Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/Zv0LmdEiHHAcBIrp2e6iaMcxOlk.roa
File: Zv0LmdEiHHAcBIrp2e6iaMcxOlk.roa (raw, json)
Hash identifier: tvVSbdhOp9rvNpNsgBgNb0RBHoKRsOUVKuVBmmMAlJw=
Subject key identifier: 66:FD:0B:99:D1:22:1C:70:1C:04:8A:E9:D9:EE:A2:68:C7:31:3A:59
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0188194F54DEE8E8C18B9221B314906BBF3A
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/Zv0LmdEiHHAcBIrp2e6iaMcxOlk.roa
Signing time: Sun 14 May 2023 08:10:09 +0000
ROA not before: Sun 14 May 2023 08:10:09 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:187:4695:a68a/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64:ffff:0:187:fa9a:b088/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:187:b2b8:a7dd/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:19:4f:54:de:e8:e8:c1:8b:92:21:b3:14:90:6b:bf:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: May 14 08:10:09 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=66fd0b99d1221c701c048ae9d9eea268c7313a59
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:68:be:fa:b2:1f:dd:d4:fc:6e:03:95:99:0d:
2d:32:5f:07:cb:67:70:1a:28:16:a6:9e:52:20:ef:
67:60:a5:fd:25:b3:65:69:18:4c:3a:95:ff:ef:1f:
94:59:ed:e9:5e:24:40:0d:81:46:72:99:3c:a2:c6:
c5:91:8b:65:22:f8:d6:23:d7:53:01:45:a1:23:2d:
d9:12:71:93:bf:12:8f:52:d3:f6:ba:64:31:83:e6:
83:37:55:ee:cf:6a:e7:93:b1:98:b2:ca:d9:a4:f2:
3b:6a:5f:94:f5:2e:2c:73:b6:2d:2f:b9:0f:58:c9:
81:ee:0b:2d:36:01:6b:a7:4d:ee:70:81:55:2f:b5:
02:fb:7a:48:c5:9c:4f:81:b2:04:0a:35:62:fa:b9:
db:a2:d4:87:74:35:0d:07:8a:85:cb:ad:0c:eb:dd:
d5:b6:23:93:23:85:75:88:c3:88:71:0f:01:18:29:
e6:ca:65:13:c6:1c:c5:39:c1:ad:ed:f7:76:20:94:
8a:1b:f7:dc:c8:36:a2:5e:57:a1:c4:f1:c5:a9:2e:
0a:9d:8f:77:aa:59:f3:d1:b1:d4:98:44:88:99:16:
dd:29:c6:77:c8:96:f9:f1:6e:5d:64:4a:67:2d:fe:
e3:b8:23:c1:e0:2d:ba:db:9b:7f:bd:08:e0:01:5c:
d7:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:FD:0B:99:D1:22:1C:70:1C:04:8A:E9:D9:EE:A2:68:C7:31:3A:59
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/Zv0LmdEiHHAcBIrp2e6iaMcxOlk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
10:4f:e2:ae:a4:dd:4f:ce:c6:3f:29:73:7b:bd:04:35:cc:0c:
85:3b:90:56:c2:b8:dd:c1:3a:5c:4c:ed:a9:e9:1e:6e:2a:3d:
d6:04:3b:e8:5f:42:6b:7d:0c:35:e8:75:20:d9:a2:e7:54:db:
e5:51:37:57:17:aa:60:30:84:7e:3e:0c:6a:e5:4d:c3:85:d3:
8d:37:f8:bb:9e:66:91:32:fe:38:e1:16:4d:75:09:35:8f:cf:
1f:dd:a2:43:13:a8:97:84:bf:40:44:7a:4f:8c:c8:8d:c7:cb:
1a:8b:73:b0:a4:87:66:82:95:a6:48:bb:9b:0b:3f:90:7e:03:
3a:e5:b0:78:fc:05:25:60:23:41:c2:f7:de:7e:f6:99:62:bd:
14:cb:5a:f3:06:1d:33:94:4d:2f:45:d6:d1:f6:5f:06:95:8f:
3a:15:06:71:66:d5:2b:0c:aa:fe:2b:3c:0a:15:f0:3c:8e:bd:
12:61:d2:eb:db:80:9d:e4:3f:4c:fa:68:53:83:73:35:43:50:
3a:f0:34:56:3b:27:e3:4b:c1:5a:c2:9f:ef:f7:e1:3e:d4:02:
a0:6b:e1:2b:03:be:38:6c:90:69:4f:5a:d9:70:6b:34:31:21:
98:e7:96:28:64:b1:0e:d1:4c:1d:92:0a:66:29:76:19:d4:44:
86:e8:bb:2e
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYgZT1Te6OjBi5IhsxSQa786MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcyMDQ3YmUxNWIyNzU5MDJkY2Y2MTdkYzNkMGUxNmRjMWYz
MDgwMjIwHhcNMjMwNTE0MDgxMDA5WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2NmZkMGI5OWQxMjIxYzcwMWMwNDhhZTlkOWVlYTI2OGM3MzEzYTU5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi2i++rIf3dT8bgOVmQ0tMl8Hy2dw
GigWpp5SIO9nYKX9JbNlaRhMOpX/7x+UWe3pXiRADYFGcpk8osbFkYtlIvjWI9dT
AUWhIy3ZEnGTvxKPUtP2umQxg+aDN1Xuz2rnk7GYssrZpPI7al+U9S4sc7YtL7kP
WMmB7gstNgFrp03ucIFVL7UC+3pIxZxPgbIECjVi+rnbotSHdDUNB4qFy60M693V
tiOTI4V1iMOIcQ8BGCnmymUTxhzFOcGt7fd2IJSKG/fcyDaiXlehxPHFqS4KnY93
qlnz0bHUmESImRbdKcZ3yJb58W5dZEpnLf7juCPB4C2625t/vQjgAVzX3QIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFGb9C5nRIhxwHASK6dnuomjHMTpZMB8GA1UdIwQY
MBaAFHIEe+FbJ1kC3PYX3D0OFtwfMIAiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMt
MWFiZTNhYzEwYWE2LzEvWnYwTG1kRWlISEFjQklycDJlNmlhTWN4T2xrLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMtMWFiZTNhYzEwYWE2
LzEvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBABBP4q6k3U/Oxj8pc3u9
BDXMDIU7kFbCuN3BOlxM7anpHm4qPdYEO+hfQmt9DDXodSDZoudU2+VRN1cXqmAw
hH4+DGrlTcOF0403+LueZpEy/jjhFk11CTWPzx/dokMTqJeEv0BEek+MyI3HyxqL
c7Ckh2aClaZIu5sLP5B+AzrlsHj8BSVgI0HC995+9plivRTLWvMGHTOUTS9F1tH2
XwaVjzoVBnFm1SsMqv4rPAoV8DyOvRJh0uvbgJ3kP0z6aFODczVDUDrwNFY7J+NL
wVrCn+/34T7UAqBr4SsDvjhskGlPWtlwazQxIZjnlihksQ7RTB2SCmYpdhnURIbo
uy4=
-----END CERTIFICATE-----
Generated at Wed Apr 30 20:08:11 2025 by rpki-client