Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/ZjXhCY9vSnD7MUgK5p8hKWY1qz8.roa
File: ZjXhCY9vSnD7MUgK5p8hKWY1qz8.roa (raw, json)
Hash identifier: hyga9zFSVC7psViejlecYRpXAOLheURmjLEdHlCSzUs=
Subject key identifier: 66:35:E1:09:8F:6F:4A:70:FB:31:48:0A:E6:9F:21:29:66:35:AB:3F
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 01863C49B752CE412A6A97FF07D585712EE1
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/ZjXhCY9vSnD7MUgK5p8hKWY1qz8.roa
Signing time: Fri 10 Feb 2023 17:05:09 +0000
ROA not before: Fri 10 Feb 2023 17:05:09 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:3c48:e850/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:3c:49:b7:52:ce:41:2a:6a:97:ff:07:d5:85:71:2e:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Feb 10 17:05:09 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=6635e1098f6f4a70fb31480ae69f21296635ab3f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:0a:83:79:ad:35:8d:7d:07:e6:cf:32:1d:3e:
b5:6a:d4:6e:6f:d1:87:e7:5d:94:2f:16:c1:e5:63:
d2:07:48:ef:8e:9f:22:ff:fb:4b:99:8c:5f:ba:76:
50:1e:52:8a:e9:c4:c4:ba:fc:44:da:e4:c5:90:99:
73:e1:77:8d:bc:cf:d8:7f:a0:2e:f4:d7:8e:d5:ef:
7c:f3:d2:d6:4b:b0:cb:6d:6c:8f:0a:f3:9d:5b:9b:
a4:9d:3f:b3:2c:31:ed:69:98:cb:6c:95:07:72:1f:
ca:1c:a0:7c:83:26:da:94:17:73:fb:8c:28:96:35:
ff:82:a2:37:ae:4c:62:36:49:ff:40:51:ff:86:87:
38:39:1f:c6:d1:35:c3:0e:c6:64:ee:34:b5:55:6f:
86:85:a0:97:f4:85:63:07:78:78:fb:59:b4:19:81:
54:96:97:12:15:98:63:0b:3b:ef:a3:b9:6a:0f:45:
e5:d8:63:ef:35:e1:64:06:99:77:c6:1e:b0:19:4f:
b1:bb:4c:64:a1:60:9d:1a:82:dd:0c:e0:b6:a4:17:
58:6b:b2:c9:df:1e:ef:0b:57:a0:eb:25:33:a1:5b:
67:09:78:3d:29:67:93:68:95:cc:b7:ba:aa:d3:d2:
cb:02:77:a9:9d:94:5a:38:2c:fb:fa:65:f3:48:d5:
f7:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:35:E1:09:8F:6F:4A:70:FB:31:48:0A:E6:9F:21:29:66:35:AB:3F
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/ZjXhCY9vSnD7MUgK5p8hKWY1qz8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
5e:37:80:79:f9:1d:48:a7:20:36:3b:e9:9e:05:6f:65:8f:b3:
bf:9c:1a:8f:fe:d3:25:52:41:e4:a5:ce:95:94:f9:a5:71:aa:
23:cd:d1:83:08:5a:47:52:09:c0:9d:c7:f6:8f:a9:91:7a:d3:
58:cf:28:49:94:1e:f7:8d:9a:c9:00:ea:9b:db:ae:54:7b:fe:
ff:62:23:cc:fd:ce:ba:48:49:4d:93:e5:f6:1f:83:1f:47:f5:
ae:2b:79:bd:2c:61:78:92:a8:35:68:5f:5a:fa:fe:4b:fe:54:
0b:f7:80:92:2c:0e:8e:5e:b9:a1:ea:d4:27:10:a0:3d:13:36:
57:94:1a:c5:03:51:ed:c6:34:a6:47:d5:32:16:80:79:84:d2:
ad:7f:98:b8:2e:e8:e0:e3:35:0d:df:17:47:74:7d:5b:af:35:
7e:d2:81:6c:c2:e0:54:c6:54:2f:e9:e6:cc:3e:e7:19:73:f3:
89:ea:0c:87:97:e8:2c:4f:c7:34:65:4c:2c:98:07:5e:02:9c:
54:c3:80:d2:49:e3:3f:b9:a2:e4:0f:1f:a1:b8:1e:94:a0:88:
3d:16:72:c3:f6:ba:e5:ef:91:05:d7:a3:31:a8:8a:91:ea:2d:
d0:d2:b8:0e:99:a5:0d:f9:7b:11:09:b4:14:e3:61:2e:53:6f:
40:11:f2:2c
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYY8SbdSzkEqapf/B9WFcS7hMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcyMDQ3YmUxNWIyNzU5MDJkY2Y2MTdkYzNkMGUxNmRjMWYz
MDgwMjIwHhcNMjMwMjEwMTcwNTA5WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2NjM1ZTEwOThmNmY0YTcwZmIzMTQ4MGFlNjlmMjEyOTY2MzVhYjNmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApwqDea01jX0H5s8yHT61atRub9GH
512ULxbB5WPSB0jvjp8i//tLmYxfunZQHlKK6cTEuvxE2uTFkJlz4XeNvM/Yf6Au
9NeO1e9889LWS7DLbWyPCvOdW5uknT+zLDHtaZjLbJUHch/KHKB8gybalBdz+4wo
ljX/gqI3rkxiNkn/QFH/hoc4OR/G0TXDDsZk7jS1VW+GhaCX9IVjB3h4+1m0GYFU
lpcSFZhjCzvvo7lqD0Xl2GPvNeFkBpl3xh6wGU+xu0xkoWCdGoLdDOC2pBdYa7LJ
3x7vC1eg6yUzoVtnCXg9KWeTaJXMt7qq09LLAnepnZRaOCz7+mXzSNX3GwIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFGY14QmPb0pw+zFICuafISlmNas/MB8GA1UdIwQY
MBaAFHIEe+FbJ1kC3PYX3D0OFtwfMIAiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMt
MWFiZTNhYzEwYWE2LzEvWmpYaENZOXZTbkQ3TVVnSzVwOGhLV1kxcXo4LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMtMWFiZTNhYzEwYWE2
LzEvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBAF43gHn5HUinIDY76Z4F
b2WPs7+cGo/+0yVSQeSlzpWU+aVxqiPN0YMIWkdSCcCdx/aPqZF601jPKEmUHveN
mskA6pvbrlR7/v9iI8z9zrpISU2T5fYfgx9H9a4reb0sYXiSqDVoX1r6/kv+VAv3
gJIsDo5euaHq1CcQoD0TNleUGsUDUe3GNKZH1TIWgHmE0q1/mLgu6ODjNQ3fF0d0
fVuvNX7SgWzC4FTGVC/p5sw+5xlz84nqDIeX6CxPxzRlTCyYB14CnFTDgNJJ4z+5
ouQPH6G4HpSgiD0WcsP2uuXvkQXXozGoipHqLdDSuA6ZpQ35exEJtBTjYS5Tb0AR
8iw=
-----END CERTIFICATE-----
Generated at Sat May 3 04:07:29 2025 by rpki-client