Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/ZY3S4ytuQtmZx3B36bd64DvIQ8U.roa
File: ZY3S4ytuQtmZx3B36bd64DvIQ8U.roa (raw, json)
Hash identifier: 6k9W5h0oh0xxoxxxGJgMtutB93jaSa92TGRgQS6gyIU=
Subject key identifier: 65:8D:D2:E3:2B:6E:42:D9:99:C7:70:77:E9:B7:7A:E0:3B:C8:43:C5
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 8FE15224
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/ZY3S4ytuQtmZx3B36bd64DvIQ8U.roa
Signing time: Sun 26 Jun 2022 03:13:35 +0000
ROA not before: Sun 26 Jun 2022 03:13:35 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2413908516 (0x8fe15224)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Jun 26 03:13:35 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=658dd2e32b6e42d999c77077e9b77ae03bc843c5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:89:1d:59:b7:71:9c:38:14:ef:8f:56:67:81:
22:ee:51:a4:51:89:90:1a:28:9e:47:db:be:64:c3:
bd:11:ab:f8:67:af:a2:76:77:66:1d:1e:1a:a3:a4:
98:14:e1:b2:5b:9c:f5:aa:dc:ae:89:ae:88:30:0a:
4a:4c:b7:02:0a:d4:35:82:ac:82:15:30:91:ee:6e:
71:c6:07:d1:9a:06:d0:a8:ff:5f:9d:ee:ec:2e:ff:
f1:0c:bb:9a:e3:ea:ff:fb:65:2a:09:c4:6c:fa:41:
96:e8:9c:d8:9b:e6:48:ec:1e:6e:86:e4:c1:6b:86:
1d:b3:c6:9d:6d:72:ec:6e:3c:10:50:56:ab:a0:1b:
59:ff:6b:dd:c3:ad:a6:d1:82:7c:c2:d4:85:29:da:
89:e0:ee:03:80:cf:f0:41:65:12:44:e1:32:92:e0:
34:80:ab:f6:b8:a8:8d:d5:e3:45:a0:e1:32:4f:f7:
ce:80:cb:5a:eb:cb:84:4f:e9:31:95:a0:f2:32:df:
49:f2:dc:9b:bb:85:9b:23:11:bb:04:e5:89:58:4e:
79:1d:85:98:b4:31:d1:00:38:f2:86:a2:8c:ad:0c:
6b:73:e0:00:00:ea:5f:c7:59:aa:f9:48:67:dc:3d:
6f:bb:73:c9:42:84:8c:3a:40:d4:f2:93:c6:5a:c3:
5f:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:8D:D2:E3:2B:6E:42:D9:99:C7:70:77:E9:B7:7A:E0:3B:C8:43:C5
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/ZY3S4ytuQtmZx3B36bd64DvIQ8U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
2d:b7:1f:50:f5:b0:91:a6:1f:42:df:72:c0:d3:ed:a9:af:9d:
cf:92:92:25:33:b9:90:73:5b:bd:e4:10:47:c3:b0:bb:01:3c:
2a:82:ff:9b:35:ce:31:d1:a6:30:df:1b:1f:9c:ea:99:fe:98:
c2:06:3a:a9:18:60:c2:93:bd:b6:02:c7:7a:93:95:25:a9:ee:
a2:2b:b3:25:40:49:e0:40:c6:30:9d:fb:65:d7:54:c8:88:ad:
62:a4:a9:8e:0f:8f:fd:fd:09:7f:f8:59:62:4d:7b:62:08:5c:
10:5e:75:a7:9d:b9:4b:77:3e:cd:b1:dc:65:95:b8:46:a6:1d:
2c:c4:f4:a5:a6:12:60:36:f1:b7:f3:5e:b6:94:8a:b5:ab:c9:
39:d4:d2:1c:74:72:d4:c7:61:37:f9:2f:70:9b:50:36:4e:7e:
e4:49:ca:01:35:c7:e6:c3:d5:40:c8:17:28:00:ae:5a:4c:36:
d8:31:44:5f:bc:7d:4f:5c:ef:94:71:ea:af:1f:e2:16:50:2d:
7e:e3:07:6c:f2:0b:58:6b:74:a3:73:c4:b4:9b:c1:e7:ab:82:
13:18:55:16:1e:64:e6:37:e0:22:03:84:92:9d:16:07:61:09:
f4:e1:43:9d:41:69:c7:3f:3a:e7:98:71:79:72:1b:d1:37:8c:
9f:dc:00:77
-----BEGIN CERTIFICATE-----
MIIFATCCA+mgAwIBAgIFAI/hUiQwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMo
NzIwNDdiZTE1YjI3NTkwMmRjZjYxN2RjM2QwZTE2ZGMxZjMwODAyMjAeFw0yMjA2
MjYwMzEzMzVaFw0yMzA3MDEwMDAwMDBaMDMxMTAvBgNVBAMTKDY1OGRkMmUzMmI2
ZTQyZDk5OWM3NzA3N2U5Yjc3YWUwM2JjODQzYzUwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQCLiR1Zt3GcOBTvj1ZngSLuUaRRiZAaKJ5H275kw70Rq/hn
r6J2d2YdHhqjpJgU4bJbnPWq3K6JrogwCkpMtwIK1DWCrIIVMJHubnHGB9GaBtCo
/1+d7uwu//EMu5rj6v/7ZSoJxGz6QZbonNib5kjsHm6G5MFrhh2zxp1tcuxuPBBQ
VqugG1n/a93DrabRgnzC1IUp2ong7gOAz/BBZRJE4TKS4DSAq/a4qI3V40Wg4TJP
986Ay1rry4RP6TGVoPIy30ny3Ju7hZsjEbsE5YlYTnkdhZi0MdEAOPKGooytDGtz
4AAA6l/HWar5SGfcPW+7c8lChIw6QNTyk8Zaw19TAgMBAAGjggIaMIICFjAdBgNV
HQ4EFgQUZY3S4ytuQtmZx3B36bd64DvIQ8UwHwYDVR0jBBgwFoAUcgR74VsnWQLc
9hfcPQ4W3B8wgCIwDgYDVR0PAQH/BAQDAgeAMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvREVGQVVM
VC9jZ1I3NFZzbldRTGM5aGZjUFE0VzNCOHdnQ0kuY2VyMIGNBggrBgEFBQcBCwSB
gDB+MHwGCCsGAQUFBzALhnByc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9y
eS9ERUZBVUxULzVlLzc5ODQ0Ny0yMWY0LTQ1YWItOTlkYy0xYWJlM2FjMTBhYTYv
MS9aWTNTNHl0dVF0bVp4M0IzNmJkNjREdklROFUucm9hMIGBBgNVHR8EejB4MHag
dKByhnByc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzVl
Lzc5ODQ0Ny0yMWY0LTQ1YWItOTlkYy0xYWJlM2FjMTBhYTYvMS9jZ1I3NFZzbldR
TGM5aGZjUFE0VzNCOHdnQ0kuY3JsMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw
MAYIKwYBBQUHAQcBAf8EITAfMAwEAgABMAYDBAPBABgwDwQCAAIwCQMHACABBnwA
ZDANBgkqhkiG9w0BAQsFAAOCAQEALbcfUPWwkaYfQt9ywNPtqa+dz5KSJTO5kHNb
veQQR8OwuwE8KoL/mzXOMdGmMN8bH5zqmf6YwgY6qRhgwpO9tgLHepOVJanuoiuz
JUBJ4EDGMJ37ZddUyIitYqSpjg+P/f0Jf/hZYk17YghcEF51p525S3c+zbHcZZW4
RqYdLMT0paYSYDbxt/NetpSKtavJOdTSHHRy1MdhN/kvcJtQNk5+5EnKATXH5sPV
QMgXKACuWkw22DFEX7x9T1zvlHHqrx/iFlAtfuMHbPILWGt0o3PEtJvB56uCExhV
Fh5k5jfgIgOEkp0WB2EJ9OFDnUFpxz8655hxeXIb0TeMn9wAdw==
-----END CERTIFICATE-----
Generated at Thu May 1 11:51:04 2025 by rpki-client