Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/CrzUXiAe4isaB24apuL2YsZBpEY.roa
File: CrzUXiAe4isaB24apuL2YsZBpEY.roa (raw, json)
Hash identifier: HOMfwuOFSvzokh9AV1Wym9PtfbNIxLKX2dOGc0cRnqA=
Subject key identifier: 0A:BC:D4:5E:20:1E:E2:2B:1A:07:6E:1A:A6:E2:F6:62:C6:41:A4:46
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 01868B3FBB8DCE85551391E5C5BDFECFF987
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/CrzUXiAe4isaB24apuL2YsZBpEY.roa
Signing time: Sun 26 Feb 2023 01:04:15 +0000
ROA not before: Sun 26 Feb 2023 01:04:15 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:8b3f:99ea/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:8b:3f:bb:8d:ce:85:55:13:91:e5:c5:bd:fe:cf:f9:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Feb 26 01:04:15 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=0abcd45e201ee22b1a076e1aa6e2f662c641a446
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:84:dd:ec:9b:b9:79:a7:3b:cf:35:01:40:59:
17:e0:75:1f:be:d6:3a:18:63:8e:78:44:14:92:12:
c9:81:16:da:55:a9:2f:e5:c9:11:eb:34:19:56:48:
28:f6:fd:0c:d9:56:e9:bf:68:70:16:06:8b:91:e4:
fd:a6:93:73:bb:bb:94:5c:ff:83:fe:69:4b:d4:18:
ac:6d:de:c4:2a:a5:7c:da:dc:dd:65:36:7c:e2:c2:
d8:65:49:60:a9:1c:35:eb:88:f4:39:a3:0b:72:bd:
00:70:ee:f6:af:60:a8:b8:af:1f:63:cc:83:b0:86:
be:ca:33:32:5d:e4:03:74:60:fb:54:cb:13:a1:95:
e2:5b:c3:56:f2:cf:5c:25:19:84:32:7d:44:5b:c1:
77:00:61:26:e2:57:2b:59:ee:0e:43:05:6e:68:77:
6d:cd:40:0b:27:8b:98:6b:14:a9:39:ea:b8:bc:5b:
bd:0a:ef:39:92:31:75:97:75:50:aa:28:cd:39:68:
aa:d4:71:70:86:fe:70:42:de:46:a1:d5:4f:e9:9c:
66:f9:a0:b3:d7:bd:0d:61:69:68:f8:34:95:54:49:
32:41:21:08:89:34:00:4f:26:a1:8b:9a:af:96:79:
46:f9:51:af:65:e2:33:10:17:96:ef:8c:07:cd:8b:
98:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:BC:D4:5E:20:1E:E2:2B:1A:07:6E:1A:A6:E2:F6:62:C6:41:A4:46
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/CrzUXiAe4isaB24apuL2YsZBpEY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
13:7c:a3:03:3f:c1:53:c5:14:1e:d4:4e:57:91:7b:43:a8:43:
53:57:90:3d:1a:5f:e5:92:b6:59:bc:ea:94:2b:dd:5f:29:5d:
23:d1:3e:b3:1d:2b:7f:dc:8e:3e:f8:20:7a:b8:78:9e:6f:d4:
46:99:1a:9f:8b:5e:f7:6b:f2:ab:64:85:39:8a:8b:95:7a:68:
1a:13:20:d3:a8:6c:bf:16:6e:d6:07:77:99:26:89:f5:5a:50:
d8:c3:40:06:8e:f7:fa:c2:94:7f:ed:cb:04:fd:8d:1a:f6:2c:
69:ae:53:85:42:14:ce:43:a2:d8:43:69:ec:98:6c:38:6d:0c:
82:3f:2d:f0:00:06:71:d6:b1:5a:cb:4f:75:4f:a7:41:58:3c:
b3:4e:58:c9:e3:b9:85:55:c6:19:42:2c:cc:41:bc:b9:a7:00:
6c:cf:44:93:6d:f8:c6:3c:15:df:17:1d:54:bc:55:4f:31:b5:
85:87:0c:a1:78:82:56:61:90:69:f2:ea:b2:70:f9:d9:1a:78:
f3:a4:04:03:5b:c8:5d:f8:80:85:61:a2:54:82:05:2e:f0:22:
0a:7c:97:bf:c4:42:d4:b9:78:a8:3c:a8:91:3b:78:56:4b:28:
5b:2b:c7:52:f9:d5:dd:af:05:5c:ad:ed:8e:52:44:2a:33:f0:
fa:b4:28:03
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYaLP7uNzoVVE5Hlxb3+z/mHMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcyMDQ3YmUxNWIyNzU5MDJkY2Y2MTdkYzNkMGUxNmRjMWYz
MDgwMjIwHhcNMjMwMjI2MDEwNDE1WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwYWJjZDQ1ZTIwMWVlMjJiMWEwNzZlMWFhNmUyZjY2MmM2NDFhNDQ2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm4Td7Ju5eac7zzUBQFkX4HUfvtY6
GGOOeEQUkhLJgRbaVakv5ckR6zQZVkgo9v0M2Vbpv2hwFgaLkeT9ppNzu7uUXP+D
/mlL1Bisbd7EKqV82tzdZTZ84sLYZUlgqRw164j0OaMLcr0AcO72r2CouK8fY8yD
sIa+yjMyXeQDdGD7VMsToZXiW8NW8s9cJRmEMn1EW8F3AGEm4lcrWe4OQwVuaHdt
zUALJ4uYaxSpOeq4vFu9Cu85kjF1l3VQqijNOWiq1HFwhv5wQt5GodVP6Zxm+aCz
170NYWlo+DSVVEkyQSEIiTQATyahi5qvlnlG+VGvZeIzEBeW74wHzYuYbwIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFAq81F4gHuIrGgduGqbi9mLGQaRGMB8GA1UdIwQY
MBaAFHIEe+FbJ1kC3PYX3D0OFtwfMIAiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMt
MWFiZTNhYzEwYWE2LzEvQ3J6VVhpQWU0aXNhQjI0YXB1TDJZc1pCcEVZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMtMWFiZTNhYzEwYWE2
LzEvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBABN8owM/wVPFFB7UTleR
e0OoQ1NXkD0aX+WStlm86pQr3V8pXSPRPrMdK3/cjj74IHq4eJ5v1EaZGp+LXvdr
8qtkhTmKi5V6aBoTINOobL8WbtYHd5kmifVaUNjDQAaO9/rClH/tywT9jRr2LGmu
U4VCFM5DothDaeyYbDhtDII/LfAABnHWsVrLT3VPp0FYPLNOWMnjuYVVxhlCLMxB
vLmnAGzPRJNt+MY8Fd8XHVS8VU8xtYWHDKF4glZhkGny6rJw+dkaePOkBANbyF34
gIVholSCBS7wIgp8l7/EQtS5eKg8qJE7eFZLKFsrx1L51d2vBVyt7Y5SRCoz8Pq0
KAM=
-----END CERTIFICATE-----
Generated at Fri May 2 03:31:35 2025 by rpki-client