Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/1-ZA0uFEU1ln7F6kDVwVQCy15ZAM.roa
File: 1-ZA0uFEU1ln7F6kDVwVQCy15ZAM.roa (raw, json)
Hash identifier: +XopN4UXFVmy4/PbAtKD/QToiOxc5isIQRFJqoAZpdU=
Subject key identifier: F9:90:34:B8:51:14:D6:59:FB:17:A9:03:57:05:50:0B:2D:79:64:03
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0186B1EC070B816DB7339385BA22821ECCDE
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/1-ZA0uFEU1ln7F6kDVwVQCy15ZAM.roa
Signing time: Sun 05 Mar 2023 13:18:00 +0000
ROA not before: Sun 05 Mar 2023 13:18:00 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:b1:ec:07:0b:81:6d:b7:33:93:85:ba:22:82:1e:cc:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Mar 5 13:18:00 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=f99034b85114d659fb17a9035705500b2d796403
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:e9:4c:08:d7:3a:c2:28:85:44:f3:66:ee:ef:
2e:1d:07:be:37:f8:25:5a:ab:27:06:ef:c2:e2:cc:
0d:34:58:a4:09:4e:ac:c7:4d:19:12:ba:c0:ca:96:
02:81:ff:37:a7:21:e0:32:cb:a8:22:7b:01:bf:b6:
76:0f:30:1c:ca:62:12:05:76:f5:cb:cc:13:72:1c:
64:3a:75:5a:6f:ae:50:20:0a:ae:02:41:1e:98:7f:
6b:24:96:de:44:34:ff:5f:96:e0:cc:87:80:94:54:
f2:95:ff:f0:32:fb:6c:f0:18:85:a2:3d:26:97:0b:
13:88:c6:cb:61:71:ee:26:55:6e:42:5d:fc:2b:f2:
e2:6e:12:dc:5c:0c:24:f2:20:bd:a9:7b:71:6d:fd:
e1:81:29:c2:75:c6:7e:ef:f1:a5:1f:2e:12:39:36:
34:60:1f:ef:0d:d0:0a:ee:d4:f3:24:44:c0:a8:ff:
91:6d:0c:e5:b2:29:64:b2:a1:62:f7:d3:ed:b2:a4:
75:29:73:d6:a9:f3:4d:df:f8:a0:ec:6f:06:56:0d:
25:25:00:7a:44:e7:29:1c:24:65:b8:86:b4:d8:ab:
3a:4e:8d:10:67:18:82:d3:5f:20:c6:37:44:c1:36:
9c:99:36:a6:8b:2a:71:ba:d7:32:ec:1c:11:93:5f:
1e:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:90:34:B8:51:14:D6:59:FB:17:A9:03:57:05:50:0B:2D:79:64:03
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/1-ZA0uFEU1ln7F6kDVwVQCy15ZAM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
3f:a9:ce:ba:2e:66:f6:93:09:a6:ee:36:31:b2:58:b4:51:3d:
d0:5a:a7:1f:60:e1:ce:dd:45:fc:b1:0e:a2:12:bd:e8:c4:6d:
64:18:39:d1:99:20:e1:7a:bc:d5:67:f8:c8:54:79:f2:a6:b4:
1e:fb:ef:2b:ab:4c:16:eb:94:4c:8b:7a:d4:6c:e1:e4:39:0b:
86:11:40:ee:e8:35:2b:24:9c:f4:c3:54:24:1a:b3:24:db:e5:
f6:34:5f:c9:4a:7f:8b:5a:9a:77:32:d5:16:f7:1a:1b:03:2d:
b0:2e:61:96:70:93:e4:db:57:b0:1c:4b:69:28:a7:48:35:43:
23:0d:10:bf:44:0b:36:3f:6f:9f:1e:4e:20:12:b3:63:34:7d:
62:6b:d2:b0:90:51:af:d9:88:c1:f3:9a:c9:49:86:94:d2:6a:
04:b1:34:89:6d:ef:7b:e3:31:7f:0f:c2:50:aa:8b:3d:96:19:
ac:e7:df:7e:e6:1a:1c:6f:fc:e4:a8:b4:5a:b0:2f:9c:f2:55:
24:58:21:58:56:2f:8e:11:9e:c4:f2:b8:db:90:f3:50:f9:d7:
37:3e:4f:b9:d2:bf:a0:ab:69:87:cf:71:a4:82:be:31:81:25:
47:e8:09:00:10:f6:d4:bb:f9:c7:17:11:24:a2:db:b6:46:1b:
84:69:1d:cf
-----BEGIN CERTIFICATE-----
MIIFDzCCA/egAwIBAgISAYax7AcLgW23M5OFuiKCHszeMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcyMDQ3YmUxNWIyNzU5MDJkY2Y2MTdkYzNkMGUxNmRjMWYz
MDgwMjIwHhcNMjMwMzA1MTMxODAwWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmOTkwMzRiODUxMTRkNjU5ZmIxN2E5MDM1NzA1NTAwYjJkNzk2NDAzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtOlMCNc6wiiFRPNm7u8uHQe+N/gl
WqsnBu/C4swNNFikCU6sx00ZErrAypYCgf83pyHgMsuoInsBv7Z2DzAcymISBXb1
y8wTchxkOnVab65QIAquAkEemH9rJJbeRDT/X5bgzIeAlFTylf/wMvts8BiFoj0m
lwsTiMbLYXHuJlVuQl38K/LibhLcXAwk8iC9qXtxbf3hgSnCdcZ+7/GlHy4SOTY0
YB/vDdAK7tTzJETAqP+RbQzlsilksqFi99PtsqR1KXPWqfNN3/ig7G8GVg0lJQB6
ROcpHCRluIa02Ks6To0QZxiC018gxjdEwTacmTamiypxutcy7BwRk18eYwIDAQAB
o4ICGzCCAhcwHQYDVR0OBBYEFPmQNLhRFNZZ+xepA1cFUAsteWQDMB8GA1UdIwQY
MBaAFHIEe+FbJ1kC3PYX3D0OFtwfMIAiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNlcjCB
jgYIKwYBBQUHAQsEgYEwfzB9BggrBgEFBQcwC4ZxcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMt
MWFiZTNhYzEwYWE2LzEvMS1aQTB1RkVVMWxuN0Y2a0RWd1ZRQ3kxNVpBTS5yb2Ew
gYEGA1UdHwR6MHgwdqB0oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0
b3J5L0RFRkFVTFQvNWUvNzk4NDQ3LTIxZjQtNDVhYi05OWRjLTFhYmUzYWMxMGFh
Ni8xL2NnUjc0VnNuV1FMYzloZmNQUTRXM0I4d2dDSS5jcmwwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAwBggrBgEFBQcBBwEB/wQhMB8wDAQCAAEwBgMEA8EAGDAP
BAIAAjAJAwcAIAEGfABkMA0GCSqGSIb3DQEBCwUAA4IBAQA/qc66Lmb2kwmm7jYx
sli0UT3QWqcfYOHO3UX8sQ6iEr3oxG1kGDnRmSDherzVZ/jIVHnyprQe++8rq0wW
65RMi3rUbOHkOQuGEUDu6DUrJJz0w1QkGrMk2+X2NF/JSn+LWpp3MtUW9xobAy2w
LmGWcJPk21ewHEtpKKdINUMjDRC/RAs2P2+fHk4gErNjNH1ia9KwkFGv2YjB85rJ
SYaU0moEsTSJbe974zF/D8JQqos9lhms599+5hocb/zkqLRasC+c8lUkWCFYVi+O
EZ7E8rjbkPNQ+dc3Pk+50r+gq2mHz3Gkgr4xgSVH6AkAEPbUu/nHFxEkotu2RhuE
aR3P
-----END CERTIFICATE-----
Generated at Thu May 1 14:59:08 2025 by rpki-client