Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/0zu__cleNkgWhkQMV_u29NTpPA8.roa
File: 0zu__cleNkgWhkQMV_u29NTpPA8.roa (raw, json)
Hash identifier: HOqyFNlgTfLK7TG0xbIA6mi8eDWfE7X8ZVnHWizgPXo=
Subject key identifier: D3:3B:BF:FD:C9:5E:36:48:16:86:44:0C:57:FB:B6:F4:D4:E9:3C:0F
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 01874BC41684DF0635527D52F5F41F75B107
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/0zu__cleNkgWhkQMV_u29NTpPA8.roa
Signing time: Tue 04 Apr 2023 10:15:54 +0000
ROA not before: Tue 04 Apr 2023 10:15:54 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:187:4695:a68a/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:4b:c4:16:84:df:06:35:52:7d:52:f5:f4:1f:75:b1:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Apr 4 10:15:54 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=d33bbffdc95e36481686440c57fbb6f4d4e93c0f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:a0:dc:d3:c1:b9:0b:b2:1a:0a:52:fc:14:1b:
ed:62:75:07:0c:d9:73:01:21:49:7d:95:4c:a6:f7:
ff:d1:a7:e6:1c:30:e8:74:56:54:08:df:56:08:c8:
e0:91:21:de:25:04:0d:1e:71:69:83:f8:03:49:d3:
c7:57:97:1e:2e:a3:fe:7e:c9:b1:60:04:b3:dc:61:
6e:57:3e:91:dc:eb:90:17:aa:a9:f4:1f:d9:fd:e4:
b6:34:88:bb:45:21:87:17:2a:7b:f6:b2:6a:5d:e2:
91:7d:ae:7d:28:76:a3:53:85:8f:49:11:69:54:13:
3b:6f:91:f4:05:ff:74:de:e8:1f:fe:de:86:2c:7f:
be:00:83:65:a4:63:e0:a6:46:ba:cb:39:15:24:87:
54:b9:43:d4:61:25:41:eb:2e:e9:f0:52:47:09:df:
39:38:e0:af:4c:8e:91:9b:2f:60:3d:93:31:65:74:
18:bf:ef:53:d6:ab:78:24:2e:aa:d5:c7:f2:7a:af:
02:31:33:5f:17:5f:31:26:22:58:29:6d:41:84:e7:
4a:a7:ec:30:da:91:12:74:40:d2:0f:39:a8:ce:b5:
1e:bd:87:86:ef:48:22:3c:0c:c6:02:9d:a7:de:3e:
2f:00:00:bd:3d:dd:42:07:74:d2:2a:47:26:0a:6c:
ff:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:3B:BF:FD:C9:5E:36:48:16:86:44:0C:57:FB:B6:F4:D4:E9:3C:0F
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/0zu__cleNkgWhkQMV_u29NTpPA8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
46:68:df:b5:60:e2:b3:fe:7c:b1:3c:7c:84:4f:3c:51:14:08:
b5:d3:75:ff:fc:b8:eb:41:59:70:d3:75:87:62:51:90:d4:de:
c9:d5:a4:45:fc:31:58:4c:f9:79:0c:aa:67:9c:1f:ff:74:95:
28:50:e2:49:0e:9d:6a:0e:9b:9e:b5:8f:4a:11:84:90:16:08:
36:4e:40:04:b3:c2:a2:e8:0a:27:3a:b1:c3:54:f6:b4:b2:3d:
84:26:08:fb:5a:25:72:33:8a:35:dd:db:21:2f:49:c4:f4:4e:
4a:46:35:95:a5:91:e2:7f:5b:d1:0a:f5:50:41:59:67:c8:33:
8b:c8:fe:bf:49:1a:04:35:73:a4:38:91:fb:d9:3a:27:bd:e3:
ba:2b:21:6d:63:4b:52:dd:bc:46:26:a8:c0:d3:8c:e9:62:f6:
bd:76:ab:a2:73:9e:be:31:27:b3:c8:1f:53:80:66:cb:99:bc:
d4:32:58:de:85:a0:38:3e:8a:73:3f:1b:ae:77:67:24:e0:4c:
d2:57:52:fa:9b:83:7d:f0:89:50:75:07:36:0c:61:0e:69:e7:
b0:a2:d8:28:55:41:f2:65:8b:ca:3f:0a:ae:5a:61:4f:f1:25:
b0:b4:c5:c7:43:1c:9d:f7:a9:f1:9c:00:e4:41:85:30:fd:6b:
8f:a9:de:8c
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYdLxBaE3wY1Un1S9fQfdbEHMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcyMDQ3YmUxNWIyNzU5MDJkY2Y2MTdkYzNkMGUxNmRjMWYz
MDgwMjIwHhcNMjMwNDA0MTAxNTU0WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkMzNiYmZmZGM5NWUzNjQ4MTY4NjQ0MGM1N2ZiYjZmNGQ0ZTkzYzBmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlaDc08G5C7IaClL8FBvtYnUHDNlz
ASFJfZVMpvf/0afmHDDodFZUCN9WCMjgkSHeJQQNHnFpg/gDSdPHV5ceLqP+fsmx
YASz3GFuVz6R3OuQF6qp9B/Z/eS2NIi7RSGHFyp79rJqXeKRfa59KHajU4WPSRFp
VBM7b5H0Bf903ugf/t6GLH++AINlpGPgpka6yzkVJIdUuUPUYSVB6y7p8FJHCd85
OOCvTI6Rmy9gPZMxZXQYv+9T1qt4JC6q1cfyeq8CMTNfF18xJiJYKW1BhOdKp+ww
2pESdEDSDzmozrUevYeG70giPAzGAp2n3j4vAAC9Pd1CB3TSKkcmCmz/VwIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFNM7v/3JXjZIFoZEDFf7tvTU6TwPMB8GA1UdIwQY
MBaAFHIEe+FbJ1kC3PYX3D0OFtwfMIAiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMt
MWFiZTNhYzEwYWE2LzEvMHp1X19jbGVOa2dXaGtRTVZfdTI5TlRwUEE4LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMtMWFiZTNhYzEwYWE2
LzEvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBAEZo37Vg4rP+fLE8fIRP
PFEUCLXTdf/8uOtBWXDTdYdiUZDU3snVpEX8MVhM+XkMqmecH/90lShQ4kkOnWoO
m561j0oRhJAWCDZOQASzwqLoCic6scNU9rSyPYQmCPtaJXIzijXd2yEvScT0TkpG
NZWlkeJ/W9EK9VBBWWfIM4vI/r9JGgQ1c6Q4kfvZOie947orIW1jS1LdvEYmqMDT
jOli9r12q6Jznr4xJ7PIH1OAZsuZvNQyWN6FoDg+inM/G653ZyTgTNJXUvqbg33w
iVB1BzYMYQ5p57Ci2ChVQfJli8o/Cq5aYU/xJbC0xcdDHJ33qfGcAORBhTD9a4+p
3ow=
-----END CERTIFICATE-----
Generated at Thu May 1 03:01:47 2025 by rpki-client