Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/ZqwdP4-FZmKQpY8RhF1SMu-u_TQ.roa
File: ZqwdP4-FZmKQpY8RhF1SMu-u_TQ.roa (raw, json)
Hash identifier: sBUKjMOO74JVcFGm6A5eoI9JT1O6hrHHIlQCQPBqKgg=
Subject key identifier: 66:AC:1D:3F:8F:85:66:62:90:A5:8F:11:84:5D:52:32:EF:AE:FD:34
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 8F79E6C0
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/ZqwdP4-FZmKQpY8RhF1SMu-u_TQ.roa
Signing time: Fri 24 Jun 2022 16:11:41 +0000
ROA not before: Fri 24 Jun 2022 16:11:41 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2407130816 (0x8f79e6c0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Jun 24 16:11:41 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=66ac1d3f8f85666290a58f11845d5232efaefd34
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:8a:43:dc:5d:b7:cf:6f:43:81:ee:97:b8:b3:
e8:07:51:60:53:b8:41:45:d3:d7:b1:cb:85:6f:17:
97:3b:eb:e0:76:2c:7c:57:68:37:11:23:fa:65:87:
0b:6a:03:b4:57:f1:79:34:2e:d8:c9:8f:4e:2b:6a:
79:ff:f1:ad:ce:14:e9:cf:6f:85:ff:2f:f7:82:6e:
e1:d4:69:fd:be:58:45:71:bd:25:0d:f8:b6:f5:63:
68:f0:36:3c:f5:44:2e:87:9c:6c:30:fc:9a:c4:1c:
13:e1:66:a1:7d:90:eb:14:db:1d:ea:72:cb:6e:58:
87:88:2d:f4:a3:7e:0d:0e:f2:b7:90:8a:32:5b:5f:
d9:74:29:3d:bd:d0:ac:f3:0d:c3:52:42:9e:c7:02:
a9:86:05:01:35:86:f1:78:19:7c:05:ac:a3:0c:58:
5e:c5:70:52:51:be:42:c5:7b:19:a0:71:fd:ef:e8:
17:31:fd:c6:25:b5:11:4c:c7:92:f0:3c:f9:10:cc:
89:0e:97:05:25:bf:58:8a:7a:dd:4f:8b:57:2a:39:
77:79:c2:ec:1b:62:8a:db:be:07:5d:c3:73:26:eb:
8f:90:fc:58:fa:5f:0d:ff:74:73:81:f0:53:2a:0e:
7e:97:37:0a:04:1c:61:b9:25:12:b2:96:a1:26:8e:
f5:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:AC:1D:3F:8F:85:66:62:90:A5:8F:11:84:5D:52:32:EF:AE:FD:34
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/ZqwdP4-FZmKQpY8RhF1SMu-u_TQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
65:6b:85:66:31:80:be:69:39:fc:b9:81:1f:ee:f3:b6:a0:ac:
ef:d0:31:f1:64:e3:49:64:d7:0b:f7:65:43:88:82:1f:7b:a6:
d2:d4:cb:b4:12:23:20:f5:bc:4e:4d:9c:40:e6:8a:91:b2:11:
35:95:ef:0e:37:10:8b:5b:08:a3:e9:c0:86:e5:fa:8e:18:7d:
50:0c:c8:84:de:e1:96:7a:1f:17:43:5c:c3:a2:07:57:c1:e1:
59:5d:0a:10:c1:d9:bd:4d:1c:72:41:90:b9:b4:7e:76:c6:23:
97:92:72:3b:92:38:14:99:02:79:e9:da:fe:9c:64:3c:26:d9:
fd:c1:53:b4:2f:c3:4a:1c:36:31:a4:8a:30:b9:35:3c:2d:b5:
ea:6d:54:e3:fd:6a:bf:96:cb:ac:3f:ea:79:3a:f0:00:7f:de:
a3:b1:f6:69:b2:b7:d5:9a:f0:0a:ac:5d:d0:80:bc:f2:49:99:
ee:21:7c:03:04:81:1c:c8:d4:d7:49:34:7e:54:3d:cf:09:58:
92:32:1c:c2:d1:31:aa:03:55:fc:05:11:ae:d0:75:3d:25:ce:
56:7a:97:35:08:c0:ce:bc:15:37:70:ed:01:bb:41:53:89:b5:
95:1f:7a:ea:4c:73:be:78:00:d7:da:43:0d:95:c8:35:64:e9:
65:d7:2e:d5
-----BEGIN CERTIFICATE-----
MIIFATCCA+mgAwIBAgIFAI955sAwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMo
NzIwNDdiZTE1YjI3NTkwMmRjZjYxN2RjM2QwZTE2ZGMxZjMwODAyMjAeFw0yMjA2
MjQxNjExNDFaFw0yMzA3MDEwMDAwMDBaMDMxMTAvBgNVBAMTKDY2YWMxZDNmOGY4
NTY2NjI5MGE1OGYxMTg0NWQ1MjMyZWZhZWZkMzQwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQCWikPcXbfPb0OB7pe4s+gHUWBTuEFF09exy4VvF5c76+B2
LHxXaDcRI/plhwtqA7RX8Xk0LtjJj04rann/8a3OFOnPb4X/L/eCbuHUaf2+WEVx
vSUN+Lb1Y2jwNjz1RC6HnGww/JrEHBPhZqF9kOsU2x3qcstuWIeILfSjfg0O8reQ
ijJbX9l0KT290KzzDcNSQp7HAqmGBQE1hvF4GXwFrKMMWF7FcFJRvkLFexmgcf3v
6Bcx/cYltRFMx5LwPPkQzIkOlwUlv1iKet1Pi1cqOXd5wuwbYorbvgddw3Mm64+Q
/Fj6Xw3/dHOB8FMqDn6XNwoEHGG5JRKylqEmjvVbAgMBAAGjggIaMIICFjAdBgNV
HQ4EFgQUZqwdP4+FZmKQpY8RhF1SMu+u/TQwHwYDVR0jBBgwFoAUcgR74VsnWQLc
9hfcPQ4W3B8wgCIwDgYDVR0PAQH/BAQDAgeAMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvREVGQVVM
VC9jZ1I3NFZzbldRTGM5aGZjUFE0VzNCOHdnQ0kuY2VyMIGNBggrBgEFBQcBCwSB
gDB+MHwGCCsGAQUFBzALhnByc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9y
eS9ERUZBVUxULzVlLzc5ODQ0Ny0yMWY0LTQ1YWItOTlkYy0xYWJlM2FjMTBhYTYv
MS9acXdkUDQtRlptS1FwWThSaEYxU011LXVfVFEucm9hMIGBBgNVHR8EejB4MHag
dKByhnByc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzVl
Lzc5ODQ0Ny0yMWY0LTQ1YWItOTlkYy0xYWJlM2FjMTBhYTYvMS9jZ1I3NFZzbldR
TGM5aGZjUFE0VzNCOHdnQ0kuY3JsMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw
MAYIKwYBBQUHAQcBAf8EITAfMAwEAgABMAYDBAPBABgwDwQCAAIwCQMHACABBnwA
ZDANBgkqhkiG9w0BAQsFAAOCAQEAZWuFZjGAvmk5/LmBH+7ztqCs79Ax8WTjSWTX
C/dlQ4iCH3um0tTLtBIjIPW8Tk2cQOaKkbIRNZXvDjcQi1sIo+nAhuX6jhh9UAzI
hN7hlnofF0Ncw6IHV8HhWV0KEMHZvU0cckGQubR+dsYjl5JyO5I4FJkCeena/pxk
PCbZ/cFTtC/DShw2MaSKMLk1PC216m1U4/1qv5bLrD/qeTrwAH/eo7H2abK31Zrw
Cqxd0IC88kmZ7iF8AwSBHMjU10k0flQ9zwlYkjIcwtExqgNV/AURrtB1PSXOVnqX
NQjAzrwVN3DtAbtBU4m1lR966kxzvngA19pDDZXINWTpZdcu1Q==
-----END CERTIFICATE-----
Generated at Fri May 2 04:30:17 2025 by rpki-client