Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/ZZnjI6TI_Dxrz4iEYlOKAuCuWX8.roa
File: ZZnjI6TI_Dxrz4iEYlOKAuCuWX8.roa (raw, json)
Hash identifier: k1IDSY8Ayj+wfAQ7d+Yd+L2P2Smg4xMzWvQpjhxi7Mk=
Subject key identifier: 65:99:E3:23:A4:C8:FC:3C:6B:CF:88:84:62:53:8A:02:E0:AE:59:7F
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0186A3525C641B74B3B0E29120A417D0C5A5
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/ZZnjI6TI_Dxrz4iEYlOKAuCuWX8.roa
Signing time: Thu 02 Mar 2023 17:15:29 +0000
ROA not before: Thu 02 Mar 2023 17:15:29 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:a3:52:5c:64:1b:74:b3:b0:e2:91:20:a4:17:d0:c5:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Mar 2 17:15:29 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=6599e323a4c8fc3c6bcf888462538a02e0ae597f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:10:bb:0d:42:64:2e:09:50:e4:97:50:21:b7:
d1:c4:54:16:70:38:e7:60:73:24:6f:55:c9:65:de:
64:f6:b0:cc:fb:82:fe:9c:f6:a4:59:da:f6:f0:1c:
0b:d4:f4:82:bd:4a:a3:f9:51:82:8d:8f:5f:5c:e2:
eb:5c:ad:11:27:c8:11:98:b9:e4:4f:04:52:0c:46:
c4:cf:db:a1:af:a5:6d:2f:34:02:fb:10:91:a5:e2:
4d:c9:06:91:3a:35:ae:01:8f:0f:2d:73:4a:6d:07:
46:ee:8d:85:56:1e:c3:e7:c7:93:21:2c:e2:85:ac:
a7:0f:8d:32:ea:b0:af:72:46:08:10:08:6a:8c:9c:
f4:bf:7d:dc:b8:4d:de:aa:16:a1:34:f5:47:ee:15:
fd:1f:f5:18:6c:5f:20:c9:38:2d:20:46:ee:43:98:
9e:42:69:3b:d8:48:cd:15:b1:2a:4e:45:0b:9c:cd:
f0:1b:94:48:9f:96:2f:94:aa:0e:5a:c4:5c:58:ca:
bb:41:0c:28:29:69:17:08:fc:6a:e0:a0:fc:f2:a8:
6f:65:3b:1e:88:67:33:22:c8:3d:43:72:18:1e:21:
40:e0:a2:96:07:d9:f8:b7:fe:f2:64:e7:60:83:b1:
19:1d:e9:3d:37:bd:a6:31:a4:46:d1:e9:5e:5b:1c:
66:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:99:E3:23:A4:C8:FC:3C:6B:CF:88:84:62:53:8A:02:E0:AE:59:7F
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/ZZnjI6TI_Dxrz4iEYlOKAuCuWX8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
a6:be:d0:b4:ca:97:e1:60:96:e4:3a:b7:1c:f7:2f:e9:12:2a:
a3:a1:c0:3c:0a:38:d9:82:4b:4b:5b:e2:07:73:5c:8d:dd:8f:
eb:df:df:91:54:89:47:85:93:cd:08:f4:2e:dc:df:d9:87:7e:
dc:80:28:88:b0:88:9f:3c:5b:bd:d2:75:ca:c2:b4:20:72:89:
32:5d:d9:62:ee:6b:d7:72:99:0d:8e:be:4f:a9:0a:c4:e3:7f:
d6:bc:28:be:a0:91:9c:7a:22:28:3f:a8:55:f1:6b:fe:f6:14:
1f:a6:34:91:15:5b:16:30:2c:dc:10:c7:6b:31:e7:36:b9:82:
0a:4b:d5:8a:94:e8:fd:da:60:c5:ce:fc:0c:86:d9:ee:15:fa:
4d:76:da:83:81:cd:0c:a8:63:85:de:a9:6e:75:da:84:92:3f:
c7:aa:79:66:25:8a:72:0e:09:c5:cb:40:33:42:9a:f0:3b:17:
a0:4e:d5:31:f7:0f:20:cf:6c:d6:6d:91:a1:a0:42:fe:db:da:
9a:a6:dd:db:df:28:5d:cd:52:4e:72:7a:2d:9e:2e:8a:64:e7:
b7:92:16:7d:0d:5a:79:f7:cc:cd:37:57:3b:b9:dc:1a:00:d4:
d4:4a:99:5f:de:87:fd:b4:1d:f6:87:96:67:23:be:1e:b9:3c:
05:58:58:28
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYajUlxkG3SzsOKRIKQX0MWlMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcyMDQ3YmUxNWIyNzU5MDJkY2Y2MTdkYzNkMGUxNmRjMWYz
MDgwMjIwHhcNMjMwMzAyMTcxNTI5WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2NTk5ZTMyM2E0YzhmYzNjNmJjZjg4ODQ2MjUzOGEwMmUwYWU1OTdmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjhC7DUJkLglQ5JdQIbfRxFQWcDjn
YHMkb1XJZd5k9rDM+4L+nPakWdr28BwL1PSCvUqj+VGCjY9fXOLrXK0RJ8gRmLnk
TwRSDEbEz9uhr6VtLzQC+xCRpeJNyQaROjWuAY8PLXNKbQdG7o2FVh7D58eTISzi
haynD40y6rCvckYIEAhqjJz0v33cuE3eqhahNPVH7hX9H/UYbF8gyTgtIEbuQ5ie
Qmk72EjNFbEqTkULnM3wG5RIn5YvlKoOWsRcWMq7QQwoKWkXCPxq4KD88qhvZTse
iGczIsg9Q3IYHiFA4KKWB9n4t/7yZOdgg7EZHek9N72mMaRG0eleWxxm7QIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFGWZ4yOkyPw8a8+IhGJTigLgrll/MB8GA1UdIwQY
MBaAFHIEe+FbJ1kC3PYX3D0OFtwfMIAiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMt
MWFiZTNhYzEwYWE2LzEvWlpuakk2VElfRHhyejRpRVlsT0tBdUN1V1g4LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMtMWFiZTNhYzEwYWE2
LzEvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBAKa+0LTKl+FgluQ6txz3
L+kSKqOhwDwKONmCS0tb4gdzXI3dj+vf35FUiUeFk80I9C7c39mHftyAKIiwiJ88
W73SdcrCtCByiTJd2WLua9dymQ2Ovk+pCsTjf9a8KL6gkZx6Iig/qFXxa/72FB+m
NJEVWxYwLNwQx2sx5za5ggpL1YqU6P3aYMXO/AyG2e4V+k122oOBzQyoY4XeqW51
2oSSP8eqeWYlinIOCcXLQDNCmvA7F6BO1TH3DyDPbNZtkaGgQv7b2pqm3dvfKF3N
Uk5yei2eLopk57eSFn0NWnn3zM03Vzu53BoA1NRKmV/eh/20HfaHlmcjvh65PAVY
WCg=
-----END CERTIFICATE-----
Generated at Sun May 4 10:32:13 2025 by rpki-client