Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/Z3-RcFVfndWT1cMQR5MSuRGJksY.roa
File: Z3-RcFVfndWT1cMQR5MSuRGJksY.roa (raw, json)
Hash identifier: Wq+2RKDJhnr5UE16six7DcdxK430t7cgvrKhENgGxLk=
Subject key identifier: 67:7F:91:70:55:5F:9D:D5:93:D5:C3:10:47:93:12:B9:11:89:92:C6
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 71B33680
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/Z3-RcFVfndWT1cMQR5MSuRGJksY.roa
Signing time: Fri 11 Mar 2022 19:10:38 +0000
ROA not before: Fri 11 Mar 2022 19:10:38 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:17f:1bf4:40b5/128 maxlen: 128
2001:67c:64:ffff:0:17f:20ac:a2bd/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1907570304 (0x71b33680)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Mar 11 19:10:38 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=677f9170555f9dd593d5c310479312b9118992c6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:30:7a:a7:1b:0f:c4:53:cb:0c:36:00:5b:25:
4e:16:71:21:02:73:2b:71:24:92:dd:9b:12:d0:43:
77:b3:4a:4b:ff:0e:8c:57:bf:4f:32:2f:b6:15:0e:
a5:cf:f8:e9:51:80:fb:7c:ea:b4:2b:05:5f:3f:1e:
ac:df:2b:a0:7e:e9:75:03:c1:ee:2c:79:f1:b3:70:
63:33:be:00:d5:ee:1b:20:1e:98:ed:7d:d6:94:d0:
e7:85:04:a5:42:05:e3:c3:d5:05:b9:96:e7:7c:4c:
95:d2:81:43:0a:13:3e:be:36:c8:ff:59:5a:44:8c:
7e:4f:3a:fd:f6:e8:7d:47:2b:c1:83:41:a2:1c:22:
e2:fd:01:84:de:f6:8f:17:62:62:21:8e:89:ae:5e:
18:26:4f:03:8c:7b:31:e7:47:72:05:7d:4a:06:93:
45:de:58:19:52:60:a4:c7:8c:65:4c:6c:e4:26:28:
aa:0d:d6:6d:e4:b3:28:8b:8f:5d:c5:74:8f:cf:cb:
1e:8c:41:c1:5f:d7:bb:16:ea:a3:e2:aa:94:6b:94:
75:35:1c:d6:25:65:25:9b:38:f7:e8:fe:77:c5:83:
5c:0a:b2:59:42:2c:39:46:54:5a:45:58:e1:9f:e8:
20:c9:81:be:f5:2a:fd:dd:0a:f2:c2:88:77:ab:24:
a5:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:7F:91:70:55:5F:9D:D5:93:D5:C3:10:47:93:12:B9:11:89:92:C6
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/Z3-RcFVfndWT1cMQR5MSuRGJksY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
5f:d5:d5:79:eb:2c:e9:06:66:ab:67:59:99:59:93:33:75:4b:
0b:8d:69:06:bc:3f:54:c3:c0:14:1d:16:3c:79:40:c0:70:60:
2e:47:81:b3:22:91:98:ed:f2:aa:9c:92:e6:f0:1f:eb:dd:40:
56:05:39:8e:7c:09:a4:f4:36:a4:8e:48:70:d2:b4:a2:94:13:
1a:92:ac:50:23:e7:b7:41:e4:02:6d:7d:95:11:77:92:0a:39:
1c:c2:0a:58:e0:4a:bc:28:c4:3b:08:ca:d1:27:27:16:6b:d0:
92:49:0b:dc:c2:f9:72:6c:b1:85:6c:c0:04:f6:11:bc:ff:b7:
a3:a4:70:97:3a:77:60:18:d9:21:6c:e1:6d:89:6b:09:bc:7c:
5d:f6:a6:77:80:75:9e:9b:24:20:d9:11:6f:18:1b:15:e1:dd:
78:62:07:d0:13:3c:cc:25:33:4a:86:5b:94:1b:69:e5:0a:27:
2a:86:41:32:7b:4c:c4:27:78:21:c0:0f:b0:04:29:07:0e:ec:
c1:65:26:90:ab:f6:07:c1:00:17:50:ea:f6:9f:6f:0f:2d:f6:
58:f2:2b:89:aa:40:6c:ff:cf:0e:1e:2e:31:17:17:93:11:57:
d1:75:06:62:93:c0:be:2a:c1:cc:19:2d:38:69:46:9f:db:14:
58:e2:16:04
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgIEcbM2gDANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg3
MjA0N2JlMTViMjc1OTAyZGNmNjE3ZGMzZDBlMTZkYzFmMzA4MDIyMB4XDTIyMDMx
MTE5MTAzOFoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoNjc3ZjkxNzA1NTVm
OWRkNTkzZDVjMzEwNDc5MzEyYjkxMTg5OTJjNjCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAM4weqcbD8RTyww2AFslThZxIQJzK3Ekkt2bEtBDd7NKS/8O
jFe/TzIvthUOpc/46VGA+3zqtCsFXz8erN8roH7pdQPB7ix58bNwYzO+ANXuGyAe
mO191pTQ54UEpUIF48PVBbmW53xMldKBQwoTPr42yP9ZWkSMfk86/fbofUcrwYNB
ohwi4v0BhN72jxdiYiGOia5eGCZPA4x7MedHcgV9SgaTRd5YGVJgpMeMZUxs5CYo
qg3WbeSzKIuPXcV0j8/LHoxBwV/Xuxbqo+KqlGuUdTUc1iVlJZs49+j+d8WDXAqy
WUIsOUZUWkVY4Z/oIMmBvvUq/d0K8sKId6skpdUCAwEAAaOCAhowggIWMB0GA1Ud
DgQWBBRnf5FwVV+d1ZPVwxBHkxK5EYmSxjAfBgNVHSMEGDAWgBRyBHvhWydZAtz2
F9w9DhbcHzCAIjAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L2NnUjc0VnNuV1FMYzloZmNQUTRXM0I4d2dDSS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvNWUvNzk4NDQ3LTIxZjQtNDVhYi05OWRjLTFhYmUzYWMxMGFhNi8x
L1ozLVJjRlZmbmRXVDFjTVFSNU1TdVJHSmtzWS5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNWUv
Nzk4NDQ3LTIxZjQtNDVhYi05OWRjLTFhYmUzYWMxMGFhNi8xL2NnUjc0VnNuV1FM
YzloZmNQUTRXM0I4d2dDSS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAw
BggrBgEFBQcBBwEB/wQhMB8wDAQCAAEwBgMEA8EAGDAPBAIAAjAJAwcAIAEGfABk
MA0GCSqGSIb3DQEBCwUAA4IBAQBf1dV56yzpBmarZ1mZWZMzdUsLjWkGvD9Uw8AU
HRY8eUDAcGAuR4GzIpGY7fKqnJLm8B/r3UBWBTmOfAmk9Dakjkhw0rSilBMakqxQ
I+e3QeQCbX2VEXeSCjkcwgpY4Eq8KMQ7CMrRJycWa9CSSQvcwvlybLGFbMAE9hG8
/7ejpHCXOndgGNkhbOFtiWsJvHxd9qZ3gHWemyQg2RFvGBsV4d14YgfQEzzMJTNK
hluUG2nlCicqhkEye0zEJ3ghwA+wBCkHDuzBZSaQq/YHwQAXUOr2n28PLfZY8iuJ
qkBs/88OHi4xFxeTEVfRdQZik8C+KsHMGS04aUaf2xRY4hYE
-----END CERTIFICATE-----
Generated at Thu May 1 06:51:14 2025 by rpki-client