Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/zEW3K7jTkflxh59fMx17USjSaYs.roa
File: zEW3K7jTkflxh59fMx17USjSaYs.roa (raw, json)
Hash identifier: wREFQY1lEGGaguTrgLk7WjGUqPySuiu+2HVzja1n7uE=
Subject key identifier: CC:45:B7:2B:B8:D3:91:F9:71:87:9F:5F:33:1D:7B:51:28:D2:69:8B
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0181E15DB3E28E6E3CE86AB794DB45A73C25
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/zEW3K7jTkflxh59fMx17USjSaYs.roa
Signing time: Sat 09 Jul 2022 05:10:23 +0000
ROA not before: Sat 09 Jul 2022 05:10:23 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:81:e1:5d:b3:e2:8e:6e:3c:e8:6a:b7:94:db:45:a7:3c:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Jul 9 05:10:23 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=cc45b72bb8d391f971879f5f331d7b5128d2698b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:c2:bc:93:f8:a3:c8:e7:77:9c:f2:27:07:61:
03:62:6b:e1:23:13:1e:5a:d1:09:0f:ef:6d:4d:ee:
60:f7:f4:15:6e:12:d3:03:3c:66:1b:41:1c:7b:ab:
62:48:e4:63:9a:58:66:b8:52:6d:69:e8:ec:88:23:
9d:e4:70:a4:06:0d:b8:ae:9a:21:8b:48:51:29:92:
d5:36:58:cc:fe:d1:fd:0a:dd:2a:84:d0:fc:2c:5d:
e5:ca:08:d4:27:a2:fb:d5:21:b6:ff:22:d1:05:b5:
03:c2:b7:30:ed:2c:2f:93:45:e3:e5:c0:c8:06:ff:
1e:11:84:6b:ae:ca:e4:90:b3:eb:74:29:35:80:28:
79:14:4d:41:ee:90:5e:88:dd:7f:29:d4:9d:67:25:
12:1d:ce:f4:d4:41:ef:65:97:3f:14:16:aa:35:c9:
1c:23:67:e0:6e:fc:80:08:bb:d6:f9:7c:30:65:f1:
5a:b7:b4:a7:fd:d4:f2:68:92:d3:e6:2d:0f:b9:2d:
9d:03:ff:57:bd:4c:d0:94:86:7c:d9:2f:16:bf:95:
6a:af:8e:83:39:76:b6:48:f0:7e:04:29:95:b3:97:
02:9f:8f:60:44:21:6b:b0:1a:b9:24:96:e0:9c:8e:
06:66:13:98:02:ea:3f:73:91:c7:35:12:18:c7:da:
7d:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:45:B7:2B:B8:D3:91:F9:71:87:9F:5F:33:1D:7B:51:28:D2:69:8B
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/zEW3K7jTkflxh59fMx17USjSaYs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
a5:db:05:da:7f:d3:3e:74:c4:60:23:bf:ce:a0:69:12:da:3d:
8b:c6:25:6f:62:de:a4:cc:dc:6d:33:a4:49:26:0f:dd:98:50:
ae:43:06:ef:a5:bc:7c:85:09:f1:b4:3d:85:16:5b:31:ae:b7:
7a:6b:0b:8e:0d:cd:6c:0e:c5:a6:61:ef:9d:70:64:68:ee:ac:
17:cf:9a:af:14:50:b8:7f:2f:a6:f5:14:69:27:16:03:18:54:
b1:96:cc:96:e2:c7:96:6f:a8:b4:a7:89:b9:24:1e:e1:df:75:
07:73:df:83:f9:cd:57:9d:37:22:04:bb:be:79:69:2a:88:81:
26:eb:77:4b:64:87:75:5b:62:13:66:22:fa:11:a0:98:2b:c9:
d4:67:1f:f3:ce:03:6e:5f:87:c4:7b:9b:f9:0e:e7:d6:ee:09:
9e:51:d7:cd:7c:d6:a3:f3:fd:45:2f:ab:77:37:b2:e8:f2:56:
ae:7a:d7:c4:bd:e6:b7:11:74:be:98:4e:32:9a:f7:a6:26:ad:
f4:44:bd:af:be:e6:42:63:ea:e0:44:d7:41:f4:8d:57:94:c7:
12:7b:36:5b:14:8a:0b:a8:a5:c8:65:2f:0f:e8:d1:b0:1c:bb:
a8:67:c6:e0:66:1f:e5:88:fb:ca:3e:47:a1:c7:16:12:cd:48:
52:05:3b:0d
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYHhXbPijm486Gq3lNtFpzwlMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcyMDQ3YmUxNWIyNzU5MDJkY2Y2MTdkYzNkMGUxNmRjMWYz
MDgwMjIwHhcNMjIwNzA5MDUxMDIzWhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjYzQ1YjcyYmI4ZDM5MWY5NzE4NzlmNWYzMzFkN2I1MTI4ZDI2OThiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnMK8k/ijyOd3nPInB2EDYmvhIxMe
WtEJD+9tTe5g9/QVbhLTAzxmG0Ece6tiSORjmlhmuFJtaejsiCOd5HCkBg24rpoh
i0hRKZLVNljM/tH9Ct0qhND8LF3lygjUJ6L71SG2/yLRBbUDwrcw7Swvk0Xj5cDI
Bv8eEYRrrsrkkLPrdCk1gCh5FE1B7pBeiN1/KdSdZyUSHc701EHvZZc/FBaqNckc
I2fgbvyACLvW+XwwZfFat7Sn/dTyaJLT5i0PuS2dA/9XvUzQlIZ82S8Wv5Vqr46D
OXa2SPB+BCmVs5cCn49gRCFrsBq5JJbgnI4GZhOYAuo/c5HHNRIYx9p9mQIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFMxFtyu405H5cYefXzMde1Eo0mmLMB8GA1UdIwQY
MBaAFHIEe+FbJ1kC3PYX3D0OFtwfMIAiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMt
MWFiZTNhYzEwYWE2LzEvekVXM0s3alRrZmx4aDU5Zk14MTdVU2pTYVlzLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMtMWFiZTNhYzEwYWE2
LzEvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBAKXbBdp/0z50xGAjv86g
aRLaPYvGJW9i3qTM3G0zpEkmD92YUK5DBu+lvHyFCfG0PYUWWzGut3prC44NzWwO
xaZh751wZGjurBfPmq8UULh/L6b1FGknFgMYVLGWzJbix5ZvqLSnibkkHuHfdQdz
34P5zVedNyIEu755aSqIgSbrd0tkh3VbYhNmIvoRoJgrydRnH/POA25fh8R7m/kO
59buCZ5R18181qPz/UUvq3c3sujyVq5618S95rcRdL6YTjKa96YmrfREva++5kJj
6uBE10H0jVeUxxJ7NlsUiguopchlLw/o0bAcu6hnxuBmH+WI+8o+R6HHFhLNSFIF
Ow0=
-----END CERTIFICATE-----
Generated at Fri May 2 00:08:21 2025 by rpki-client