Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/ZAAZ6WtjOP5DICmLjXKMt5ER690.roa
File: ZAAZ6WtjOP5DICmLjXKMt5ER690.roa (raw, json)
Hash identifier: frwBmoi8AXrx84s/EWoJobpo5papm9v8rVxYs6QlOnc=
Subject key identifier: 64:00:19:E9:6B:63:38:FE:43:20:29:8B:8D:72:8C:B7:91:11:EB:DD
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0185556B6D73293E892077927F8547AFF0C6
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/ZAAZ6WtjOP5DICmLjXKMt5ER690.roa
Signing time: Tue 27 Dec 2022 21:09:41 +0000
ROA not before: Tue 27 Dec 2022 21:09:41 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:185:3dcc:d8f/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:55:6b:6d:73:29:3e:89:20:77:92:7f:85:47:af:f0:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Dec 27 21:09:41 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=640019e96b6338fe4320298b8d728cb79111ebdd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:59:46:a2:20:50:3d:4d:2f:e0:47:a1:95:29:
39:a2:e6:4c:e5:a0:e8:99:f0:81:1d:68:6f:62:a9:
46:e0:42:94:0c:e3:9d:67:3c:79:15:07:cb:eb:f4:
b7:59:1c:77:b6:56:c6:dd:a4:45:49:e6:14:b0:6f:
22:78:49:99:13:c1:b4:12:21:b4:11:0c:ff:8d:c7:
6e:a8:45:f8:da:05:86:91:22:ea:6e:9f:dd:17:a0:
c4:79:c8:75:17:26:ae:eb:9a:f1:bb:20:bd:94:80:
49:50:ef:10:4f:56:b3:4a:9d:51:3d:8d:2c:af:60:
d3:d8:48:3d:9b:69:ad:d9:27:21:7e:92:63:b2:e4:
a9:9b:c8:19:e6:ff:10:8d:dd:6f:66:72:c7:b3:e7:
d6:36:67:f2:af:db:ad:ea:29:12:ff:5a:d8:43:f7:
fd:30:a9:15:c9:65:2c:46:49:5c:b3:d0:e2:58:04:
e2:b1:64:32:b2:9e:93:7f:41:74:ae:6d:06:d0:18:
9f:c7:ce:42:f6:e1:d3:0b:97:ec:c2:c1:fc:95:57:
cf:54:8b:64:8e:84:1b:cb:7f:6c:5f:0b:c7:33:94:
10:22:33:83:64:1e:30:97:d8:21:cd:e3:17:63:31:
91:22:ed:25:83:23:73:58:77:16:9e:cf:df:6d:fa:
ef:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:00:19:E9:6B:63:38:FE:43:20:29:8B:8D:72:8C:B7:91:11:EB:DD
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/ZAAZ6WtjOP5DICmLjXKMt5ER690.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
ac:1d:69:15:f4:69:56:ca:32:cc:65:c9:83:99:da:a8:d1:dd:
7b:db:88:4a:45:a6:4e:b0:c4:3d:3c:09:27:e7:63:99:2d:ae:
a8:be:37:85:6b:e7:ef:4c:6d:72:da:71:ea:90:a8:d5:44:d9:
cf:75:7c:58:6c:e7:a1:c3:ec:f6:c3:41:7a:e8:a5:b4:2b:ab:
2a:92:3e:5b:65:20:a1:f4:01:7f:a0:0d:c3:40:f8:b9:fb:21:
81:43:ff:43:a9:f5:4b:6e:a0:84:db:03:07:53:55:fe:a6:71:
df:f7:6b:a2:05:1a:c4:a0:fe:0f:f0:3d:06:21:fc:18:16:f1:
40:98:1e:a8:3e:e9:90:7b:0f:1a:d0:a1:6a:db:cf:a0:f4:a0:
ae:9a:63:f5:bd:e9:33:04:c1:56:45:49:79:b0:ae:b7:83:11:
92:87:05:47:47:59:43:2a:a8:c7:0e:b0:15:22:81:0b:28:d5:
27:5f:2e:bc:58:69:7a:3e:0a:4e:aa:9d:a7:05:f8:60:75:e6:
f2:73:ed:da:d1:bd:f3:f4:5d:e2:ab:3d:db:3d:b3:ed:e3:10:
40:ab:4c:48:a8:21:e1:1d:c1:e4:dc:b3:53:14:8f:4a:18:af:
fe:d4:2b:cf:da:49:f8:e5:96:35:fc:1f:25:ba:56:27:54:69:
28:4c:46:8f
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYVVa21zKT6JIHeSf4VHr/DGMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcyMDQ3YmUxNWIyNzU5MDJkY2Y2MTdkYzNkMGUxNmRjMWYz
MDgwMjIwHhcNMjIxMjI3MjEwOTQxWhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2NDAwMTllOTZiNjMzOGZlNDMyMDI5OGI4ZDcyOGNiNzkxMTFlYmRkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnVlGoiBQPU0v4EehlSk5ouZM5aDo
mfCBHWhvYqlG4EKUDOOdZzx5FQfL6/S3WRx3tlbG3aRFSeYUsG8ieEmZE8G0EiG0
EQz/jcduqEX42gWGkSLqbp/dF6DEech1Fyau65rxuyC9lIBJUO8QT1azSp1RPY0s
r2DT2Eg9m2mt2SchfpJjsuSpm8gZ5v8Qjd1vZnLHs+fWNmfyr9ut6ikS/1rYQ/f9
MKkVyWUsRklcs9DiWATisWQysp6Tf0F0rm0G0Bifx85C9uHTC5fswsH8lVfPVItk
joQby39sXwvHM5QQIjODZB4wl9ghzeMXYzGRIu0lgyNzWHcWns/fbfrvnwIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFGQAGelrYzj+QyApi41yjLeREevdMB8GA1UdIwQY
MBaAFHIEe+FbJ1kC3PYX3D0OFtwfMIAiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMt
MWFiZTNhYzEwYWE2LzEvWkFBWjZXdGpPUDVESUNtTGpYS010NUVSNjkwLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMtMWFiZTNhYzEwYWE2
LzEvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBAKwdaRX0aVbKMsxlyYOZ
2qjR3XvbiEpFpk6wxD08CSfnY5ktrqi+N4Vr5+9MbXLaceqQqNVE2c91fFhs56HD
7PbDQXropbQrqyqSPltlIKH0AX+gDcNA+Ln7IYFD/0Op9UtuoITbAwdTVf6mcd/3
a6IFGsSg/g/wPQYh/BgW8UCYHqg+6ZB7DxrQoWrbz6D0oK6aY/W96TMEwVZFSXmw
rreDEZKHBUdHWUMqqMcOsBUigQso1SdfLrxYaXo+Ck6qnacF+GB15vJz7drRvfP0
XeKrPds9s+3jEECrTEioIeEdweTcs1MUj0oYr/7UK8/aSfjlljX8HyW6VidUaShM
Ro8=
-----END CERTIFICATE-----
Generated at Wed Apr 30 20:09:00 2025 by rpki-client