Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/1-ZO6-2064yGkvhKbImhEQFbZJEA.roa
File: 1-ZO6-2064yGkvhKbImhEQFbZJEA.roa (raw, json)
Hash identifier: YGqbX1M9cUuB8ImxTcezHCaNphsq+ljP1zg6SiLwhdU=
Subject key identifier: F9:93:BA:FB:6D:3A:E3:21:A4:BE:12:9B:22:68:44:40:56:D9:24:40
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 809E825A
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/1-ZO6-2064yGkvhKbImhEQFbZJEA.roa
Signing time: Tue 03 May 2022 03:10:33 +0000
ROA not before: Tue 03 May 2022 03:10:33 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:180:466e:42dd/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:180:457:1e3f/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2157871706 (0x809e825a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: May 3 03:10:33 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=f993bafb6d3ae321a4be129b2268444056d92440
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:9e:57:2b:1d:1f:92:62:a8:80:04:6c:d7:ff:
71:dc:ce:1d:79:89:b1:c6:e1:af:af:22:cd:aa:ce:
94:30:13:62:c6:e4:17:91:21:e6:72:42:9f:c8:ff:
5a:21:11:b8:c9:1a:6b:70:4b:51:3a:72:ef:b6:bd:
9f:fd:80:9a:ff:06:8d:e2:8f:27:fa:f8:d2:0e:fe:
d1:af:ad:02:fd:8b:cd:cf:e1:14:9c:74:46:18:2a:
3b:28:c5:84:cd:af:54:a4:d2:75:63:0a:31:dd:4e:
b0:83:85:f5:a9:71:a0:31:ee:c9:c8:73:00:8a:23:
0a:7b:57:d1:e2:b3:ac:e2:2e:98:cf:be:b6:2d:68:
ec:c4:49:87:4f:f8:0c:1f:53:77:48:78:96:cf:85:
65:d4:ba:29:03:91:f7:6b:2c:9f:f4:03:f8:74:bb:
ca:f7:9d:97:86:8a:df:dd:85:a0:20:4e:88:df:b4:
55:8f:fa:8e:01:5b:68:3b:ba:65:39:c8:b9:ec:be:
31:ed:f2:c8:8c:fc:3d:c3:11:e9:35:29:bd:2d:4b:
e5:c0:41:b4:10:98:e1:b9:9f:a6:ae:17:c8:68:50:
40:27:b4:7c:2a:f9:13:e1:0a:00:d1:df:eb:1b:f0:
9c:39:ae:43:3e:a2:0f:1f:c6:25:00:da:d2:50:36:
90:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:93:BA:FB:6D:3A:E3:21:A4:BE:12:9B:22:68:44:40:56:D9:24:40
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/1-ZO6-2064yGkvhKbImhEQFbZJEA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
8b:83:d0:74:72:f5:1b:bf:40:8a:22:b1:38:0a:c4:73:a4:b2:
35:94:70:b3:03:f5:49:8b:22:67:7d:f7:75:ef:7c:a4:de:c8:
a7:1e:cc:bd:bd:30:b5:f0:da:54:5a:30:77:64:2b:73:f5:bc:
af:7f:b7:8d:9a:f8:1c:cd:cf:e3:08:ce:11:d2:af:2f:ae:d0:
f6:a2:6f:7a:42:d8:49:5d:b0:94:80:1a:cb:ef:ce:5e:56:47:
17:6f:33:bb:53:a3:13:64:3d:da:14:85:ba:f6:87:b9:e9:86:
10:bd:28:c9:57:d6:20:39:ad:0f:9d:97:7e:78:03:fa:96:29:
e1:b0:be:fc:5e:92:a8:9e:c7:b3:68:d3:c5:24:04:57:0e:ff:
fa:46:80:1d:65:1c:c6:21:87:63:5e:1b:bb:fb:66:1f:38:0f:
cf:c6:2c:9d:24:ee:4e:d0:0e:08:c3:77:51:83:d3:34:81:8a:
a9:a1:20:6c:d4:18:55:e3:35:a4:44:dc:48:4a:a9:60:95:35:
bc:df:0f:e5:d0:be:24:3c:c1:b4:b8:52:ea:d4:e9:72:36:b8:
6c:14:97:65:40:e8:a9:6c:4c:bf:8d:d7:22:20:5b:dd:88:07:
44:5e:84:4c:7e:bd:76:b1:28:4a:cd:5f:cf:9f:bf:ec:af:23:
3d:f7:20:eb
-----BEGIN CERTIFICATE-----
MIIFAjCCA+qgAwIBAgIFAICeglowDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMo
NzIwNDdiZTE1YjI3NTkwMmRjZjYxN2RjM2QwZTE2ZGMxZjMwODAyMjAeFw0yMjA1
MDMwMzEwMzNaFw0yMzA3MDEwMDAwMDBaMDMxMTAvBgNVBAMTKGY5OTNiYWZiNmQz
YWUzMjFhNGJlMTI5YjIyNjg0NDQwNTZkOTI0NDAwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQChnlcrHR+SYqiABGzX/3Hczh15ibHG4a+vIs2qzpQwE2LG
5BeRIeZyQp/I/1ohEbjJGmtwS1E6cu+2vZ/9gJr/Bo3ijyf6+NIO/tGvrQL9i83P
4RScdEYYKjsoxYTNr1Sk0nVjCjHdTrCDhfWpcaAx7snIcwCKIwp7V9His6ziLpjP
vrYtaOzESYdP+AwfU3dIeJbPhWXUuikDkfdrLJ/0A/h0u8r3nZeGit/dhaAgTojf
tFWP+o4BW2g7umU5yLnsvjHt8siM/D3DEek1Kb0tS+XAQbQQmOG5n6auF8hoUEAn
tHwq+RPhCgDR3+sb8Jw5rkM+og8fxiUA2tJQNpAPAgMBAAGjggIbMIICFzAdBgNV
HQ4EFgQU+ZO6+2064yGkvhKbImhEQFbZJEAwHwYDVR0jBBgwFoAUcgR74VsnWQLc
9hfcPQ4W3B8wgCIwDgYDVR0PAQH/BAQDAgeAMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvREVGQVVM
VC9jZ1I3NFZzbldRTGM5aGZjUFE0VzNCOHdnQ0kuY2VyMIGOBggrBgEFBQcBCwSB
gTB/MH0GCCsGAQUFBzALhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9y
eS9ERUZBVUxULzVlLzc5ODQ0Ny0yMWY0LTQ1YWItOTlkYy0xYWJlM2FjMTBhYTYv
MS8xLVpPNi0yMDY0eUdrdmhLYkltaEVRRmJaSkVBLnJvYTCBgQYDVR0fBHoweDB2
oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvREVGQVVMVC81
ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMtMWFiZTNhYzEwYWE2LzEvY2dSNzRWc25X
UUxjOWhmY1BRNFczQjh3Z0NJLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4C
MDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8EAgACMAkDBwAgAQZ8
AGQwDQYJKoZIhvcNAQELBQADggEBAIuD0HRy9Ru/QIoisTgKxHOksjWUcLMD9UmL
Imd993XvfKTeyKcezL29MLXw2lRaMHdkK3P1vK9/t42a+BzNz+MIzhHSry+u0Pai
b3pC2EldsJSAGsvvzl5WRxdvM7tToxNkPdoUhbr2h7nphhC9KMlX1iA5rQ+dl354
A/qWKeGwvvxekqiex7No08UkBFcO//pGgB1lHMYhh2NeG7v7Zh84D8/GLJ0k7k7Q
DgjDd1GD0zSBiqmhIGzUGFXjNaRE3EhKqWCVNbzfD+XQviQ8wbS4UurU6XI2uGwU
l2VA6KlsTL+N1yIgW92IB0RehEx+vXaxKErNX8+fv+yvIz33IOs=
-----END CERTIFICATE-----
Generated at Thu May 1 07:21:34 2025 by rpki-client