Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/Zv5chYiKm5ODXPhUw1hhnYo6nCk.roa
File: Zv5chYiKm5ODXPhUw1hhnYo6nCk.roa (raw, json)
Hash identifier: b2RQ6gOX9aEuAES1coeiuujw/QGcbp53sk/YH2g36Ds=
Subject key identifier: 66:FE:5C:85:88:8A:9B:93:83:5C:F8:54:C3:58:61:9D:8A:3A:9C:29
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 01874EC261F8EE1A638E3135107F0D3FC5F8
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/Zv5chYiKm5ODXPhUw1hhnYo6nCk.roa
Signing time: Wed 05 Apr 2023 00:12:54 +0000
ROA not before: Wed 05 Apr 2023 00:12:54 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:187:4695:a68a/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:4e:c2:61:f8:ee:1a:63:8e:31:35:10:7f:0d:3f:c5:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Apr 5 00:12:54 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=66fe5c85888a9b93835cf854c358619d8a3a9c29
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:07:8e:f4:c9:19:3b:51:30:22:8f:ca:54:a0:
b7:8c:5e:92:e1:4a:ce:d8:b0:5a:53:06:23:42:16:
d6:bc:26:a3:5b:c6:87:de:68:65:39:5d:9c:ec:35:
95:b4:4f:84:aa:3a:e1:e8:90:30:a2:c2:68:d4:f8:
ae:a0:93:ee:d4:70:0f:3e:ba:e8:ae:0b:d8:9e:c0:
80:5f:c2:6d:ab:b4:36:10:0d:ec:4a:80:31:77:a6:
e9:e8:e3:79:eb:e8:5f:f4:f9:f3:a5:09:2a:bb:d6:
e5:d7:cb:a6:22:bb:9f:36:4b:3e:2d:83:07:7a:74:
9d:49:15:00:33:4e:a6:99:10:d4:a8:86:3a:43:dd:
18:cf:e4:86:28:d0:f2:cb:63:47:2e:17:33:61:01:
3a:ee:11:6c:3c:5d:c8:24:de:b5:a5:1f:24:eb:17:
39:1c:77:67:a5:79:c8:b8:2d:11:26:44:a2:93:42:
b6:cb:62:d7:4d:a1:51:fd:e3:12:d4:2e:8d:8a:b3:
d2:77:bf:5c:e2:52:39:75:89:5f:91:d8:8a:f6:4d:
3d:54:22:0a:51:81:43:a3:42:24:8b:71:3e:df:74:
ba:6d:13:36:2a:b8:ce:52:47:d7:42:e5:46:04:63:
9d:f5:36:df:41:0c:37:ca:f3:bb:ba:60:fc:dd:31:
53:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:FE:5C:85:88:8A:9B:93:83:5C:F8:54:C3:58:61:9D:8A:3A:9C:29
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/Zv5chYiKm5ODXPhUw1hhnYo6nCk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
2e:23:0f:17:ae:74:89:72:42:4a:b2:83:01:97:45:1e:fa:28:
10:aa:a9:fb:e3:6c:f8:72:f2:69:b9:43:53:08:70:a6:a3:0e:
8b:72:c3:c4:5b:1c:b7:50:80:73:4e:3a:32:2b:12:67:d1:ce:
7a:56:2d:f6:0c:30:83:e7:c4:f2:7c:31:56:13:ff:83:67:63:
57:d2:55:42:69:3c:3f:57:cc:1b:18:1b:16:97:be:32:ab:dd:
75:da:56:1a:d5:60:ae:9a:cf:df:ad:b1:84:23:0d:cc:9d:d1:
a2:c5:34:19:c8:10:ef:31:54:5b:dc:06:e9:74:02:0a:2d:ec:
6b:c3:db:1a:9a:c3:ff:4f:c7:09:2e:50:5a:ff:11:47:55:ad:
73:59:07:2a:da:81:c7:d3:9a:da:5e:d2:69:bf:e1:da:17:1b:
a0:27:41:d6:71:01:eb:61:84:08:69:53:6f:17:fa:eb:98:23:
16:71:21:f6:23:8a:3e:69:69:a0:af:35:76:b9:4e:cd:e9:ce:
32:a2:0c:db:b4:18:14:42:17:58:b7:2b:77:e7:86:10:9a:5a:
71:20:1b:fc:98:87:81:2f:5e:b8:34:53:a7:99:4d:eb:8c:00:
59:46:9d:fc:1f:47:d5:f3:39:5a:e1:f6:e3:2d:14:b5:83:97:
48:fd:03:ad
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYdOwmH47hpjjjE1EH8NP8X4MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcyMDQ3YmUxNWIyNzU5MDJkY2Y2MTdkYzNkMGUxNmRjMWYz
MDgwMjIwHhcNMjMwNDA1MDAxMjU0WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2NmZlNWM4NTg4OGE5YjkzODM1Y2Y4NTRjMzU4NjE5ZDhhM2E5YzI5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqQeO9MkZO1EwIo/KVKC3jF6S4UrO
2LBaUwYjQhbWvCajW8aH3mhlOV2c7DWVtE+Eqjrh6JAwosJo1PiuoJPu1HAPPrro
rgvYnsCAX8Jtq7Q2EA3sSoAxd6bp6ON56+hf9PnzpQkqu9bl18umIrufNks+LYMH
enSdSRUAM06mmRDUqIY6Q90Yz+SGKNDyy2NHLhczYQE67hFsPF3IJN61pR8k6xc5
HHdnpXnIuC0RJkSik0K2y2LXTaFR/eMS1C6NirPSd79c4lI5dYlfkdiK9k09VCIK
UYFDo0Iki3E+33S6bRM2KrjOUkfXQuVGBGOd9TbfQQw3yvO7umD83TFTiQIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFGb+XIWIipuTg1z4VMNYYZ2KOpwpMB8GA1UdIwQY
MBaAFHIEe+FbJ1kC3PYX3D0OFtwfMIAiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMt
MWFiZTNhYzEwYWE2LzEvWnY1Y2hZaUttNU9EWFBoVXcxaGhuWW82bkNrLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMtMWFiZTNhYzEwYWE2
LzEvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBAC4jDxeudIlyQkqygwGX
RR76KBCqqfvjbPhy8mm5Q1MIcKajDotyw8RbHLdQgHNOOjIrEmfRznpWLfYMMIPn
xPJ8MVYT/4NnY1fSVUJpPD9XzBsYGxaXvjKr3XXaVhrVYK6az9+tsYQjDcyd0aLF
NBnIEO8xVFvcBul0Agot7GvD2xqaw/9PxwkuUFr/EUdVrXNZByragcfTmtpe0mm/
4doXG6AnQdZxAethhAhpU28X+uuYIxZxIfYjij5paaCvNXa5Ts3pzjKiDNu0GBRC
F1i3K3fnhhCaWnEgG/yYh4EvXrg0U6eZTeuMAFlGnfwfR9XzOVrh9uMtFLWDl0j9
A60=
-----END CERTIFICATE-----
Generated at Sat May 3 01:56:40 2025 by rpki-client