Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/ZVX3pgRIA8-fnITtO17jdd_GxZk.roa
File: ZVX3pgRIA8-fnITtO17jdd_GxZk.roa (raw, json)
Hash identifier: IVszCH2LkFixypQM6iZ0y1gzHh+qiThKA3KtQRvUI3U=
Subject key identifier: 65:55:F7:A6:04:48:03:CF:9F:9C:84:ED:3B:5E:E3:75:DF:C6:C5:99
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 01884CC9AA6C1F92B7F5B15B86A393416800
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/ZVX3pgRIA8-fnITtO17jdd_GxZk.roa
Signing time: Wed 24 May 2023 08:04:24 +0000
ROA not before: Wed 24 May 2023 08:04:24 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:188:4cc9:8e2d/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:187:4695:a68a/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64:ffff:0:187:fa9a:b088/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:187:b2b8:a7dd/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:4c:c9:aa:6c:1f:92:b7:f5:b1:5b:86:a3:93:41:68:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: May 24 08:04:24 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=6555f7a6044803cf9f9c84ed3b5ee375dfc6c599
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:85:8a:64:f2:18:a8:d2:d9:45:89:95:ff:b6:
b6:ca:70:f4:90:b7:7b:cc:14:55:1a:0b:c8:3e:67:
6e:f5:86:b2:d9:78:7a:de:40:73:a5:bc:60:af:ed:
51:d2:6a:5c:a3:d9:4d:49:db:01:b9:f5:22:ae:25:
ad:07:45:6b:ed:2a:00:ac:ef:f8:7a:37:cd:c5:aa:
63:2c:b4:d4:b3:bc:87:a8:83:57:f4:04:ab:88:ef:
4e:9a:9f:9f:df:65:72:14:2d:1b:49:aa:68:d0:62:
26:b9:f0:4a:02:e9:f8:07:67:8a:49:b5:00:e2:74:
d8:1a:fe:36:03:e2:66:02:e0:b8:7b:02:aa:8f:f6:
58:76:81:44:f4:4c:5d:98:c5:b5:78:b0:8a:0d:d2:
7a:6b:d8:e1:ea:37:4b:c6:4b:30:9c:ae:d4:fe:26:
69:08:08:ff:c5:6e:ce:74:38:4e:7a:b6:6b:92:da:
aa:17:16:41:59:31:35:b2:16:07:3f:e6:d1:30:6c:
69:ec:1c:de:73:6a:a5:aa:19:65:61:38:80:7f:fd:
47:2d:86:e1:8a:d4:47:10:52:0c:df:ab:43:56:a3:
29:47:8e:df:92:8e:73:f3:99:0f:44:32:93:b9:27:
79:1d:64:62:70:86:80:a8:4d:84:7f:b2:2a:3c:73:
d9:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:55:F7:A6:04:48:03:CF:9F:9C:84:ED:3B:5E:E3:75:DF:C6:C5:99
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/ZVX3pgRIA8-fnITtO17jdd_GxZk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
08:78:f8:cd:11:65:fc:6a:21:71:42:4d:69:b1:ee:92:2d:fa:
3f:86:c6:07:34:c8:63:ba:2e:ca:bc:dc:fe:d3:22:18:24:7f:
48:97:f9:5f:db:48:d7:4c:ea:10:aa:a6:12:83:94:fd:d5:49:
01:b9:5d:af:42:5f:f3:5b:22:b1:95:28:0e:d0:9d:25:ac:9a:
10:17:80:0d:12:c4:ec:51:99:e6:71:45:ee:ce:ec:33:18:c1:
6f:f5:65:0f:9d:8d:5c:c9:6a:61:23:91:1a:c1:93:d1:ef:89:
93:e9:57:6a:40:0f:4a:69:d3:07:f9:8e:91:75:ad:84:e4:4b:
da:a1:cf:cd:5f:d4:c1:41:2f:f3:5f:e9:6b:b9:6f:c8:e8:b2:
0c:74:ee:5b:67:f7:1d:f5:bd:a2:58:2f:9f:fa:54:00:f8:ed:
7f:f0:ee:39:f8:a8:6f:dc:83:c4:13:74:c3:20:ce:3e:ae:66:
3f:07:5e:bf:e9:49:e5:b8:36:b0:23:84:1f:6e:5b:c5:50:95:
ff:5b:32:d2:23:5f:a0:b0:dd:56:0c:89:1e:e4:fd:80:5f:c3:
3c:53:4d:12:3c:3f:10:1a:24:e5:3c:dc:31:bb:20:f2:21:90:
86:c6:88:a0:a2:c5:cb:ae:6a:c3:64:f5:de:65:0b:f4:86:90:
a3:7a:6c:24
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYhMyapsH5K39bFbhqOTQWgAMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcyMDQ3YmUxNWIyNzU5MDJkY2Y2MTdkYzNkMGUxNmRjMWYz
MDgwMjIwHhcNMjMwNTI0MDgwNDI0WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2NTU1ZjdhNjA0NDgwM2NmOWY5Yzg0ZWQzYjVlZTM3NWRmYzZjNTk5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm4WKZPIYqNLZRYmV/7a2ynD0kLd7
zBRVGgvIPmdu9Yay2Xh63kBzpbxgr+1R0mpco9lNSdsBufUiriWtB0Vr7SoArO/4
ejfNxapjLLTUs7yHqINX9ASriO9Omp+f32VyFC0bSapo0GImufBKAun4B2eKSbUA
4nTYGv42A+JmAuC4ewKqj/ZYdoFE9ExdmMW1eLCKDdJ6a9jh6jdLxkswnK7U/iZp
CAj/xW7OdDhOerZrktqqFxZBWTE1shYHP+bRMGxp7Bzec2qlqhllYTiAf/1HLYbh
itRHEFIM36tDVqMpR47fko5z85kPRDKTuSd5HWRicIaAqE2Ef7IqPHPZmwIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFGVV96YESAPPn5yE7Tte43XfxsWZMB8GA1UdIwQY
MBaAFHIEe+FbJ1kC3PYX3D0OFtwfMIAiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMt
MWFiZTNhYzEwYWE2LzEvWlZYM3BnUklBOC1mbklUdE8xN2pkZF9HeFprLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMtMWFiZTNhYzEwYWE2
LzEvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBAAh4+M0RZfxqIXFCTWmx
7pIt+j+Gxgc0yGO6Lsq83P7TIhgkf0iX+V/bSNdM6hCqphKDlP3VSQG5Xa9CX/Nb
IrGVKA7QnSWsmhAXgA0SxOxRmeZxRe7O7DMYwW/1ZQ+djVzJamEjkRrBk9HviZPp
V2pAD0pp0wf5jpF1rYTkS9qhz81f1MFBL/Nf6Wu5b8josgx07ltn9x31vaJYL5/6
VAD47X/w7jn4qG/cg8QTdMMgzj6uZj8HXr/pSeW4NrAjhB9uW8VQlf9bMtIjX6Cw
3VYMiR7k/YBfwzxTTRI8PxAaJOU83DG7IPIhkIbGiKCixcuuasNk9d5lC/SGkKN6
bCQ=
-----END CERTIFICATE-----
Generated at Thu May 1 16:19:15 2025 by rpki-client