Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/kzEDKZ4hiYp7ZZqhsc2Bi-rZr7U.roa
File: kzEDKZ4hiYp7ZZqhsc2Bi-rZr7U.roa (raw, json)
Hash identifier: f5G140cnJW9dYKf/EG2PsA6XOvsMcIEqoXvbcdW9tFY=
Subject key identifier: 93:31:03:29:9E:21:89:8A:7B:65:9A:A1:B1:CD:81:8B:EA:D9:AF:B5
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 018736BAF4319FC0B2DFB1CE20092543CA2E
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/kzEDKZ4hiYp7ZZqhsc2Bi-rZr7U.roa
Signing time: Fri 31 Mar 2023 08:13:54 +0000
ROA not before: Fri 31 Mar 2023 08:13:54 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:36:ba:f4:31:9f:c0:b2:df:b1:ce:20:09:25:43:ca:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Mar 31 08:13:54 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=933103299e21898a7b659aa1b1cd818bead9afb5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:cc:8c:6d:28:f0:8b:15:af:65:d3:7c:92:28:
c2:1f:da:db:78:05:43:3c:40:d6:4a:8c:79:8a:df:
ed:cb:f3:9e:bf:4a:0b:ce:29:56:b2:10:74:e2:06:
5b:44:17:50:f1:3f:39:d3:6c:a5:84:96:e7:5d:70:
aa:36:93:01:39:ae:7f:22:b4:e8:4e:c8:3f:4d:5c:
43:ae:66:d4:91:c5:02:6d:65:50:ed:cc:78:db:45:
ae:d9:b0:d0:2c:c1:c8:06:9f:95:b2:57:65:66:fe:
06:8e:cd:01:6c:c1:c4:56:24:f4:a1:f8:ce:2e:fa:
f7:ce:cd:85:32:2e:b6:29:6d:ea:b8:b6:da:89:ff:
7d:f9:be:de:f4:3f:2f:ee:af:b5:15:43:1a:dc:47:
f6:1e:20:10:e2:ac:36:76:e3:d0:f0:06:0e:ce:5b:
7a:d7:39:81:89:cb:dc:0b:b4:c1:31:80:cc:c3:04:
1b:c2:a3:7d:a0:80:85:79:49:46:ab:e6:af:6e:f7:
08:ac:3d:c5:a2:dc:0f:a4:b7:28:08:82:a8:be:0e:
97:0d:c2:51:28:98:e3:77:66:34:c0:94:87:63:e4:
bd:a6:61:9e:b4:43:f9:81:86:7a:0c:8a:ca:47:c5:
23:ae:1e:9e:ac:cd:3e:bb:d8:9d:95:64:ab:44:e9:
ef:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:31:03:29:9E:21:89:8A:7B:65:9A:A1:B1:CD:81:8B:EA:D9:AF:B5
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/kzEDKZ4hiYp7ZZqhsc2Bi-rZr7U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
39:c9:30:00:21:c1:c9:87:7e:0d:54:d8:1a:e0:30:31:40:d0:
38:cf:2a:29:f0:0b:9f:7d:9f:8e:ca:79:3f:6e:c3:74:15:02:
f9:71:99:9b:34:b7:b7:b9:ac:d5:35:d1:53:f1:b4:20:5f:f2:
d0:09:0a:d0:31:80:05:dd:4d:c6:b5:ed:20:fc:5c:8b:39:fa:
a1:fb:c1:7e:6c:30:a4:ab:b2:3f:52:d4:e5:bb:ac:70:05:f4:
5b:20:5d:ce:ae:be:01:a0:ee:3f:b4:c3:a9:74:e6:14:7d:3e:
bc:6e:39:bd:a2:88:87:fa:4a:9e:c9:b5:8f:6f:75:a7:8e:01:
6d:bb:9c:26:4b:79:2d:73:d5:77:4b:02:a3:84:29:69:3a:72:
8d:9f:20:78:70:40:af:4e:71:85:23:c6:0f:46:bd:34:91:5c:
99:d1:85:6c:64:76:91:2e:f5:4f:b3:1b:fe:4b:79:33:e6:bd:
52:a4:e7:6d:41:93:e5:6f:88:3b:9c:51:c8:fc:f6:c0:84:48:
d8:79:4e:de:eb:20:12:e8:fb:c2:15:aa:49:4b:52:e7:ca:a6:
39:dd:14:bd:bc:cc:59:8b:7b:7c:37:98:29:0e:4b:96:af:a7:
87:a2:a6:68:cf:fc:ca:c3:90:5b:63:93:41:59:dc:4d:3f:4e:
ee:f1:ac:cd
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYc2uvQxn8Cy37HOIAklQ8ouMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcyMDQ3YmUxNWIyNzU5MDJkY2Y2MTdkYzNkMGUxNmRjMWYz
MDgwMjIwHhcNMjMwMzMxMDgxMzU0WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5MzMxMDMyOTllMjE4OThhN2I2NTlhYTFiMWNkODE4YmVhZDlhZmI1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsMyMbSjwixWvZdN8kijCH9rbeAVD
PEDWSox5it/ty/Oev0oLzilWshB04gZbRBdQ8T8502ylhJbnXXCqNpMBOa5/IrTo
Tsg/TVxDrmbUkcUCbWVQ7cx420Wu2bDQLMHIBp+VsldlZv4Gjs0BbMHEViT0ofjO
Lvr3zs2FMi62KW3quLbaif99+b7e9D8v7q+1FUMa3Ef2HiAQ4qw2duPQ8AYOzlt6
1zmBicvcC7TBMYDMwwQbwqN9oICFeUlGq+avbvcIrD3FotwPpLcoCIKovg6XDcJR
KJjjd2Y0wJSHY+S9pmGetEP5gYZ6DIrKR8Ujrh6erM0+u9idlWSrROnvAQIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFJMxAymeIYmKe2WaobHNgYvq2a+1MB8GA1UdIwQY
MBaAFHIEe+FbJ1kC3PYX3D0OFtwfMIAiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMt
MWFiZTNhYzEwYWE2LzEva3pFREtaNGhpWXA3WlpxaHNjMkJpLXJacjdVLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMtMWFiZTNhYzEwYWE2
LzEvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBADnJMAAhwcmHfg1U2Brg
MDFA0DjPKinwC599n47KeT9uw3QVAvlxmZs0t7e5rNU10VPxtCBf8tAJCtAxgAXd
Tca17SD8XIs5+qH7wX5sMKSrsj9S1OW7rHAF9FsgXc6uvgGg7j+0w6l05hR9Prxu
Ob2iiIf6Sp7JtY9vdaeOAW27nCZLeS1z1XdLAqOEKWk6co2fIHhwQK9OcYUjxg9G
vTSRXJnRhWxkdpEu9U+zG/5LeTPmvVKk521Bk+VviDucUcj89sCESNh5Tt7rIBLo
+8IVqklLUufKpjndFL28zFmLe3w3mCkOS5avp4eipmjP/MrDkFtjk0FZ3E0/Tu7x
rM0=
-----END CERTIFICATE-----
Generated at Fri May 2 06:12:01 2025 by rpki-client