Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/NZ9y9KVB2mAB3Jc8f7EEecCRRVQ.roa
File: NZ9y9KVB2mAB3Jc8f7EEecCRRVQ.roa (raw, json)
Hash identifier: TC5b5pyKSn04+PUWi0X3CV0PwtjM+YN3Qs7x6wwz6JM=
Subject key identifier: 35:9F:72:F4:A5:41:DA:60:01:DC:97:3C:7F:B1:04:79:C0:91:45:54
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0188B3284FB328EE75CF91231C0194D13533
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/NZ9y9KVB2mAB3Jc8f7EEecCRRVQ.roa
Signing time: Tue 13 Jun 2023 05:09:03 +0000
ROA not before: Tue 13 Jun 2023 05:09:03 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:188:5fe2:b396/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:187:4695:a68a/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:188:7858:a003/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64:ffff:0:187:fa9a:b088/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:187:b2b8:a7dd/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:b3:28:4f:b3:28:ee:75:cf:91:23:1c:01:94:d1:35:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Jun 13 05:09:03 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=359f72f4a541da6001dc973c7fb10479c0914554
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:75:27:ad:d6:a4:6e:1d:8a:d1:ca:19:2b:0d:
d5:ce:bb:57:c7:3c:9e:b2:1f:37:9f:9d:8c:8d:06:
f0:92:b5:c6:8c:1d:66:c9:ee:6a:b0:d8:4e:6b:a8:
6f:5a:60:fc:76:24:24:c6:9e:8d:24:50:a1:5d:67:
48:59:ff:b6:47:2e:df:7b:37:2d:89:e2:a0:be:cd:
98:28:26:4e:ad:9e:00:4f:bd:83:12:ec:a1:80:82:
ad:9c:5d:ef:ee:c5:35:62:03:54:68:61:d5:61:fa:
0f:b8:0d:41:21:84:1a:09:9a:93:b1:27:fd:de:12:
0a:90:d8:4d:35:2c:ba:ba:a9:79:07:86:9a:2d:cd:
f3:a7:cc:52:db:4d:2d:1b:ce:b3:bb:3a:06:7b:cb:
95:d6:85:e2:ee:ce:99:bb:0b:2c:88:4f:06:b7:9e:
f4:cf:c2:af:ba:49:40:4b:f7:e1:4a:bd:7e:68:5f:
88:8d:c5:cf:be:81:f8:f8:79:ec:e5:dd:88:d3:a2:
f7:e7:17:bb:c0:63:45:ad:60:59:6a:d7:9f:7c:4a:
6a:fb:92:38:68:f7:79:03:73:65:57:89:a7:fa:af:
e8:8e:98:6c:cf:00:ec:9b:10:6d:86:e9:62:22:d1:
b7:81:15:20:3b:05:ba:95:19:6d:eb:7c:4d:fb:4a:
0d:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:9F:72:F4:A5:41:DA:60:01:DC:97:3C:7F:B1:04:79:C0:91:45:54
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/NZ9y9KVB2mAB3Jc8f7EEecCRRVQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
79:c6:06:b6:cc:2e:51:89:72:46:40:26:c6:56:36:cb:6f:c4:
d6:6e:d1:ca:27:54:92:de:59:05:99:33:43:33:39:25:de:56:
65:0e:11:70:60:0f:8b:b2:5e:4d:a0:8b:53:d9:5b:64:86:86:
f1:18:1c:6d:f6:b8:7e:23:bb:82:a0:4b:01:25:f9:6b:0a:7c:
90:48:d9:40:17:73:67:d2:07:ff:db:6e:28:2c:f8:29:cc:65:
34:62:40:47:72:2a:1a:f3:5c:d9:36:f7:ed:08:5b:be:98:69:
06:ed:f3:d0:22:d3:f9:9f:f2:de:3b:ae:08:81:be:52:09:7a:
47:c7:dc:bb:2a:a9:1c:4d:01:10:6b:2c:40:0e:87:68:de:a2:
6a:90:28:d8:c9:53:53:69:be:52:38:2f:6f:0f:f7:a4:9c:49:
4d:83:c7:69:b7:29:b6:ff:ab:e6:67:54:9e:e5:3e:0b:20:6a:
51:69:e4:66:92:c5:e9:a1:15:ee:09:cd:f2:18:8e:dd:bb:7c:
cb:2e:0d:37:9a:9f:03:24:9d:51:21:4e:1a:94:98:20:65:03:
62:8d:51:44:5f:e5:07:c7:d4:64:4f:16:c2:63:af:db:bf:b2:
79:5e:4f:88:45:21:33:25:95:31:1b:8c:8a:a7:65:11:1a:0c:
ea:64:ef:bb
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYizKE+zKO51z5EjHAGU0TUzMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcyMDQ3YmUxNWIyNzU5MDJkY2Y2MTdkYzNkMGUxNmRjMWYz
MDgwMjIwHhcNMjMwNjEzMDUwOTAzWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzNTlmNzJmNGE1NDFkYTYwMDFkYzk3M2M3ZmIxMDQ3OWMwOTE0NTU0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtHUnrdakbh2K0coZKw3VzrtXxzye
sh83n52MjQbwkrXGjB1mye5qsNhOa6hvWmD8diQkxp6NJFChXWdIWf+2Ry7fezct
ieKgvs2YKCZOrZ4AT72DEuyhgIKtnF3v7sU1YgNUaGHVYfoPuA1BIYQaCZqTsSf9
3hIKkNhNNSy6uql5B4aaLc3zp8xS200tG86zuzoGe8uV1oXi7s6ZuwssiE8Gt570
z8KvuklAS/fhSr1+aF+IjcXPvoH4+Hns5d2I06L35xe7wGNFrWBZateffEpq+5I4
aPd5A3NlV4mn+q/ojphszwDsmxBthuliItG3gRUgOwW6lRlt63xN+0oNRQIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFDWfcvSlQdpgAdyXPH+xBHnAkUVUMB8GA1UdIwQY
MBaAFHIEe+FbJ1kC3PYX3D0OFtwfMIAiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMt
MWFiZTNhYzEwYWE2LzEvTlo5eTlLVkIybUFCM0pjOGY3RUVlY0NSUlZRLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMtMWFiZTNhYzEwYWE2
LzEvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBAHnGBrbMLlGJckZAJsZW
NstvxNZu0conVJLeWQWZM0MzOSXeVmUOEXBgD4uyXk2gi1PZW2SGhvEYHG32uH4j
u4KgSwEl+WsKfJBI2UAXc2fSB//bbigs+CnMZTRiQEdyKhrzXNk29+0IW76YaQbt
89Ai0/mf8t47rgiBvlIJekfH3LsqqRxNARBrLEAOh2jeomqQKNjJU1NpvlI4L28P
96ScSU2Dx2m3Kbb/q+ZnVJ7lPgsgalFp5GaSxemhFe4JzfIYjt27fMsuDTeanwMk
nVEhThqUmCBlA2KNUURf5QfH1GRPFsJjr9u/snleT4hFITMllTEbjIqnZREaDOpk
77s=
-----END CERTIFICATE-----
Generated at Wed Apr 30 18:45:36 2025 by rpki-client