EVSy_MPCubft65hiorD43bqG2Dk.roa (raw, json)
Hash identifier: mOqrRr9lExyXt8B5wgYZVEm8JZIPgxZVJdqtdd+pshg=
Subject key identifier: 11:54:B2:FC:C3:C2:B9:B7:ED:EB:98:62:A2:B0:F8:DD:BA:86:D8:39
Certificate issuer: /CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Certificate serial: 019090F8BC184B244B89169F9CB9D3D819D5
Authority key identifier: 52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/EVSy_MPCubft65hiorD43bqG2Dk.roa
Signing time: Mon 08 Jul 2024 06:12:18 +0000
ROA not before: Mon 08 Jul 2024 06:12:18 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:90:f8:bc:18:4b:24:4b:89:16:9f:9c:b9:d3:d8:19:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Validity
Not Before: Jul 8 06:12:18 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=1154b2fcc3c2b9b7edeb9862a2b0f8ddba86d839
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:75:d4:61:2d:f3:85:af:d2:fd:94:8c:23:92:
64:87:7a:15:b8:1b:82:0a:bd:cd:db:09:5c:0f:4f:
eb:42:a3:94:4b:05:e2:8b:bb:92:7d:86:c8:5f:6e:
e0:ee:e8:48:03:c7:c1:a2:cc:7c:1a:68:e3:66:dd:
dc:2c:03:42:59:f8:4c:cd:8b:96:58:86:eb:ac:80:
25:ae:a9:c2:e9:0f:c9:2e:bb:e2:e8:3c:7e:e8:52:
6b:ee:b2:46:20:ae:d1:b8:de:5c:b1:8e:a5:47:a9:
a1:c5:e2:46:68:63:a9:65:c5:8a:12:b6:7e:ab:7d:
67:c5:2d:72:63:c8:55:3c:a4:b0:cf:f9:29:67:a5:
7a:bb:9b:62:27:0e:e0:07:d8:4b:75:90:ed:08:6e:
2b:7c:00:d7:af:a8:d0:73:a6:ec:99:95:bb:e9:f3:
4c:6b:2e:fb:98:35:fe:91:d4:10:04:ad:3a:48:7a:
37:08:16:dd:d6:0d:47:8b:8e:61:db:c7:fc:6c:5f:
d0:5d:ab:b5:0c:a3:13:b9:11:c5:19:cc:75:ad:e2:
38:aa:fd:57:7a:83:2a:b8:47:0a:02:d2:47:ac:a7:
17:02:95:ac:66:7b:da:c4:ee:a7:4c:af:ae:c1:57:
73:6c:ab:88:2b:ab:3f:d6:37:8c:83:ad:52:ea:70:
1e:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:54:B2:FC:C3:C2:B9:B7:ED:EB:98:62:A2:B0:F8:DD:BA:86:D8:39
X509v3 Authority Key Identifier:
keyid:52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/EVSy_MPCubft65hiorD43bqG2Dk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/UmIEFdJJCl7D9pJbn3kEDo4i3b8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
72:ad:45:cf:14:f2:2f:68:9a:7d:fd:93:55:5f:c7:a1:13:06:
57:d7:2f:ff:bb:27:66:d2:d2:aa:92:9f:98:eb:af:a2:2a:d6:
01:5b:ae:c3:8e:24:47:53:04:74:58:b0:35:a1:b8:48:e0:79:
78:f8:4e:0a:ce:c1:1c:03:e4:8c:68:bd:8f:3e:9f:c2:b2:91:
17:a6:41:f9:8a:b7:0d:82:73:6b:d6:fd:e4:b4:6b:06:74:8e:
cf:03:ba:f6:7a:66:8c:2b:49:e7:32:79:f7:f7:c2:a8:57:a4:
ff:04:89:82:e3:35:47:27:af:1d:c0:75:07:79:58:69:cd:07:
dd:ea:19:ce:8d:8b:ab:9a:2b:53:7f:bb:ef:a6:e0:17:7a:9b:
e0:42:88:8c:70:cf:c6:26:cc:1c:c9:55:32:4a:1a:92:46:dd:
16:70:b3:68:48:ea:02:e4:9c:f5:7f:c8:c7:fd:f6:21:a0:06:
c9:d0:81:42:71:26:6f:f8:48:4f:df:95:21:02:99:af:ad:09:
1f:e6:fb:14:52:87:7f:24:f4:9e:a9:60:2b:1b:6a:56:cb:44:
ff:10:da:d1:15:c0:15:57:50:86:3b:02:39:9b:ed:78:c8:5c:
78:7d:d5:e7:88:32:92:c4:96:79:d2:cf:2e:f3:b7:57:af:8a:
ac:4f:a6:2a
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAZCQ+LwYSyRLiRafnLnT2BnVMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDUyNjIwNDE1ZDI0OTBhNWVjM2Y2OTI1YjlmNzkwNDBlOGUy
MmRkYmYwHhcNMjQwNzA4MDYxMjE4WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxMTU0YjJmY2MzYzJiOWI3ZWRlYjk4NjJhMmIwZjhkZGJhODZkODM5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA23XUYS3zha/S/ZSMI5Jkh3oVuBuC
Cr3N2wlcD0/rQqOUSwXii7uSfYbIX27g7uhIA8fBosx8GmjjZt3cLANCWfhMzYuW
WIbrrIAlrqnC6Q/JLrvi6Dx+6FJr7rJGIK7RuN5csY6lR6mhxeJGaGOpZcWKErZ+
q31nxS1yY8hVPKSwz/kpZ6V6u5tiJw7gB9hLdZDtCG4rfADXr6jQc6bsmZW76fNM
ay77mDX+kdQQBK06SHo3CBbd1g1Hi45h28f8bF/QXau1DKMTuRHFGcx1reI4qv1X
eoMquEcKAtJHrKcXApWsZnvaxO6nTK+uwVdzbKuIK6s/1jeMg61S6nAe1QIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFBFUsvzDwrm37euYYqKw+N26htg5MB8GA1UdIwQY
MBaAFFJiBBXSSQpew/aSW595BA6OIt2/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVW1JRUZkSkpDbDdEOXBKYm4za0VEbzRpM2I4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZS8wOTgzN2MtOThmMy00YzlmLWFlYmYt
ODgxNDg4ZmZkYmIwLzEvRVZTeV9NUEN1YmZ0NjVoaW9yRDQzYnFHMkRrLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84ZS8wOTgzN2MtOThmMy00YzlmLWFlYmYtODgxNDg4ZmZkYmIw
LzEvVW1JRUZkSkpDbDdEOXBKYm4za0VEbzRpM2I4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBAHKtRc8U8i9omn39k1Vf
x6ETBlfXL/+7J2bS0qqSn5jrr6Iq1gFbrsOOJEdTBHRYsDWhuEjgeXj4TgrOwRwD
5IxovY8+n8KykRemQfmKtw2Cc2vW/eS0awZ0js8DuvZ6ZowrSecyeff3wqhXpP8E
iYLjNUcnrx3AdQd5WGnNB93qGc6Ni6uaK1N/u++m4Bd6m+BCiIxwz8YmzBzJVTJK
GpJG3RZws2hI6gLknPV/yMf99iGgBsnQgUJxJm/4SE/flSECma+tCR/m+xRSh38k
9J6pYCsbalbLRP8Q2tEVwBVXUIY7Ajmb7XjIXHh91eeIMpLElnnSzy7zt1eviqxP
pio=
-----END CERTIFICATE-----
Generated at Sat Apr 19 14:02:08 2025 by rpki-client