Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/ZmTCYE4kT2sAPsPQyYMEHkwijqE.roa
File: ZmTCYE4kT2sAPsPQyYMEHkwijqE.roa (raw, json)
Hash identifier: Wi7VpwxXAnS0XDl81jVXTRBtwqzzaJGiUoooK7Z2GGY=
Subject key identifier: 66:64:C2:60:4E:24:4F:6B:00:3E:C3:D0:C9:83:04:1E:4C:22:8E:A1
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0186D7098F37931AE4D5A8341AA7D8865EEE
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/ZmTCYE4kT2sAPsPQyYMEHkwijqE.roa
Signing time: Sun 12 Mar 2023 18:16:13 +0000
ROA not before: Sun 12 Mar 2023 18:16:13 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:d7:09:8f:37:93:1a:e4:d5:a8:34:1a:a7:d8:86:5e:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Mar 12 18:16:13 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=6664c2604e244f6b003ec3d0c983041e4c228ea1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:be:a6:e6:3a:4f:7c:c9:46:33:3f:e6:48:9f:
db:cd:a5:aa:09:e9:b2:40:ce:67:ad:0c:ca:c6:c9:
31:4c:58:08:b2:02:64:aa:04:e5:40:97:b9:a8:98:
33:2b:6e:20:9b:73:57:0a:ee:39:75:9f:22:6b:05:
a0:8e:b2:c7:49:a0:70:44:6d:49:94:48:08:66:48:
00:d4:f2:45:86:2b:58:15:c6:12:61:de:94:cc:e1:
40:f3:9e:6a:86:c8:92:f4:13:93:b5:75:c7:d1:8f:
c8:11:2a:20:c5:17:01:d1:46:be:b5:84:d6:06:3b:
53:ae:94:c0:99:63:99:bb:3d:41:38:27:b8:c3:05:
30:44:a6:73:30:6c:07:9c:5c:c9:b5:ef:bb:e1:54:
8f:34:89:6b:93:ea:e9:ef:e2:30:d6:96:e9:8d:1f:
b1:44:43:7e:36:dc:d8:dd:48:f5:92:e4:43:f6:71:
b3:b3:9e:be:27:2c:87:3c:24:48:6d:19:10:84:b8:
41:97:f2:99:6e:09:d6:cf:69:9c:15:e3:52:e8:02:
34:7b:3a:b4:be:63:90:f9:de:b9:f2:af:1b:bb:10:
f3:22:44:00:fb:aa:5d:ed:43:2b:00:62:0f:45:e1:
e9:48:d2:50:64:34:f3:4e:c9:2a:d5:a1:0c:ef:91:
c3:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:64:C2:60:4E:24:4F:6B:00:3E:C3:D0:C9:83:04:1E:4C:22:8E:A1
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/ZmTCYE4kT2sAPsPQyYMEHkwijqE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
87:32:a5:4d:b1:d1:a9:fe:ed:7d:72:38:ee:07:31:f8:46:26:
17:ef:ec:aa:87:db:1a:65:24:02:b3:45:2a:ff:5f:3c:4e:53:
66:1e:a1:2e:0c:33:3d:d3:41:98:97:35:25:e2:40:fe:69:df:
af:b3:56:de:0c:d0:9b:91:67:f0:5e:bc:87:06:4c:a1:09:29:
d4:06:10:c0:aa:48:ca:97:10:b1:cc:7c:f3:e3:9d:a2:7f:48:
bc:fa:3e:be:c9:14:fa:66:cc:ff:bd:c9:10:ee:79:3d:45:c9:
5d:63:15:5b:25:83:3b:dc:72:ca:84:32:ca:9f:16:f7:a7:85:
61:b5:3f:78:49:f9:ab:e9:6c:12:a0:d4:3e:1d:e6:e9:27:c6:
c1:12:73:ed:e3:c6:f0:c3:63:5a:1c:9a:9e:2d:74:e7:ad:1d:
0c:4e:0d:15:1b:d0:e0:a6:a4:b3:2e:54:e7:53:fe:82:e1:ac:
2f:92:ba:1e:c5:46:ad:46:f4:e6:96:ff:6e:ab:05:6c:1e:e3:
ae:47:b0:72:26:41:fd:48:12:e8:40:66:59:e4:65:0a:34:de:
3c:a0:39:c7:77:8d:3f:b4:c1:1a:cb:be:ac:b1:36:ce:84:c2:
bc:b9:11:02:69:af:f9:75:e0:46:a8:f2:09:71:00:ee:08:5a:
22:26:dc:13
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYbXCY83kxrk1ag0GqfYhl7uMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcyMDQ3YmUxNWIyNzU5MDJkY2Y2MTdkYzNkMGUxNmRjMWYz
MDgwMjIwHhcNMjMwMzEyMTgxNjEzWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2NjY0YzI2MDRlMjQ0ZjZiMDAzZWMzZDBjOTgzMDQxZTRjMjI4ZWExMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwL6m5jpPfMlGMz/mSJ/bzaWqCemy
QM5nrQzKxskxTFgIsgJkqgTlQJe5qJgzK24gm3NXCu45dZ8iawWgjrLHSaBwRG1J
lEgIZkgA1PJFhitYFcYSYd6UzOFA855qhsiS9BOTtXXH0Y/IESogxRcB0Ua+tYTW
BjtTrpTAmWOZuz1BOCe4wwUwRKZzMGwHnFzJte+74VSPNIlrk+rp7+Iw1pbpjR+x
REN+NtzY3Uj1kuRD9nGzs56+JyyHPCRIbRkQhLhBl/KZbgnWz2mcFeNS6AI0ezq0
vmOQ+d658q8buxDzIkQA+6pd7UMrAGIPReHpSNJQZDTzTskq1aEM75HDkQIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFGZkwmBOJE9rAD7D0MmDBB5MIo6hMB8GA1UdIwQY
MBaAFHIEe+FbJ1kC3PYX3D0OFtwfMIAiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMt
MWFiZTNhYzEwYWE2LzEvWm1UQ1lFNGtUMnNBUHNQUXlZTUVIa3dpanFFLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMtMWFiZTNhYzEwYWE2
LzEvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBAIcypU2x0an+7X1yOO4H
MfhGJhfv7KqH2xplJAKzRSr/XzxOU2YeoS4MMz3TQZiXNSXiQP5p36+zVt4M0JuR
Z/BevIcGTKEJKdQGEMCqSMqXELHMfPPjnaJ/SLz6Pr7JFPpmzP+9yRDueT1FyV1j
FVslgzvccsqEMsqfFvenhWG1P3hJ+avpbBKg1D4d5uknxsESc+3jxvDDY1ocmp4t
dOetHQxODRUb0OCmpLMuVOdT/oLhrC+Suh7FRq1G9OaW/26rBWwe465HsHImQf1I
EuhAZlnkZQo03jygOcd3jT+0wRrLvqyxNs6Ewry5EQJpr/l14Eao8glxAO4IWiIm
3BM=
-----END CERTIFICATE-----
Generated at Wed Apr 30 18:06:42 2025 by rpki-client