Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/ZeGYyoTcFfOIDOaf76FuOTGD9jU.roa
File: ZeGYyoTcFfOIDOaf76FuOTGD9jU.roa (raw, json)
Hash identifier: sC6FLZGa5Loxu3pAetcfK1C5CV113gB6MrRbI4LKI+s=
Subject key identifier: 65:E1:98:CA:84:DC:15:F3:88:0C:E6:9F:EF:A1:6E:39:31:83:F6:35
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 018874B7555D08B63D4EE6AC72A80F9FB95A
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/ZeGYyoTcFfOIDOaf76FuOTGD9jU.roa
Signing time: Thu 01 Jun 2023 02:09:11 +0000
ROA not before: Thu 01 Jun 2023 02:09:11 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:188:5fe2:b396/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:187:4695:a68a/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64:ffff:0:187:fa9a:b088/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:187:b2b8:a7dd/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:74:b7:55:5d:08:b6:3d:4e:e6:ac:72:a8:0f:9f:b9:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Jun 1 02:09:11 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=65e198ca84dc15f3880ce69fefa16e393183f635
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:6a:cb:51:5d:69:e7:fd:25:49:0e:15:66:8e:
f0:c6:8e:c8:73:22:a3:1f:10:d0:dc:ce:8c:2b:37:
a0:39:13:eb:1a:97:8e:48:41:e0:1c:9c:23:90:7e:
cf:06:4b:5b:b4:ce:4c:32:96:45:c8:de:cc:bc:3c:
35:83:36:fd:2f:09:22:43:71:e1:30:6d:dc:1c:56:
33:8a:37:7e:43:3c:c2:35:9e:a3:6c:d5:75:14:7a:
f6:41:d5:78:d5:f5:b0:a4:96:d6:ad:8b:4c:81:42:
f7:21:7f:3a:5d:83:65:42:d0:e6:6c:9a:c0:b4:ee:
de:03:2f:ad:83:3a:12:95:ce:66:a4:2f:47:13:a6:
1a:c3:6f:88:db:ee:db:7f:59:60:62:78:08:5f:95:
37:00:31:cf:a3:8a:ed:d2:df:69:65:f4:d6:3f:88:
9e:ea:17:46:a9:61:5a:34:42:b9:85:bd:70:b6:ee:
cc:26:c1:65:1a:11:90:8e:12:0e:07:40:7c:67:d6:
2d:36:dc:5f:08:d3:0d:66:23:55:0d:27:e1:16:00:
f1:fb:ad:99:38:ff:8c:fa:54:04:75:40:f0:8e:5d:
e3:3d:bb:df:5c:29:6e:67:78:a6:08:87:a1:c2:83:
c5:02:1f:28:e7:0b:ca:6e:1c:09:eb:6c:63:ae:78:
3b:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:E1:98:CA:84:DC:15:F3:88:0C:E6:9F:EF:A1:6E:39:31:83:F6:35
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/ZeGYyoTcFfOIDOaf76FuOTGD9jU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
48:50:0c:01:71:8f:16:65:a2:3d:43:b5:53:b0:b5:39:47:bb:
e0:e3:48:d5:15:b9:81:6a:87:c6:cd:65:3e:f5:05:29:7d:ed:
0f:0e:56:dc:8f:ed:2f:b4:b6:ee:06:55:aa:01:fa:1b:17:52:
db:7a:9f:ae:97:d1:ff:bb:9e:e1:97:50:27:25:2d:2c:90:ce:
10:1c:00:d6:b8:ae:9b:17:a9:f3:94:22:0d:6f:e9:d3:c1:ba:
77:6c:01:21:69:0e:70:cf:3f:84:6b:48:6c:6b:d1:ce:9c:cc:
45:61:3f:bd:84:04:de:e1:0b:2c:f7:60:ae:bb:98:b1:a1:2b:
97:a4:88:af:71:10:e5:52:99:71:3f:dd:11:46:0e:36:15:60:
37:6b:47:24:4d:5a:e5:52:d3:73:52:2e:48:d4:2a:42:b3:ed:
50:20:32:32:e4:c2:c6:14:4e:ac:14:2d:8e:18:96:c9:30:9e:
87:36:a4:7c:47:63:75:32:cb:6a:e1:5b:56:a6:38:3a:24:2f:
e7:00:88:3a:2c:9e:4a:ea:9b:1a:e1:08:fb:02:e8:be:89:b9:
91:dc:0a:99:c4:87:80:7a:0f:6d:0c:3b:37:01:2a:9f:a3:d3:
cc:eb:2e:2f:5c:2d:27:f4:f1:8f:12:05:f8:e5:70:69:7a:f9:
68:b3:de:2b
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYh0t1VdCLY9TuascqgPn7laMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcyMDQ3YmUxNWIyNzU5MDJkY2Y2MTdkYzNkMGUxNmRjMWYz
MDgwMjIwHhcNMjMwNjAxMDIwOTExWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2NWUxOThjYTg0ZGMxNWYzODgwY2U2OWZlZmExNmUzOTMxODNmNjM1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3mrLUV1p5/0lSQ4VZo7wxo7IcyKj
HxDQ3M6MKzegORPrGpeOSEHgHJwjkH7PBktbtM5MMpZFyN7MvDw1gzb9LwkiQ3Hh
MG3cHFYzijd+QzzCNZ6jbNV1FHr2QdV41fWwpJbWrYtMgUL3IX86XYNlQtDmbJrA
tO7eAy+tgzoSlc5mpC9HE6Yaw2+I2+7bf1lgYngIX5U3ADHPo4rt0t9pZfTWP4ie
6hdGqWFaNEK5hb1wtu7MJsFlGhGQjhIOB0B8Z9YtNtxfCNMNZiNVDSfhFgDx+62Z
OP+M+lQEdUDwjl3jPbvfXCluZ3imCIehwoPFAh8o5wvKbhwJ62xjrng7fQIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFGXhmMqE3BXziAzmn++hbjkxg/Y1MB8GA1UdIwQY
MBaAFHIEe+FbJ1kC3PYX3D0OFtwfMIAiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMt
MWFiZTNhYzEwYWE2LzEvWmVHWXlvVGNGZk9JRE9hZjc2RnVPVEdEOWpVLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMtMWFiZTNhYzEwYWE2
LzEvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBAEhQDAFxjxZloj1DtVOw
tTlHu+DjSNUVuYFqh8bNZT71BSl97Q8OVtyP7S+0tu4GVaoB+hsXUtt6n66X0f+7
nuGXUCclLSyQzhAcANa4rpsXqfOUIg1v6dPBundsASFpDnDPP4RrSGxr0c6czEVh
P72EBN7hCyz3YK67mLGhK5ekiK9xEOVSmXE/3RFGDjYVYDdrRyRNWuVS03NSLkjU
KkKz7VAgMjLkwsYUTqwULY4Ylskwnoc2pHxHY3Uyy2rhW1amODokL+cAiDosnkrq
mxrhCPsC6L6JuZHcCpnEh4B6D20MOzcBKp+j08zrLi9cLSf08Y8SBfjlcGl6+Wiz
3is=
-----END CERTIFICATE-----
Generated at Thu May 1 00:08:28 2025 by rpki-client