Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/b_zeJmXssQu2X5G_zeNR2FOf7MA.roa
File: b_zeJmXssQu2X5G_zeNR2FOf7MA.roa (raw, json)
Hash identifier: ZCyp5Tkns3l07YA4ItOC+d9jzMVmcLjJM/25lWwnzY4=
Subject key identifier: 6F:FC:DE:26:65:EC:B1:0B:B6:5F:91:BF:CD:E3:51:D8:53:9F:EC:C0
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 74533777
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/b_zeJmXssQu2X5G_zeNR2FOf7MA.roa
Signing time: Mon 21 Mar 2022 04:10:14 +0000
ROA not before: Mon 21 Mar 2022 04:10:14 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:17f:1bf4:40b5/128 maxlen: 128
2001:67c:64:ffff:0:17f:20ac:a2bd/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:17f:87e3:2531/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1951610743 (0x74533777)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Mar 21 04:10:14 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=6ffcde2665ecb10bb65f91bfcde351d8539fecc0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:2c:f8:6b:11:de:f0:13:25:a4:55:12:9e:f4:
0a:79:fa:72:ce:d5:d5:13:19:aa:2e:a5:ea:a7:53:
ce:ff:89:b1:23:16:5e:51:19:62:3c:86:37:f8:5b:
53:a9:04:d8:b4:b6:95:cf:43:db:f4:8d:55:1f:c7:
28:3e:a7:2b:42:10:cd:b7:69:14:ac:b1:53:c0:67:
e9:b9:a5:d5:e9:be:f6:8b:e2:bc:f0:f6:cb:c2:21:
4c:08:9d:22:36:e3:19:11:97:a0:b0:80:81:12:ab:
2c:c9:76:fa:6f:45:2b:75:52:44:08:af:a0:85:25:
a6:87:1a:53:04:94:06:74:ef:d0:fe:24:c7:3d:03:
12:d5:7d:9c:6c:59:d4:e0:be:d6:16:99:48:51:68:
a8:fe:5c:8b:39:fd:be:87:19:55:5b:9e:e8:e3:3d:
5f:b1:94:a9:9b:97:f5:62:46:46:15:03:03:99:10:
9e:b1:6e:a2:47:cb:36:c2:1b:3e:f2:6b:6f:5f:96:
4b:55:db:25:ef:49:95:a3:f9:2b:0e:1a:d6:23:31:
b1:8b:bf:39:08:a9:15:c5:a6:9b:8e:3e:39:a1:45:
60:6a:8c:95:b8:55:a5:2e:92:2e:58:be:3f:86:60:
d6:48:0b:d6:9d:9f:ca:4f:d2:d6:90:94:13:d1:ff:
36:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:FC:DE:26:65:EC:B1:0B:B6:5F:91:BF:CD:E3:51:D8:53:9F:EC:C0
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/b_zeJmXssQu2X5G_zeNR2FOf7MA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
19:f9:07:70:29:7b:39:6d:95:f6:b4:32:74:46:43:53:0b:21:
2b:2e:25:f4:d4:41:0a:c3:42:2e:3b:c8:c8:93:c8:28:7a:ef:
d0:c3:84:fe:d2:13:0e:57:0e:5e:47:45:21:a4:c5:28:7e:73:
17:19:77:91:45:70:df:00:ea:1e:ae:92:fe:0e:75:4d:a2:6b:
4d:73:9a:88:d1:b1:ee:05:d9:61:7b:dd:69:d4:2b:1e:14:04:
ca:f0:43:b4:b6:e7:5f:a9:48:58:9b:47:3c:fa:20:73:94:7a:
a1:08:38:47:92:25:19:31:d3:26:e2:50:04:39:bd:9c:8d:97:
e4:e9:9c:80:96:ef:00:a4:2c:70:20:a7:38:05:81:a8:84:01:
fc:37:51:cd:08:13:08:da:c2:f4:16:77:cd:f8:46:4e:48:a9:
4c:d6:a1:41:ac:1e:3d:34:88:e7:f4:b1:e5:0e:e7:2c:f1:bd:
fd:cb:75:bc:d7:e2:b2:7e:41:ed:7b:c6:e5:16:ed:94:b1:49:
cd:e6:fd:b9:5a:7d:83:68:df:80:de:63:c6:da:12:de:3d:1d:
90:26:b1:1c:9a:60:22:9d:50:78:7d:12:47:ba:d1:77:be:ce:
a4:40:7c:5c:db:43:ea:2e:c4:17:0c:f1:21:b4:c7:ad:5d:c3:
16:63:73:ef
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgIEdFM3dzANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg3
MjA0N2JlMTViMjc1OTAyZGNmNjE3ZGMzZDBlMTZkYzFmMzA4MDIyMB4XDTIyMDMy
MTA0MTAxNFoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoNmZmY2RlMjY2NWVj
YjEwYmI2NWY5MWJmY2RlMzUxZDg1MzlmZWNjMDCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAIgs+GsR3vATJaRVEp70Cnn6cs7V1RMZqi6l6qdTzv+JsSMW
XlEZYjyGN/hbU6kE2LS2lc9D2/SNVR/HKD6nK0IQzbdpFKyxU8Bn6bml1em+9ovi
vPD2y8IhTAidIjbjGRGXoLCAgRKrLMl2+m9FK3VSRAivoIUlpocaUwSUBnTv0P4k
xz0DEtV9nGxZ1OC+1haZSFFoqP5cizn9vocZVVue6OM9X7GUqZuX9WJGRhUDA5kQ
nrFuokfLNsIbPvJrb1+WS1XbJe9JlaP5Kw4a1iMxsYu/OQipFcWmm44+OaFFYGqM
lbhVpS6SLli+P4Zg1kgL1p2fyk/S1pCUE9H/Nk0CAwEAAaOCAhowggIWMB0GA1Ud
DgQWBBRv/N4mZeyxC7Zfkb/N41HYU5/swDAfBgNVHSMEGDAWgBRyBHvhWydZAtz2
F9w9DhbcHzCAIjAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L2NnUjc0VnNuV1FMYzloZmNQUTRXM0I4d2dDSS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvNWUvNzk4NDQ3LTIxZjQtNDVhYi05OWRjLTFhYmUzYWMxMGFhNi8x
L2JfemVKbVhzc1F1Mlg1R196ZU5SMkZPZjdNQS5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNWUv
Nzk4NDQ3LTIxZjQtNDVhYi05OWRjLTFhYmUzYWMxMGFhNi8xL2NnUjc0VnNuV1FM
YzloZmNQUTRXM0I4d2dDSS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAw
BggrBgEFBQcBBwEB/wQhMB8wDAQCAAEwBgMEA8EAGDAPBAIAAjAJAwcAIAEGfABk
MA0GCSqGSIb3DQEBCwUAA4IBAQAZ+QdwKXs5bZX2tDJ0RkNTCyErLiX01EEKw0Iu
O8jIk8goeu/Qw4T+0hMOVw5eR0UhpMUofnMXGXeRRXDfAOoerpL+DnVNomtNc5qI
0bHuBdlhe91p1CseFATK8EO0tudfqUhYm0c8+iBzlHqhCDhHkiUZMdMm4lAEOb2c
jZfk6ZyAlu8ApCxwIKc4BYGohAH8N1HNCBMI2sL0FnfN+EZOSKlM1qFBrB49NIjn
9LHlDucs8b39y3W81+KyfkHte8blFu2UsUnN5v25Wn2DaN+A3mPG2hLePR2QJrEc
mmAinVB4fRJHutF3vs6kQHxc20PqLsQXDPEhtMetXcMWY3Pv
-----END CERTIFICATE-----
Generated at Wed Apr 30 17:39:30 2025 by rpki-client