Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/zKDZyC2ka3SqUgoXNDuae9I3gfk.roa
File: zKDZyC2ka3SqUgoXNDuae9I3gfk.roa (raw, json)
Hash identifier: uL4d5zMouZuCSHIXFZ9dG1lwU+xlf2LOt+tulzB4oHc=
Subject key identifier: CC:A0:D9:C8:2D:A4:6B:74:AA:52:0A:17:34:3B:9A:7B:D2:37:81:F9
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0189905F89E3F8296D4C28A09C895C546B76
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/zKDZyC2ka3SqUgoXNDuae9I3gfk.roa
Signing time: Wed 26 Jul 2023 04:05:27 +0000
ROA not before: Wed 26 Jul 2023 04:05:27 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:188:7858:a003/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:189:905e:a9a8/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:90:5f:89:e3:f8:29:6d:4c:28:a0:9c:89:5c:54:6b:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Jul 26 04:05:27 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=cca0d9c82da46b74aa520a17343b9a7bd23781f9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:44:0d:dd:6e:74:09:12:ab:67:1f:89:32:fe:
31:46:d0:24:a0:db:25:68:90:98:bd:4a:d0:af:be:
0d:62:79:6d:f5:d2:b0:36:da:81:63:97:78:ed:17:
21:4d:f9:9a:fc:da:ee:14:9b:8a:d3:f3:1d:8b:43:
1d:c6:db:32:5c:bd:1f:cc:0c:9a:f3:f1:48:d3:d7:
1f:1b:c1:96:5a:5a:da:98:d5:6d:87:e7:58:80:c1:
f5:40:e7:9d:c5:4f:4a:bb:23:5d:f8:3d:f6:77:bf:
15:b7:06:60:04:69:33:13:75:49:e0:b1:d2:c6:56:
56:09:65:5c:94:ae:22:57:b2:87:1a:f1:c0:e1:22:
16:f8:e9:40:48:65:17:38:1a:74:3b:5e:a6:8b:50:
09:1f:18:93:79:64:de:96:5a:75:1f:d0:28:7a:6f:
70:b4:43:8c:2c:9b:31:d1:f1:7a:d4:d1:65:bc:bf:
00:45:24:37:0a:60:46:51:cd:99:4f:8b:6c:ad:e1:
3b:08:92:2f:0d:5e:d9:2f:15:b0:44:a8:ca:08:2b:
21:a7:91:39:4e:b8:fc:8f:30:8a:78:af:b4:a9:54:
26:8c:81:55:a3:8a:9b:a2:0a:2d:71:36:53:a4:d4:
14:3d:1c:c0:1d:f8:ab:1e:f5:74:e5:26:1b:18:02:
a8:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:A0:D9:C8:2D:A4:6B:74:AA:52:0A:17:34:3B:9A:7B:D2:37:81:F9
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/zKDZyC2ka3SqUgoXNDuae9I3gfk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
4e:c9:02:cc:65:01:0a:ad:df:27:c1:65:7a:ec:29:46:76:67:
59:32:f8:2d:2b:ae:b5:2e:1b:d4:d3:5a:ff:e9:61:09:b1:71:
86:83:4d:a3:26:4a:d8:75:c3:bf:f2:2d:98:f3:92:18:f2:30:
56:ed:81:3b:bb:85:83:0c:2f:4c:f2:10:f4:88:9b:4e:9b:f7:
82:a8:97:f1:88:52:61:d3:64:b3:75:0a:62:e2:0c:4d:16:43:
0b:12:a6:9d:cf:2e:29:ca:34:56:53:dc:1b:2d:3c:4d:3f:6b:
2b:26:f2:62:cb:f1:6a:e4:73:ba:21:6e:d9:7c:f7:a5:c4:0c:
5e:38:ee:70:b4:b9:fb:92:46:40:e9:63:50:d8:71:a5:1d:0d:
34:21:9f:18:64:ec:0f:d1:05:fe:32:f1:ce:9e:9e:cd:18:50:
ae:7b:05:63:ac:26:84:f4:da:b8:c6:19:a0:52:f2:04:c5:e5:
64:4f:4a:9f:92:fe:7a:c9:93:5e:fc:a8:5a:69:56:38:22:12:
fc:a2:f6:c2:f9:fa:c3:ab:e0:a7:d7:f7:1a:d4:14:54:24:16:
1b:6d:01:6f:aa:81:cf:7f:af:44:15:ab:ae:a5:1b:ad:fc:91:
47:06:72:41:65:e0:1e:46:27:f5:d9:45:46:0c:6d:83:5c:54:
b2:58:91:d4
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYmQX4nj+CltTCignIlcVGt2MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcyMDQ3YmUxNWIyNzU5MDJkY2Y2MTdkYzNkMGUxNmRjMWYz
MDgwMjIwHhcNMjMwNzI2MDQwNTI3WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjY2EwZDljODJkYTQ2Yjc0YWE1MjBhMTczNDNiOWE3YmQyMzc4MWY5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoUQN3W50CRKrZx+JMv4xRtAkoNsl
aJCYvUrQr74NYnlt9dKwNtqBY5d47RchTfma/NruFJuK0/Mdi0MdxtsyXL0fzAya
8/FI09cfG8GWWlramNVth+dYgMH1QOedxU9KuyNd+D32d78VtwZgBGkzE3VJ4LHS
xlZWCWVclK4iV7KHGvHA4SIW+OlASGUXOBp0O16mi1AJHxiTeWTellp1H9Aoem9w
tEOMLJsx0fF61NFlvL8ARSQ3CmBGUc2ZT4tsreE7CJIvDV7ZLxWwRKjKCCshp5E5
Trj8jzCKeK+0qVQmjIFVo4qbogotcTZTpNQUPRzAHfirHvV05SYbGAKonwIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFMyg2cgtpGt0qlIKFzQ7mnvSN4H5MB8GA1UdIwQY
MBaAFHIEe+FbJ1kC3PYX3D0OFtwfMIAiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMt
MWFiZTNhYzEwYWE2LzEvektEWnlDMmthM1NxVWdvWE5EdWFlOUkzZ2ZrLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMtMWFiZTNhYzEwYWE2
LzEvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBAE7JAsxlAQqt3yfBZXrs
KUZ2Z1ky+C0rrrUuG9TTWv/pYQmxcYaDTaMmSth1w7/yLZjzkhjyMFbtgTu7hYMM
L0zyEPSIm06b94Kol/GIUmHTZLN1CmLiDE0WQwsSpp3PLinKNFZT3BstPE0/aysm
8mLL8Wrkc7ohbtl896XEDF447nC0ufuSRkDpY1DYcaUdDTQhnxhk7A/RBf4y8c6e
ns0YUK57BWOsJoT02rjGGaBS8gTF5WRPSp+S/nrJk178qFppVjgiEvyi9sL5+sOr
4KfX9xrUFFQkFhttAW+qgc9/r0QVq66lG638kUcGckFl4B5GJ/XZRUYMbYNcVLJY
kdQ=
-----END CERTIFICATE-----
Generated at Sun May 4 17:25:58 2025 by rpki-client