Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/ZC9in2Oqfky6YE1uyydDVlY9Jis.roa
File: ZC9in2Oqfky6YE1uyydDVlY9Jis.roa (raw, json)
Hash identifier: olnSbw23aN2zd66uMI6F/I3qEJHQVz9bQHM3kIxPCCU=
Subject key identifier: 64:2F:62:9F:63:AA:7E:4C:BA:60:4D:6E:CB:27:43:56:56:3D:26:2B
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0186E23237F2BF6288E1739E0BD5EA67CBA7
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/ZC9in2Oqfky6YE1uyydDVlY9Jis.roa
Signing time: Tue 14 Mar 2023 22:16:27 +0000
ROA not before: Tue 14 Mar 2023 22:16:27 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:e2:32:37:f2:bf:62:88:e1:73:9e:0b:d5:ea:67:cb:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Mar 14 22:16:27 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=642f629f63aa7e4cba604d6ecb274356563d262b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:90:a7:7e:ca:e1:2b:f3:97:28:e7:30:50:f6:
ea:d8:75:b1:d4:f2:ee:1c:c0:a7:d6:28:2b:64:dd:
74:e2:e1:54:22:ad:2f:66:19:54:8d:62:06:5a:06:
c6:0f:b3:38:ee:8d:34:e0:17:d5:a2:81:4a:ba:fb:
00:cf:d7:f2:84:59:a2:7c:1d:b3:27:c5:d7:3d:5f:
52:8b:fe:54:21:69:c3:df:ed:e5:f5:42:87:b3:1f:
7a:12:e9:b4:40:03:d0:87:eb:c1:43:d8:28:69:c2:
84:bd:7c:fe:1e:d7:e5:5f:01:7c:28:7f:e9:0e:ec:
67:4c:18:a4:96:92:94:4c:4a:de:b4:02:d8:c0:29:
af:2d:3c:de:46:82:43:13:05:78:45:30:d7:7b:14:
ce:04:f8:db:35:88:3e:de:c4:da:48:ef:8c:41:ba:
82:65:6f:05:1b:b2:99:bb:63:a2:24:d1:3f:07:5b:
ac:5c:c3:d3:86:d7:46:aa:fc:8d:cb:40:49:19:3f:
27:60:c8:9d:37:7e:86:d8:9e:92:5b:bb:c6:1d:b8:
3e:d5:8b:08:3a:39:f8:86:7d:f7:ab:87:61:76:0d:
1e:82:3e:7a:9b:fb:94:8f:53:c3:d7:65:a5:32:c6:
a4:4f:ef:c3:c0:39:be:af:cf:ce:c0:aa:39:9a:41:
b3:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:2F:62:9F:63:AA:7E:4C:BA:60:4D:6E:CB:27:43:56:56:3D:26:2B
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/ZC9in2Oqfky6YE1uyydDVlY9Jis.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
b0:48:c2:1d:0b:de:ef:8a:67:32:c0:38:4c:46:d8:de:60:89:
5c:26:28:01:5f:6c:aa:1c:09:9b:1f:a9:2f:cb:c3:ef:b3:80:
40:ea:58:ff:18:3e:32:17:5e:c3:74:30:f3:d4:1e:6d:bf:7e:
f0:a2:6a:cb:72:56:6e:21:2b:99:e7:34:bb:23:7b:e2:46:37:
1a:66:e5:08:1c:fe:5f:d0:43:7e:bd:40:0f:1a:bf:f6:10:26:
c6:80:7d:bf:2f:aa:7c:2b:eb:63:75:c4:4b:b3:47:f5:ba:d5:
fb:20:49:6e:89:c5:20:e1:2c:4c:31:34:42:b8:d8:69:c0:e4:
ed:cb:10:7c:b6:d0:10:59:64:73:22:e2:3a:a9:fd:90:40:03:
09:92:f3:78:3d:af:4a:b2:87:4e:fa:7c:96:06:df:3a:e8:11:
31:c2:cf:de:14:4a:cc:c8:29:68:61:bd:bf:39:4a:a9:f2:e0:
6c:a7:aa:93:55:64:4b:8e:14:ef:52:f9:50:af:91:0f:cc:b9:
92:cd:b9:5a:6d:df:04:db:da:53:13:cd:db:5b:fd:b8:e9:30:
1c:8a:1d:94:14:ac:35:12:5d:8e:fe:b0:e0:73:7f:4f:b4:fd:
c8:eb:99:02:11:6f:07:ca:90:23:36:70:8b:a1:75:32:f8:b1:
f9:3c:40:04
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYbiMjfyv2KI4XOeC9XqZ8unMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcyMDQ3YmUxNWIyNzU5MDJkY2Y2MTdkYzNkMGUxNmRjMWYz
MDgwMjIwHhcNMjMwMzE0MjIxNjI3WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2NDJmNjI5ZjYzYWE3ZTRjYmE2MDRkNmVjYjI3NDM1NjU2M2QyNjJiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqpCnfsrhK/OXKOcwUPbq2HWx1PLu
HMCn1igrZN104uFUIq0vZhlUjWIGWgbGD7M47o004BfVooFKuvsAz9fyhFmifB2z
J8XXPV9Si/5UIWnD3+3l9UKHsx96Eum0QAPQh+vBQ9goacKEvXz+HtflXwF8KH/p
DuxnTBiklpKUTEretALYwCmvLTzeRoJDEwV4RTDXexTOBPjbNYg+3sTaSO+MQbqC
ZW8FG7KZu2OiJNE/B1usXMPThtdGqvyNy0BJGT8nYMidN36G2J6SW7vGHbg+1YsI
Ojn4hn33q4dhdg0egj56m/uUj1PD12WlMsakT+/DwDm+r8/OwKo5mkGzQQIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFGQvYp9jqn5MumBNbssnQ1ZWPSYrMB8GA1UdIwQY
MBaAFHIEe+FbJ1kC3PYX3D0OFtwfMIAiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMt
MWFiZTNhYzEwYWE2LzEvWkM5aW4yT3Fma3k2WUUxdXl5ZERWbFk5SmlzLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMtMWFiZTNhYzEwYWE2
LzEvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBALBIwh0L3u+KZzLAOExG
2N5giVwmKAFfbKocCZsfqS/Lw++zgEDqWP8YPjIXXsN0MPPUHm2/fvCiastyVm4h
K5nnNLsje+JGNxpm5Qgc/l/QQ369QA8av/YQJsaAfb8vqnwr62N1xEuzR/W61fsg
SW6JxSDhLEwxNEK42GnA5O3LEHy20BBZZHMi4jqp/ZBAAwmS83g9r0qyh076fJYG
3zroETHCz94USszIKWhhvb85Sqny4GynqpNVZEuOFO9S+VCvkQ/MuZLNuVpt3wTb
2lMTzdtb/bjpMByKHZQUrDUSXY7+sOBzf0+0/cjrmQIRbwfKkCM2cIuhdTL4sfk8
QAQ=
-----END CERTIFICATE-----
Generated at Sat May 3 22:30:51 2025 by rpki-client