Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/ZxedPxqgA-kTUGPHvd3GsDjgGWo.roa
File: ZxedPxqgA-kTUGPHvd3GsDjgGWo.roa (raw, json)
Hash identifier: RKoIJ9NpksvILffTlyZ04JoFYz4QBm8Z6ReM3fRAFf0=
Subject key identifier: 67:17:9D:3F:1A:A0:03:E9:13:50:63:C7:BD:DD:C6:B0:38:E0:19:6A
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0188269D38469B0C4ED9E889A1ACE8A55B50
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/ZxedPxqgA-kTUGPHvd3GsDjgGWo.roa
Signing time: Tue 16 May 2023 22:10:17 +0000
ROA not before: Tue 16 May 2023 22:10:17 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:187:4695:a68a/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64:ffff:0:187:fa9a:b088/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:187:b2b8:a7dd/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:26:9d:38:46:9b:0c:4e:d9:e8:89:a1:ac:e8:a5:5b:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: May 16 22:10:17 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=67179d3f1aa003e9135063c7bdddc6b038e0196a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:31:ba:f6:17:11:ee:40:e8:46:1f:76:e0:dd:
e3:fc:91:90:17:4f:1b:40:1c:54:ea:fc:0d:f2:41:
0e:dc:94:cc:0f:9a:ff:99:8c:67:47:d1:ab:61:85:
18:c8:ad:6a:f7:94:f0:56:3d:cc:57:95:f2:b1:cf:
e9:dd:42:c4:c2:16:ce:80:32:b8:f6:ab:f7:12:d3:
96:28:b4:83:72:de:77:41:db:8b:a4:56:db:23:9f:
c1:d8:d1:ab:a3:0c:56:70:65:c6:9a:3b:5f:e3:4e:
2f:a0:12:94:4f:a0:18:ad:ca:0f:cf:ce:28:12:aa:
3f:c4:7a:d6:8d:a2:d7:d7:37:8a:b1:15:f9:bb:80:
c0:02:99:92:61:85:9f:93:00:24:a4:dc:50:dc:a2:
70:25:82:f9:84:29:ac:49:27:19:d7:a1:10:ad:37:
eb:ce:ef:78:6e:dc:ae:87:a0:4d:8c:61:01:2b:b7:
d8:69:1c:c7:52:20:41:fa:16:22:2f:67:9f:a7:d8:
40:45:f1:fc:65:f7:33:72:57:04:bb:c5:92:82:4c:
40:c9:7b:96:8e:df:b4:3f:41:d4:fc:34:18:28:fb:
42:e7:35:6f:25:b6:8f:bb:f5:4f:6d:f2:0e:95:23:
de:37:d3:fd:05:ae:9f:49:c4:6e:a8:97:9c:9f:8c:
7e:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:17:9D:3F:1A:A0:03:E9:13:50:63:C7:BD:DD:C6:B0:38:E0:19:6A
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/ZxedPxqgA-kTUGPHvd3GsDjgGWo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
08:2e:32:40:a0:1f:c6:90:ee:8f:a1:0e:6a:6f:79:fc:a9:70:
c5:fc:9d:85:d0:43:91:64:e7:c8:90:7f:70:5f:2e:4e:60:05:
84:f2:d9:fd:28:5b:47:62:12:dc:5d:bd:a9:d7:b1:b3:0d:6c:
f9:a0:9b:5d:a4:f7:42:ce:d6:25:11:a7:4d:a2:2a:e3:a7:6e:
29:3f:68:46:97:19:a3:a6:8b:3c:03:29:d4:16:96:4e:fc:c1:
a3:34:a6:6b:f9:0f:6d:b9:a3:09:5f:85:a7:56:64:37:a8:79:
90:a5:93:af:3a:bf:33:13:b0:fa:c1:22:21:11:02:4f:98:15:
8b:1a:94:7e:1f:b9:26:eb:f8:ca:3b:d1:65:c0:6c:0e:49:aa:
d6:37:19:16:d6:3e:67:f8:ca:8f:af:a5:30:8f:04:9d:c0:60:
32:12:81:bc:74:d4:96:86:51:81:43:2f:97:ba:82:a3:d7:a4:
71:7b:e9:0a:54:c5:a5:a1:65:5a:1a:53:d1:d3:11:db:20:be:
50:3f:2c:fc:b1:da:5b:94:d0:af:10:06:db:9a:cb:fb:95:0a:
39:95:a9:16:43:29:68:7f:78:13:a8:c0:f8:09:4f:b0:f6:e5:
22:77:2d:ab:10:10:53:3b:25:34:84:cc:8c:5d:ba:97:69:8b:
a6:3d:38:38
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYgmnThGmwxO2eiJoazopVtQMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcyMDQ3YmUxNWIyNzU5MDJkY2Y2MTdkYzNkMGUxNmRjMWYz
MDgwMjIwHhcNMjMwNTE2MjIxMDE3WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2NzE3OWQzZjFhYTAwM2U5MTM1MDYzYzdiZGRkYzZiMDM4ZTAxOTZhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnzG69hcR7kDoRh924N3j/JGQF08b
QBxU6vwN8kEO3JTMD5r/mYxnR9GrYYUYyK1q95TwVj3MV5Xysc/p3ULEwhbOgDK4
9qv3EtOWKLSDct53QduLpFbbI5/B2NGrowxWcGXGmjtf404voBKUT6AYrcoPz84o
Eqo/xHrWjaLX1zeKsRX5u4DAApmSYYWfkwAkpNxQ3KJwJYL5hCmsSScZ16EQrTfr
zu94btyuh6BNjGEBK7fYaRzHUiBB+hYiL2efp9hARfH8ZfczclcEu8WSgkxAyXuW
jt+0P0HU/DQYKPtC5zVvJbaPu/VPbfIOlSPeN9P9Ba6fScRuqJecn4x+1QIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFGcXnT8aoAPpE1Bjx73dxrA44BlqMB8GA1UdIwQY
MBaAFHIEe+FbJ1kC3PYX3D0OFtwfMIAiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMt
MWFiZTNhYzEwYWE2LzEvWnhlZFB4cWdBLWtUVUdQSHZkM0dzRGpnR1dvLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMtMWFiZTNhYzEwYWE2
LzEvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBAAguMkCgH8aQ7o+hDmpv
efypcMX8nYXQQ5Fk58iQf3BfLk5gBYTy2f0oW0diEtxdvanXsbMNbPmgm12k90LO
1iURp02iKuOnbik/aEaXGaOmizwDKdQWlk78waM0pmv5D225owlfhadWZDeoeZCl
k686vzMTsPrBIiERAk+YFYsalH4fuSbr+Mo70WXAbA5JqtY3GRbWPmf4yo+vpTCP
BJ3AYDISgbx01JaGUYFDL5e6gqPXpHF76QpUxaWhZVoaU9HTEdsgvlA/LPyx2luU
0K8QBtuay/uVCjmVqRZDKWh/eBOowPgJT7D25SJ3LasQEFM7JTSEzIxdupdpi6Y9
ODg=
-----END CERTIFICATE-----
Generated at Wed Apr 30 22:11:48 2025 by rpki-client