Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/z8D3T66oWEIrV2rtwNZUY7Pzy00.roa
File: z8D3T66oWEIrV2rtwNZUY7Pzy00.roa (raw, json)
Hash identifier: TxTCL95+cC70yR1WwaAA5mhFUNNKEQeW3VVjuCEzz1Q=
Subject key identifier: CF:C0:F7:4F:AE:A8:58:42:2B:57:6A:ED:C0:D6:54:63:B3:F3:CB:4D
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 01875678FE2F5F088BF44F324214A3649C2B
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/z8D3T66oWEIrV2rtwNZUY7Pzy00.roa
Signing time: Thu 06 Apr 2023 12:09:42 +0000
ROA not before: Thu 06 Apr 2023 12:09:42 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:187:4695:a68a/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:56:78:fe:2f:5f:08:8b:f4:4f:32:42:14:a3:64:9c:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Apr 6 12:09:42 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=cfc0f74faea858422b576aedc0d65463b3f3cb4d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:ac:14:f1:77:34:b2:3d:d4:fb:61:5a:2b:ad:
fc:bd:db:c2:5a:1f:d9:94:a8:b2:3f:47:78:1e:03:
d0:32:b2:3c:47:dc:4e:2d:0e:56:7c:a0:81:2e:db:
e0:59:10:f0:9d:c6:52:b3:d0:5f:a0:25:54:7b:a3:
67:ad:df:15:27:86:37:3d:07:18:ae:24:1b:02:04:
9a:fc:15:df:88:ce:37:b3:e1:41:d9:62:f2:11:98:
c6:2b:37:ec:fe:47:eb:93:40:d7:b7:6d:fb:f1:4d:
af:ec:50:b8:1c:35:2a:d5:1d:1d:70:e6:cd:8d:79:
f5:1c:90:13:69:46:ee:62:25:8d:1f:ee:82:a3:05:
65:b9:a6:20:9d:e7:5c:0f:0f:14:85:cd:ac:56:31:
e9:da:2b:ac:1b:71:d6:46:db:4c:17:45:0a:af:97:
16:e6:ed:a7:2f:1e:ec:a9:eb:f4:f3:bf:cf:30:36:
0e:a9:a9:37:cd:3c:8b:e0:09:fd:3f:62:1a:c6:48:
33:b1:73:2c:22:b6:ca:64:50:fb:4b:e9:49:fc:bf:
6b:be:0c:fa:c4:2d:e9:9c:fb:61:b2:2a:32:62:07:
15:13:7b:dc:d1:c4:90:5e:2d:f9:ae:61:30:ed:ca:
21:65:d5:55:b0:ac:2c:65:cb:f7:85:e9:00:22:58:
37:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:C0:F7:4F:AE:A8:58:42:2B:57:6A:ED:C0:D6:54:63:B3:F3:CB:4D
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/z8D3T66oWEIrV2rtwNZUY7Pzy00.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
82:f7:e0:07:fb:4f:98:91:8f:27:42:9e:0d:fa:5b:12:b2:98:
9d:5d:30:4f:da:a9:8d:53:a7:d3:b0:8a:b7:32:34:b8:77:3e:
ed:60:c3:af:41:c0:75:90:a1:3f:9d:e5:5a:1a:34:6f:21:2b:
3e:0f:f0:60:90:a6:eb:eb:3d:ec:1d:00:38:1b:c7:c4:b2:9e:
e8:4c:ba:f4:7d:fa:18:5f:9f:b2:b0:ee:77:cf:40:19:34:45:
e0:17:ac:ca:4e:21:56:9e:35:66:bf:85:36:e2:0a:fe:91:39:
51:f5:0d:b1:4a:a8:39:ba:e9:41:e2:ee:bf:c4:cf:e8:51:81:
ff:2c:93:2c:97:46:ea:f7:6f:37:20:03:1b:91:04:e2:11:86:
e7:0d:b5:fa:31:ff:fb:68:cd:41:a7:41:72:32:29:4c:24:5b:
85:02:bf:55:c1:04:ff:4e:a3:ba:d0:48:4d:68:f1:00:14:c5:
c5:9e:7a:ae:4d:1a:26:af:d1:7b:be:8c:68:e2:c6:d3:ef:bc:
43:58:56:f6:f0:c9:bb:5d:f8:47:29:43:97:c4:4b:70:e2:5e:
be:54:1a:25:bc:f8:54:19:80:58:46:e2:9b:03:5d:76:8c:2c:
26:d7:ba:af:5d:b9:16:41:f6:e6:0c:44:4f:bb:3e:1a:a1:c3:
75:5e:73:be
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYdWeP4vXwiL9E8yQhSjZJwrMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcyMDQ3YmUxNWIyNzU5MDJkY2Y2MTdkYzNkMGUxNmRjMWYz
MDgwMjIwHhcNMjMwNDA2MTIwOTQyWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjZmMwZjc0ZmFlYTg1ODQyMmI1NzZhZWRjMGQ2NTQ2M2IzZjNjYjRkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgqwU8Xc0sj3U+2FaK638vdvCWh/Z
lKiyP0d4HgPQMrI8R9xOLQ5WfKCBLtvgWRDwncZSs9BfoCVUe6Nnrd8VJ4Y3PQcY
riQbAgSa/BXfiM43s+FB2WLyEZjGKzfs/kfrk0DXt2378U2v7FC4HDUq1R0dcObN
jXn1HJATaUbuYiWNH+6CowVluaYgnedcDw8Uhc2sVjHp2iusG3HWRttMF0UKr5cW
5u2nLx7sqev087/PMDYOqak3zTyL4An9P2IaxkgzsXMsIrbKZFD7S+lJ/L9rvgz6
xC3pnPthsioyYgcVE3vc0cSQXi35rmEw7cohZdVVsKwsZcv3hekAIlg3mQIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFM/A90+uqFhCK1dq7cDWVGOz88tNMB8GA1UdIwQY
MBaAFHIEe+FbJ1kC3PYX3D0OFtwfMIAiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMt
MWFiZTNhYzEwYWE2LzEvejhEM1Q2Nm9XRUlyVjJydHdOWlVZN1B6eTAwLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMtMWFiZTNhYzEwYWE2
LzEvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBAIL34Af7T5iRjydCng36
WxKymJ1dME/aqY1Tp9OwircyNLh3Pu1gw69BwHWQoT+d5VoaNG8hKz4P8GCQpuvr
PewdADgbx8SynuhMuvR9+hhfn7Kw7nfPQBk0ReAXrMpOIVaeNWa/hTbiCv6ROVH1
DbFKqDm66UHi7r/Ez+hRgf8skyyXRur3bzcgAxuRBOIRhucNtfox//tozUGnQXIy
KUwkW4UCv1XBBP9Oo7rQSE1o8QAUxcWeeq5NGiav0Xu+jGjixtPvvENYVvbwybtd
+EcpQ5fES3DiXr5UGiW8+FQZgFhG4psDXXaMLCbXuq9duRZB9uYMRE+7Phqhw3Ve
c74=
-----END CERTIFICATE-----
Generated at Fri May 2 07:19:08 2025 by rpki-client