Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/ZNPfTrfbOv-FO2JuiHFhQLtbFiQ.roa
File: ZNPfTrfbOv-FO2JuiHFhQLtbFiQ.roa (raw, json)
Hash identifier: VyfHIigGCLbapL2SKW6vNGd6lo1lMDNRB6We7ae3jGU=
Subject key identifier: 64:D3:DF:4E:B7:DB:3A:FF:85:3B:62:6E:88:71:61:40:BB:5B:16:24
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 01874A7A7EF77515EE0A1194F58C2BEC24D5
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/ZNPfTrfbOv-FO2JuiHFhQLtbFiQ.roa
Signing time: Tue 04 Apr 2023 04:15:54 +0000
ROA not before: Tue 04 Apr 2023 04:15:54 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:187:4695:a68a/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:4a:7a:7e:f7:75:15:ee:0a:11:94:f5:8c:2b:ec:24:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Apr 4 04:15:54 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=64d3df4eb7db3aff853b626e88716140bb5b1624
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:fd:b0:28:7c:b4:36:f7:dc:4b:23:ea:3e:b2:
d6:21:77:8e:4c:86:b7:1c:c3:e9:52:8e:02:fa:3b:
f6:7a:d4:ce:f9:88:1f:bd:bd:b9:8e:79:d7:99:31:
0d:f6:72:2c:da:0e:5f:24:21:47:85:9f:a9:ce:cb:
29:9e:9f:eb:cd:8b:c4:15:66:5e:2e:98:23:d8:14:
99:66:03:7f:65:02:4a:24:44:ba:c1:d8:cd:26:a2:
e5:af:f0:b6:a4:c2:a3:cd:3c:51:36:3f:ed:43:a0:
aa:03:be:1f:5f:c9:77:a5:00:30:e6:c8:6d:6b:aa:
cd:22:70:67:53:d5:fe:43:31:bd:99:c7:76:8e:29:
e1:1f:b9:fd:53:68:93:77:71:3b:8b:69:b7:39:da:
b1:9b:22:32:83:be:83:3b:87:f7:95:6f:25:88:32:
12:91:b6:5c:b5:15:ea:fd:d8:a3:71:4f:38:5e:29:
fd:1a:c5:96:f0:36:a2:53:22:a0:05:74:0a:c8:81:
44:a8:2e:91:97:66:c8:ad:d7:fd:43:6c:17:aa:e7:
4b:1e:d2:15:90:00:61:23:02:a4:55:19:64:42:8a:
b8:4a:b5:02:3e:9b:b1:60:bd:c1:15:c2:70:9c:44:
b6:e3:c9:61:30:4c:32:00:18:8c:05:cd:55:6b:ce:
73:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:D3:DF:4E:B7:DB:3A:FF:85:3B:62:6E:88:71:61:40:BB:5B:16:24
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/ZNPfTrfbOv-FO2JuiHFhQLtbFiQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
07:9d:59:2c:9b:f1:45:5a:fd:ce:e6:30:8f:74:9d:a9:28:0d:
dd:fc:b4:94:9f:ac:e8:55:57:6d:7b:56:04:2c:55:6d:4d:7a:
df:de:d5:f5:9e:31:50:a9:01:60:90:28:6c:a1:85:0d:dd:95:
2a:aa:b9:a4:90:b5:4d:91:77:5a:23:e4:44:65:68:c8:86:12:
97:3c:f3:da:30:40:3d:9a:ab:c1:68:67:12:ce:01:1f:d8:e7:
d6:11:0c:c4:1d:67:8d:ca:2a:87:66:3b:c0:5e:5b:bb:10:28:
2b:a9:f2:32:dc:0e:5a:3a:dc:b3:1f:84:40:0b:0c:a9:98:ec:
2b:b9:a9:d4:a8:eb:31:59:fa:71:4d:2a:fb:90:63:ab:7a:d1:
00:87:45:7c:3c:97:98:27:75:c3:70:78:64:34:e7:3b:1b:ca:
05:dd:36:85:6c:e4:06:41:62:c5:d6:f4:bd:48:8d:a5:82:a1:
88:de:a9:a5:61:69:c8:65:76:86:99:7e:14:1f:f2:fb:cc:70:
95:5b:ed:25:83:42:3b:2f:b4:c2:4c:d5:f3:89:c4:d8:5c:80:
82:0c:b7:a5:21:14:ce:ae:e9:16:d9:c7:9d:ad:35:5d:1c:d7:
c1:3f:a5:b1:ac:b4:93:ad:c8:72:f9:74:03:ac:1e:ab:7f:08:
01:c9:6d:69
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYdKen73dRXuChGU9Ywr7CTVMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcyMDQ3YmUxNWIyNzU5MDJkY2Y2MTdkYzNkMGUxNmRjMWYz
MDgwMjIwHhcNMjMwNDA0MDQxNTU0WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2NGQzZGY0ZWI3ZGIzYWZmODUzYjYyNmU4ODcxNjE0MGJiNWIxNjI0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgv2wKHy0NvfcSyPqPrLWIXeOTIa3
HMPpUo4C+jv2etTO+Ygfvb25jnnXmTEN9nIs2g5fJCFHhZ+pzsspnp/rzYvEFWZe
Lpgj2BSZZgN/ZQJKJES6wdjNJqLlr/C2pMKjzTxRNj/tQ6CqA74fX8l3pQAw5sht
a6rNInBnU9X+QzG9mcd2jinhH7n9U2iTd3E7i2m3OdqxmyIyg76DO4f3lW8liDIS
kbZctRXq/dijcU84Xin9GsWW8DaiUyKgBXQKyIFEqC6Rl2bIrdf9Q2wXqudLHtIV
kABhIwKkVRlkQoq4SrUCPpuxYL3BFcJwnES248lhMEwyABiMBc1Va85z6wIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFGTT30632zr/hTtibohxYUC7WxYkMB8GA1UdIwQY
MBaAFHIEe+FbJ1kC3PYX3D0OFtwfMIAiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMt
MWFiZTNhYzEwYWE2LzEvWk5QZlRyZmJPdi1GTzJKdWlIRmhRTHRiRmlRLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMtMWFiZTNhYzEwYWE2
LzEvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBAAedWSyb8UVa/c7mMI90
nakoDd38tJSfrOhVV217VgQsVW1Net/e1fWeMVCpAWCQKGyhhQ3dlSqquaSQtU2R
d1oj5ERlaMiGEpc889owQD2aq8FoZxLOAR/Y59YRDMQdZ43KKodmO8BeW7sQKCup
8jLcDlo63LMfhEALDKmY7Cu5qdSo6zFZ+nFNKvuQY6t60QCHRXw8l5gndcNweGQ0
5zsbygXdNoVs5AZBYsXW9L1IjaWCoYjeqaVhachldoaZfhQf8vvMcJVb7SWDQjsv
tMJM1fOJxNhcgIIMt6UhFM6u6RbZx52tNV0c18E/pbGstJOtyHL5dAOsHqt/CAHJ
bWk=
-----END CERTIFICATE-----
Generated at Wed Apr 30 21:29:17 2025 by rpki-client