Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/ZgCfq_wIhD-7EzbkadUjyye4uts.roa
File: ZgCfq_wIhD-7EzbkadUjyye4uts.roa (raw, json)
Hash identifier: IL3ZKcaKwo9PH6Nu0d93EuoPSD9KVRt76nO1qk6zneg=
Subject key identifier: 66:00:9F:AB:FC:08:84:3F:BB:13:36:E4:69:D5:23:CB:27:B8:BA:DB
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 018A12312537479EF2DF1F96F2EE8723BA71
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/ZgCfq_wIhD-7EzbkadUjyye4uts.roa
Signing time: Sun 20 Aug 2023 09:05:25 +0000
ROA not before: Sun 20 Aug 2023 09:05:25 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:188:7858:a003/128 maxlen: 128
2001:67c:64:ffff:0:18a:1230:87ba/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:189:a0e4:5c7d/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:12:31:25:37:47:9e:f2:df:1f:96:f2:ee:87:23:ba:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Aug 20 09:05:25 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=66009fabfc08843fbb1336e469d523cb27b8badb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:e6:e9:5b:31:3c:34:c6:3e:14:8b:dd:92:59:
74:b8:af:cd:8f:4b:5a:5c:0a:79:62:03:00:be:29:
4e:80:b4:97:44:55:60:b9:83:ac:67:bf:ec:c6:e7:
aa:6b:97:63:43:0b:ca:5d:ec:4e:51:0d:b0:df:a3:
2f:b5:49:76:d0:7a:23:19:b2:7c:cb:c1:53:df:6e:
16:d6:96:62:cb:5b:a8:7e:9b:38:58:00:f0:26:d2:
e0:34:7f:ed:30:0f:f8:ac:e9:28:09:8b:25:65:84:
0d:37:89:e0:40:f6:41:2e:50:f3:d8:8b:c4:d1:fd:
05:32:f2:44:f4:1c:71:fd:0b:65:11:16:c5:76:e4:
6e:3d:55:04:1d:ce:da:1c:83:38:ce:2c:e1:14:dc:
92:c9:c2:ec:51:5c:fe:45:3f:da:a9:f2:df:1c:d1:
78:47:71:b0:30:79:c8:02:5a:fb:de:8e:59:06:9f:
b3:73:a6:d9:09:11:6d:a2:63:3e:7c:09:51:76:87:
bf:04:17:7e:ba:73:f8:4f:6c:ef:fa:fe:15:7c:a8:
88:2f:c5:14:0f:b5:d9:50:d4:ee:b6:00:46:09:28:
9f:17:30:dd:d2:a0:96:2f:0c:26:a5:9c:08:44:6b:
af:bc:c2:b9:c7:2d:96:48:02:a1:db:9e:53:ba:a7:
8b:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:00:9F:AB:FC:08:84:3F:BB:13:36:E4:69:D5:23:CB:27:B8:BA:DB
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/ZgCfq_wIhD-7EzbkadUjyye4uts.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
9f:10:b8:aa:78:61:38:c1:71:97:9c:0d:02:05:b2:af:11:8e:
d5:20:1a:66:ae:9c:74:c2:1d:79:96:57:16:f1:16:60:78:2e:
fb:79:37:ca:0b:f9:d5:dd:2d:56:7a:4b:e7:8f:f6:36:43:e8:
e9:a0:62:ea:c8:72:c6:9a:2a:9e:5f:83:31:36:c5:e3:71:e9:
a4:7a:e5:cf:3f:0c:15:6c:f6:12:bc:ea:b0:c5:23:fc:4e:8f:
51:b8:97:d3:14:ec:e9:ce:ee:b4:2a:97:20:16:cc:2c:8d:21:
42:20:80:30:92:4e:c8:35:57:3f:76:09:ff:e8:49:58:35:f4:
22:c3:3c:b2:ff:de:b0:50:dd:66:d2:d7:6e:4f:04:6c:ac:5e:
88:14:cf:12:57:4f:a9:e8:79:87:fb:50:c2:a6:17:3a:f4:67:
8c:78:2a:8a:35:e7:38:16:32:fb:14:67:5e:37:41:d3:bb:9b:
bd:a0:9e:3c:df:c6:1d:96:a0:47:64:80:32:6e:e7:58:7a:ac:
6e:38:7d:28:07:43:c2:57:21:22:f7:84:d3:fc:b6:78:9b:36:
6a:25:ea:22:d6:8b:5a:aa:f9:71:14:0e:e7:ca:80:18:d2:58:
21:b4:0e:4b:48:63:b6:81:cb:76:a5:f5:e2:b0:5e:87:db:a1:
19:ed:4f:64
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYoSMSU3R57y3x+W8u6HI7pxMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcyMDQ3YmUxNWIyNzU5MDJkY2Y2MTdkYzNkMGUxNmRjMWYz
MDgwMjIwHhcNMjMwODIwMDkwNTI1WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2NjAwOWZhYmZjMDg4NDNmYmIxMzM2ZTQ2OWQ1MjNjYjI3YjhiYWRiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoubpWzE8NMY+FIvdkll0uK/Nj0ta
XAp5YgMAvilOgLSXRFVguYOsZ7/sxueqa5djQwvKXexOUQ2w36MvtUl20HojGbJ8
y8FT324W1pZiy1uofps4WADwJtLgNH/tMA/4rOkoCYslZYQNN4ngQPZBLlDz2IvE
0f0FMvJE9Bxx/QtlERbFduRuPVUEHc7aHIM4zizhFNySycLsUVz+RT/aqfLfHNF4
R3GwMHnIAlr73o5ZBp+zc6bZCRFtomM+fAlRdoe/BBd+unP4T2zv+v4VfKiIL8UU
D7XZUNTutgBGCSifFzDd0qCWLwwmpZwIRGuvvMK5xy2WSAKh255TuqeLAQIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFGYAn6v8CIQ/uxM25GnVI8snuLrbMB8GA1UdIwQY
MBaAFHIEe+FbJ1kC3PYX3D0OFtwfMIAiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMt
MWFiZTNhYzEwYWE2LzEvWmdDZnFfd0loRC03RXpia2FkVWp5eWU0dXRzLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMtMWFiZTNhYzEwYWE2
LzEvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBAJ8QuKp4YTjBcZecDQIF
sq8RjtUgGmaunHTCHXmWVxbxFmB4Lvt5N8oL+dXdLVZ6S+eP9jZD6OmgYurIcsaa
Kp5fgzE2xeNx6aR65c8/DBVs9hK86rDFI/xOj1G4l9MU7OnO7rQqlyAWzCyNIUIg
gDCSTsg1Vz92Cf/oSVg19CLDPLL/3rBQ3WbS125PBGysXogUzxJXT6noeYf7UMKm
Fzr0Z4x4Koo15zgWMvsUZ143QdO7m72gnjzfxh2WoEdkgDJu51h6rG44fSgHQ8JX
ISL3hNP8tnibNmol6iLWi1qq+XEUDufKgBjSWCG0DktIY7aBy3al9eKwXofboRnt
T2Q=
-----END CERTIFICATE-----
Generated at Thu May 1 04:20:29 2025 by rpki-client