Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/0ZLWCqgb-1XSeQdtXNW0YSjDexo.roa
File: 0ZLWCqgb-1XSeQdtXNW0YSjDexo.roa (raw, json)
Hash identifier: p2vbwhBFKK2WcopL8cUmBgTZaWZwbT2IG+qZ81i6cEc=
Subject key identifier: D1:92:D6:0A:A8:1B:FB:55:D2:79:07:6D:5C:D5:B4:61:28:C3:7B:1A
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 7953FD6B
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/0ZLWCqgb-1XSeQdtXNW0YSjDexo.roa
Signing time: Thu 07 Apr 2022 19:09:21 +0000
ROA not before: Thu 07 Apr 2022 19:09:21 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:180:457:1e3f/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2035547499 (0x7953fd6b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Apr 7 19:09:21 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=d192d60aa81bfb55d279076d5cd5b46128c37b1a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:b6:00:30:95:12:5f:2f:32:08:8a:84:f2:cc:
12:e6:32:57:7f:0b:3e:9c:a3:71:0d:34:97:04:d6:
31:56:b3:16:de:48:62:42:9f:07:fb:2c:4a:66:81:
f1:5f:89:ff:e9:21:30:0e:85:84:99:26:ce:e3:d6:
f7:d9:62:45:b9:f7:e4:c6:04:a6:2a:18:70:d4:27:
98:76:d3:e5:82:52:33:23:65:e1:22:4a:02:8c:2f:
6c:67:8b:c6:b1:ce:63:e9:bf:95:9a:fc:b0:25:7c:
e8:36:89:13:cc:d1:b3:ea:f0:50:63:6d:9f:56:ca:
79:b3:b3:ba:8e:6f:9e:8d:07:eb:e5:9d:7a:d7:16:
cf:d5:6e:36:fe:05:93:a9:18:78:77:32:c8:8e:2f:
90:97:2b:9a:fa:08:4d:c4:11:46:f5:ab:ea:7c:97:
73:b8:54:8f:30:2e:b4:50:e9:dc:08:12:8e:d9:1d:
d8:fa:b0:03:54:f5:ce:ff:e1:8e:2a:1c:8c:12:1c:
09:56:ee:c9:24:40:92:d4:bd:b3:64:cf:e1:1a:62:
35:4e:f2:76:bc:59:77:4b:73:42:5e:58:ba:7a:c5:
3e:28:cb:36:6c:81:44:e3:24:af:e6:ad:6e:4e:6c:
50:8e:42:6e:24:fe:c4:3b:e2:27:77:a1:d4:42:89:
e5:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:92:D6:0A:A8:1B:FB:55:D2:79:07:6D:5C:D5:B4:61:28:C3:7B:1A
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/0ZLWCqgb-1XSeQdtXNW0YSjDexo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
74:17:01:d5:ae:75:ed:0e:ba:52:72:bc:2b:3f:00:51:7e:95:
0a:4a:79:f1:28:87:73:b5:b9:f1:99:ce:14:13:76:b4:e3:5e:
a0:d6:9b:b4:02:31:7d:26:bc:d7:8d:81:cd:3b:e0:21:b1:45:
46:23:85:a0:d2:28:d2:40:1f:5f:c8:37:3f:2a:03:8e:6e:22:
ff:d9:66:eb:31:6b:92:fc:d1:9a:d2:e9:60:26:b6:fe:99:95:
e0:05:3d:ff:6f:cb:dd:32:13:77:07:77:c1:1d:df:fe:cc:08:
77:ff:f0:a0:57:2f:bd:09:b0:0a:6c:ac:c4:68:13:cf:dc:78:
d8:98:73:3e:48:f6:66:26:8f:bf:2c:8b:fc:96:a1:49:fd:4a:
01:f1:47:c5:3c:79:89:54:ef:c6:00:5f:3a:4d:ca:e1:4a:5c:
b9:9c:61:9e:8f:db:83:13:59:5e:d5:bf:bf:51:57:4d:f4:86:
a2:27:00:c0:43:43:28:98:52:9d:31:6d:f6:ff:ec:66:fc:ff:
a6:d1:80:83:8b:7d:fa:19:16:eb:89:47:62:23:85:90:d4:f9:
38:cb:4b:75:5c:bb:f9:2a:74:8d:11:f8:1a:fc:ff:db:d0:54:
b7:51:f7:f8:10:28:24:4c:a0:bc:11:48:fc:7b:fc:2a:7c:a7:
60:85:4e:54
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgIEeVP9azANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg3
MjA0N2JlMTViMjc1OTAyZGNmNjE3ZGMzZDBlMTZkYzFmMzA4MDIyMB4XDTIyMDQw
NzE5MDkyMVoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoZDE5MmQ2MGFhODFi
ZmI1NWQyNzkwNzZkNWNkNWI0NjEyOGMzN2IxYTCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBALa2ADCVEl8vMgiKhPLMEuYyV38LPpyjcQ00lwTWMVazFt5I
YkKfB/ssSmaB8V+J/+khMA6FhJkmzuPW99liRbn35MYEpioYcNQnmHbT5YJSMyNl
4SJKAowvbGeLxrHOY+m/lZr8sCV86DaJE8zRs+rwUGNtn1bKebOzuo5vno0H6+Wd
etcWz9VuNv4Fk6kYeHcyyI4vkJcrmvoITcQRRvWr6nyXc7hUjzAutFDp3AgSjtkd
2PqwA1T1zv/hjiocjBIcCVbuySRAktS9s2TP4RpiNU7ydrxZd0tzQl5YunrFPijL
NmyBROMkr+atbk5sUI5CbiT+xDviJ3eh1EKJ5fUCAwEAAaOCAhowggIWMB0GA1Ud
DgQWBBTRktYKqBv7VdJ5B21c1bRhKMN7GjAfBgNVHSMEGDAWgBRyBHvhWydZAtz2
F9w9DhbcHzCAIjAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L2NnUjc0VnNuV1FMYzloZmNQUTRXM0I4d2dDSS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvNWUvNzk4NDQ3LTIxZjQtNDVhYi05OWRjLTFhYmUzYWMxMGFhNi8x
LzBaTFdDcWdiLTFYU2VRZHRYTlcwWVNqRGV4by5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNWUv
Nzk4NDQ3LTIxZjQtNDVhYi05OWRjLTFhYmUzYWMxMGFhNi8xL2NnUjc0VnNuV1FM
YzloZmNQUTRXM0I4d2dDSS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAw
BggrBgEFBQcBBwEB/wQhMB8wDAQCAAEwBgMEA8EAGDAPBAIAAjAJAwcAIAEGfABk
MA0GCSqGSIb3DQEBCwUAA4IBAQB0FwHVrnXtDrpScrwrPwBRfpUKSnnxKIdztbnx
mc4UE3a0416g1pu0AjF9JrzXjYHNO+AhsUVGI4Wg0ijSQB9fyDc/KgOObiL/2Wbr
MWuS/NGa0ulgJrb+mZXgBT3/b8vdMhN3B3fBHd/+zAh3//CgVy+9CbAKbKzEaBPP
3HjYmHM+SPZmJo+/LIv8lqFJ/UoB8UfFPHmJVO/GAF86TcrhSly5nGGej9uDE1le
1b+/UVdN9IaiJwDAQ0MomFKdMW32/+xm/P+m0YCDi336GRbriUdiI4WQ1Pk4y0t1
XLv5KnSNEfga/P/b0FS3Uff4ECgkTKC8EUj8e/wqfKdghU5U
-----END CERTIFICATE-----
Generated at Thu May 1 00:08:28 2025 by rpki-client