Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/zROuL4KTUSMyw7tMSdRLSr6LJlc.roa
File: zROuL4KTUSMyw7tMSdRLSr6LJlc.roa (raw, json)
Hash identifier: v6sKfn5uugpMu83QVJJ7CqSq5/u+yGPLhGozKCbiGJM=
Subject key identifier: CD:13:AE:2F:82:93:51:23:32:C3:BB:4C:49:D4:4B:4A:BE:8B:26:57
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 6C2F3413
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/zROuL4KTUSMyw7tMSdRLSr6LJlc.roa
Signing time: Sun 20 Feb 2022 07:10:34 +0000
ROA not before: Sun 20 Feb 2022 07:10:34 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1815032851 (0x6c2f3413)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Feb 20 07:10:34 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=cd13ae2f8293512332c3bb4c49d44b4abe8b2657
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:21:01:33:a9:82:46:fd:ec:d0:c1:3a:78:fb:
f7:28:fd:f9:0e:c3:47:90:35:41:9c:3f:f4:ba:bf:
78:4c:ed:94:ca:96:c3:de:c5:0c:56:c0:f7:3d:2d:
03:86:b9:a3:25:68:93:09:5c:7c:79:4e:4d:66:19:
59:69:50:7f:6a:b2:d4:10:82:e4:cb:3e:f9:73:7e:
6f:bb:63:18:b8:00:fa:40:07:f5:09:ee:f9:bd:e3:
ad:be:3e:5d:9a:33:1c:9c:27:aa:88:ff:18:1c:cd:
73:c9:ed:d2:06:0e:14:2f:4d:52:7d:e0:6b:71:17:
ce:34:a9:60:7a:88:dc:2e:11:fc:39:91:3a:8b:9b:
46:cb:7d:16:c1:b6:d7:f7:c8:ab:65:cb:a8:16:11:
ec:d8:60:a3:3d:58:92:bf:30:f7:2d:4f:5d:a1:1f:
95:ce:4d:4d:4e:b3:a9:32:c5:1d:5c:7c:68:87:65:
2b:21:dc:35:c8:20:22:0f:35:ff:a6:d1:48:43:7b:
6d:81:23:cb:68:2e:c1:dd:97:36:2c:15:23:11:be:
01:f0:4d:a5:dd:10:d7:e5:4c:cd:b6:33:df:d9:34:
7b:c1:50:a2:b6:e5:c3:95:d8:09:ef:70:19:a8:e5:
a8:1f:8d:f2:f0:ff:6b:37:c2:80:87:f6:ff:14:75:
2e:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:13:AE:2F:82:93:51:23:32:C3:BB:4C:49:D4:4B:4A:BE:8B:26:57
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/zROuL4KTUSMyw7tMSdRLSr6LJlc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
2c:0e:0d:ba:bd:d1:c0:d8:81:48:2e:54:65:e8:cd:d6:cc:5c:
a5:13:4e:3c:3d:df:bc:28:f9:40:3a:0c:e2:3d:60:2a:03:48:
bb:dc:ca:4d:d4:7b:47:5c:72:0b:6f:70:5f:af:ba:2c:3e:25:
7b:9b:01:dd:82:9b:45:58:e0:b0:55:c6:ba:ac:ed:b8:a3:02:
b1:e2:25:72:b2:20:6f:cc:5a:fd:b2:a7:87:fd:d6:40:8e:1f:
97:ee:27:db:20:54:59:fd:ff:89:e7:54:5a:3f:0a:c6:64:14:
df:e0:c9:8b:7c:ad:f1:b8:9e:3e:22:a4:17:be:ce:b3:ec:cf:
51:30:b2:c5:77:2d:1e:2f:d5:29:b5:9f:3b:74:24:8f:6e:d4:
f8:8c:75:21:b6:16:68:0c:8b:3c:db:76:57:c9:d5:9e:db:c5:
8f:53:a4:8e:44:50:ed:88:e7:1d:32:96:10:90:63:a0:c8:73:
34:25:d3:04:5d:9f:3c:3a:ac:6e:51:86:71:b8:67:20:01:44:
54:b3:be:62:1c:57:d4:b5:fc:9a:9c:50:f0:ec:67:da:26:f0:
1d:fa:74:9a:18:72:98:82:94:86:c3:14:00:4a:b9:96:9b:f0:
a9:3d:11:c8:35:6e:df:e2:87:74:af:83:e9:73:94:32:3e:67:
d1:3d:ad:39
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgIEbC80EzANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg3
MjA0N2JlMTViMjc1OTAyZGNmNjE3ZGMzZDBlMTZkYzFmMzA4MDIyMB4XDTIyMDIy
MDA3MTAzNFoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoY2QxM2FlMmY4Mjkz
NTEyMzMyYzNiYjRjNDlkNDRiNGFiZThiMjY1NzCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAKQhATOpgkb97NDBOnj79yj9+Q7DR5A1QZw/9Lq/eEztlMqW
w97FDFbA9z0tA4a5oyVokwlcfHlOTWYZWWlQf2qy1BCC5Ms++XN+b7tjGLgA+kAH
9Qnu+b3jrb4+XZozHJwnqoj/GBzNc8nt0gYOFC9NUn3ga3EXzjSpYHqI3C4R/DmR
OoubRst9FsG21/fIq2XLqBYR7Nhgoz1Ykr8w9y1PXaEflc5NTU6zqTLFHVx8aIdl
KyHcNcggIg81/6bRSEN7bYEjy2guwd2XNiwVIxG+AfBNpd0Q1+VMzbYz39k0e8FQ
orblw5XYCe9wGajlqB+N8vD/azfCgIf2/xR1LscCAwEAAaOCAhowggIWMB0GA1Ud
DgQWBBTNE64vgpNRIzLDu0xJ1EtKvosmVzAfBgNVHSMEGDAWgBRyBHvhWydZAtz2
F9w9DhbcHzCAIjAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L2NnUjc0VnNuV1FMYzloZmNQUTRXM0I4d2dDSS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvNWUvNzk4NDQ3LTIxZjQtNDVhYi05OWRjLTFhYmUzYWMxMGFhNi8x
L3pST3VMNEtUVVNNeXc3dE1TZFJMU3I2TEpsYy5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNWUv
Nzk4NDQ3LTIxZjQtNDVhYi05OWRjLTFhYmUzYWMxMGFhNi8xL2NnUjc0VnNuV1FM
YzloZmNQUTRXM0I4d2dDSS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAw
BggrBgEFBQcBBwEB/wQhMB8wDAQCAAEwBgMEA8EAGDAPBAIAAjAJAwcAIAEGfABk
MA0GCSqGSIb3DQEBCwUAA4IBAQAsDg26vdHA2IFILlRl6M3WzFylE048Pd+8KPlA
OgziPWAqA0i73MpN1HtHXHILb3Bfr7osPiV7mwHdgptFWOCwVca6rO24owKx4iVy
siBvzFr9sqeH/dZAjh+X7ifbIFRZ/f+J51RaPwrGZBTf4MmLfK3xuJ4+IqQXvs6z
7M9RMLLFdy0eL9UptZ87dCSPbtT4jHUhthZoDIs823ZXydWe28WPU6SORFDtiOcd
MpYQkGOgyHM0JdMEXZ88OqxuUYZxuGcgAURUs75iHFfUtfyanFDw7GfaJvAd+nSa
GHKYgpSGwxQASrmWm/CpPRHINW7f4od0r4Ppc5QyPmfRPa05
-----END CERTIFICATE-----
Generated at Wed Apr 30 20:28:00 2025 by rpki-client