Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/NzwxQK2-FEu14FerUH4lziZFM_0.roa
File: NzwxQK2-FEu14FerUH4lziZFM_0.roa (raw, json)
Hash identifier: zt7OzBR7akm3TX8Q8pRt3YTc5zn44/UPIycL7e1flq8=
Subject key identifier: 37:3C:31:40:AD:BE:14:4B:B5:E0:57:AB:50:7E:25:CE:26:45:33:FD
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 018297F3514AEBD022098510EB09B1F98B64
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/NzwxQK2-FEu14FerUH4lziZFM_0.roa
Signing time: Sat 13 Aug 2022 16:04:41 +0000
ROA not before: Sat 13 Aug 2022 16:04:41 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:182:3f1d:a803/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:182:7cb2:99d4/128 maxlen: 128
2001:67c:64:ffff:0:182:97f3:1bb3/128 maxlen: 128
2001:67c:64:ffff:0:182:383f:6b78/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:97:f3:51:4a:eb:d0:22:09:85:10:eb:09:b1:f9:8b:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Aug 13 16:04:41 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=373c3140adbe144bb5e057ab507e25ce264533fd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:df:53:20:01:4d:46:30:0a:01:7b:a3:82:ad:
bb:6f:21:10:ca:38:79:72:31:ec:8e:fa:2c:c1:70:
45:56:ab:59:29:fb:cd:6a:d5:81:42:4e:3f:72:4b:
26:b1:b2:9d:de:d2:a8:b7:21:49:4d:bc:ee:d7:04:
fc:4c:2f:e2:5a:00:63:47:d5:83:23:c9:6e:d3:6b:
80:39:af:2c:95:9d:31:89:dc:8a:9c:24:e2:30:74:
9f:da:c1:3e:9e:2d:a2:80:be:bf:17:39:b0:d6:bd:
0d:b1:52:29:25:fb:d2:6d:47:ee:46:13:8f:67:e3:
a3:13:98:81:04:8b:42:91:6a:6e:f3:3b:48:f3:d6:
f9:b5:1e:08:b6:d0:5b:45:a3:e4:7e:8e:b9:50:c6:
bc:7d:e0:da:4c:55:0a:5f:e4:54:2e:be:89:00:0f:
e8:39:37:50:4d:b7:06:0a:39:b1:da:a7:5d:08:4e:
7e:39:50:0c:f2:c7:a0:8c:7a:39:57:17:f2:4e:48:
0b:c4:70:a4:e3:f4:bb:1f:2d:db:cb:b2:91:42:e1:
27:1b:d0:79:cc:62:c0:d0:aa:a0:f6:08:27:b0:72:
0f:c1:fa:4d:61:2f:13:34:41:6b:7f:eb:2b:8b:dc:
56:2a:cb:4c:54:19:33:33:ca:cc:c7:50:a8:3c:58:
3d:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:3C:31:40:AD:BE:14:4B:B5:E0:57:AB:50:7E:25:CE:26:45:33:FD
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/NzwxQK2-FEu14FerUH4lziZFM_0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
a4:8f:a7:ab:07:b3:c3:25:e1:c2:30:4c:cd:81:c5:d8:00:39:
c5:95:aa:a0:eb:22:27:6d:f3:ce:37:83:3d:24:8f:14:9a:bb:
53:47:2d:e6:5e:25:7d:b4:7b:33:09:1a:dd:e7:05:76:59:3c:
41:26:a0:0b:0d:ef:8c:8a:81:f4:9c:28:2b:9a:3a:62:3b:b4:
22:a0:65:4d:f4:b5:da:cd:02:94:68:d5:fa:65:b3:f9:82:15:
77:25:b6:43:b1:1a:e7:a8:36:f7:ca:2d:58:d7:f0:21:c7:53:
08:e2:2e:41:2a:51:dd:fb:f0:de:64:f7:dc:5f:f4:32:88:3f:
ae:3f:d5:06:ae:ac:4f:c8:b3:f5:46:9d:30:d7:12:94:a6:42:
58:25:24:ff:07:08:83:b5:a5:59:6f:6f:2d:94:5a:87:15:23:
8b:60:45:a9:55:55:f7:37:4d:8d:76:5b:9e:9a:22:62:b5:6d:
fa:02:54:e3:e1:0a:20:e5:09:93:70:76:c4:39:b1:7a:00:1e:
9d:82:5e:e0:3d:03:ac:02:15:88:35:8f:4b:d2:43:cd:e8:f4:
cb:3f:d2:33:2c:60:7f:13:5e:a7:9a:9e:5e:52:4d:93:36:2c:
1b:59:94:e6:e6:a5:1c:42:ea:9e:de:a9:f3:ce:34:ab:5c:c6:
a8:bb:2a:42
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYKX81FK69AiCYUQ6wmx+YtkMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcyMDQ3YmUxNWIyNzU5MDJkY2Y2MTdkYzNkMGUxNmRjMWYz
MDgwMjIwHhcNMjIwODEzMTYwNDQxWhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzNzNjMzE0MGFkYmUxNDRiYjVlMDU3YWI1MDdlMjVjZTI2NDUzM2ZkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAut9TIAFNRjAKAXujgq27byEQyjh5
cjHsjvoswXBFVqtZKfvNatWBQk4/cksmsbKd3tKotyFJTbzu1wT8TC/iWgBjR9WD
I8lu02uAOa8slZ0xidyKnCTiMHSf2sE+ni2igL6/Fzmw1r0NsVIpJfvSbUfuRhOP
Z+OjE5iBBItCkWpu8ztI89b5tR4IttBbRaPkfo65UMa8feDaTFUKX+RULr6JAA/o
OTdQTbcGCjmx2qddCE5+OVAM8segjHo5VxfyTkgLxHCk4/S7Hy3by7KRQuEnG9B5
zGLA0Kqg9ggnsHIPwfpNYS8TNEFrf+sri9xWKstMVBkzM8rMx1CoPFg9WQIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFDc8MUCtvhRLteBXq1B+Jc4mRTP9MB8GA1UdIwQY
MBaAFHIEe+FbJ1kC3PYX3D0OFtwfMIAiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMt
MWFiZTNhYzEwYWE2LzEvTnp3eFFLMi1GRXUxNEZlclVINGx6aVpGTV8wLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMtMWFiZTNhYzEwYWE2
LzEvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBAKSPp6sHs8Ml4cIwTM2B
xdgAOcWVqqDrIidt8843gz0kjxSau1NHLeZeJX20ezMJGt3nBXZZPEEmoAsN74yK
gfScKCuaOmI7tCKgZU30tdrNApRo1fpls/mCFXcltkOxGueoNvfKLVjX8CHHUwji
LkEqUd378N5k99xf9DKIP64/1QaurE/Is/VGnTDXEpSmQlglJP8HCIO1pVlvby2U
WocVI4tgRalVVfc3TY12W56aImK1bfoCVOPhCiDlCZNwdsQ5sXoAHp2CXuA9A6wC
FYg1j0vSQ83o9Ms/0jMsYH8TXqeanl5STZM2LBtZlObmpRxC6p7eqfPONKtcxqi7
KkI=
-----END CERTIFICATE-----
Generated at Wed Apr 30 17:34:16 2025 by rpki-client