Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/zT2eM7JIoD7tub3f5QQjFjqzwY8.roa
File: zT2eM7JIoD7tub3f5QQjFjqzwY8.roa (raw, json)
Hash identifier: rXknM3yHp/Y3U8A4pd6+LAk8PaT+b9oEKNs3y//O8VQ=
Subject key identifier: CD:3D:9E:33:B2:48:A0:3E:ED:B9:BD:DF:E5:04:23:16:3A:B3:C1:8F
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0184A735DEC776C1768832EB3CB74C685A11
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/zT2eM7JIoD7tub3f5QQjFjqzwY8.roa
Signing time: Thu 24 Nov 2022 01:17:16 +0000
ROA not before: Thu 24 Nov 2022 01:17:16 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:184:9f03:9814/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:a7:35:de:c7:76:c1:76:88:32:eb:3c:b7:4c:68:5a:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Nov 24 01:17:16 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=cd3d9e33b248a03eedb9bddfe50423163ab3c18f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:b6:49:36:d7:ac:7c:fc:6d:e4:5d:46:ab:8a:
09:2d:ec:45:5d:84:42:f9:64:b7:61:fe:e0:18:d2:
0e:b8:b5:41:e7:29:bc:e5:cb:b8:f8:e8:ef:9c:17:
e4:b3:49:e0:a6:1b:0d:a9:06:d6:c9:91:2c:78:4e:
2d:1b:9a:95:d0:d5:62:13:5d:a8:f3:d2:4f:d3:1c:
ac:81:6e:eb:90:27:39:2f:bf:02:a4:07:b9:4b:80:
71:67:d3:52:e4:12:aa:68:8a:58:1c:99:87:b4:94:
6d:5a:ed:86:43:ff:e2:37:e1:71:a5:fa:21:71:df:
c4:0d:8d:c5:cf:c0:0c:ba:b5:95:20:2f:f0:c5:5a:
af:b3:dd:1e:87:0b:f4:8d:8a:41:ab:e9:7a:03:8f:
e3:ad:c1:36:07:27:c6:a1:e1:e8:f7:9e:ba:b2:80:
09:76:76:2d:98:26:f4:34:22:73:8a:d3:dd:54:a9:
64:2b:63:96:33:df:d3:4a:d4:9f:23:91:9f:e7:49:
28:6e:85:d1:f1:78:b2:58:f3:79:2b:99:b9:7d:54:
17:c6:31:f9:12:0d:7c:b7:7d:78:30:03:a1:2b:f0:
42:f5:7e:65:69:a8:58:d7:6c:93:50:5e:ad:08:35:
61:f6:be:f4:45:02:3a:aa:d5:e8:25:34:fc:0c:c5:
af:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:3D:9E:33:B2:48:A0:3E:ED:B9:BD:DF:E5:04:23:16:3A:B3:C1:8F
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/zT2eM7JIoD7tub3f5QQjFjqzwY8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
6d:0e:0a:24:a9:a6:82:5e:41:de:05:7b:cc:64:46:a0:ae:f3:
a4:1e:95:c2:57:75:92:8c:e4:fa:f1:86:7c:42:b0:95:4f:77:
7c:ae:23:e4:af:bd:5c:96:73:8b:ed:1e:16:9c:7c:7f:36:ca:
57:74:d4:be:12:01:59:63:3c:b7:3a:83:fd:8e:db:c2:c7:4e:
07:3c:1c:c9:90:df:8f:9b:d2:d7:da:5c:d3:20:b0:b9:6b:49:
87:b4:d6:1b:19:a4:c0:55:9f:c2:af:ea:91:bb:2b:9c:3f:fa:
80:d5:df:37:4a:c7:5c:da:ea:29:33:d7:04:c8:7a:a8:bf:14:
fd:5d:c7:1d:1b:a3:3b:e4:46:6f:a5:5d:c4:6c:7f:02:db:5f:
a6:8d:5d:38:44:03:26:e2:2f:47:91:90:94:19:dd:e4:61:cc:
cb:1f:b4:d7:69:a9:4b:69:67:72:52:32:7e:3c:c6:29:7f:58:
91:8f:fe:ad:8f:ea:a7:9a:85:99:e9:c9:15:22:1b:72:9a:20:
8d:6c:b4:0a:d8:da:53:78:96:91:33:35:d3:b7:6a:79:1a:a6:
48:bc:37:c9:95:0d:70:b4:dd:01:9c:58:80:dc:a5:b1:fe:d6:
8c:d5:a8:76:5a:4c:68:93:44:49:ca:7f:60:12:a9:11:0c:64:
78:da:d1:29
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYSnNd7HdsF2iDLrPLdMaFoRMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcyMDQ3YmUxNWIyNzU5MDJkY2Y2MTdkYzNkMGUxNmRjMWYz
MDgwMjIwHhcNMjIxMTI0MDExNzE2WhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjZDNkOWUzM2IyNDhhMDNlZWRiOWJkZGZlNTA0MjMxNjNhYjNjMThmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgbZJNtesfPxt5F1Gq4oJLexFXYRC
+WS3Yf7gGNIOuLVB5ym85cu4+OjvnBfks0ngphsNqQbWyZEseE4tG5qV0NViE12o
89JP0xysgW7rkCc5L78CpAe5S4BxZ9NS5BKqaIpYHJmHtJRtWu2GQ//iN+Fxpfoh
cd/EDY3Fz8AMurWVIC/wxVqvs90ehwv0jYpBq+l6A4/jrcE2ByfGoeHo9566soAJ
dnYtmCb0NCJzitPdVKlkK2OWM9/TStSfI5Gf50koboXR8XiyWPN5K5m5fVQXxjH5
Eg18t314MAOhK/BC9X5laahY12yTUF6tCDVh9r70RQI6qtXoJTT8DMWvnwIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFM09njOySKA+7bm93+UEIxY6s8GPMB8GA1UdIwQY
MBaAFHIEe+FbJ1kC3PYX3D0OFtwfMIAiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMt
MWFiZTNhYzEwYWE2LzEvelQyZU03SklvRDd0dWIzZjVRUWpGanF6d1k4LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMtMWFiZTNhYzEwYWE2
LzEvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBAG0OCiSppoJeQd4Fe8xk
RqCu86QelcJXdZKM5PrxhnxCsJVPd3yuI+SvvVyWc4vtHhacfH82yld01L4SAVlj
PLc6g/2O28LHTgc8HMmQ34+b0tfaXNMgsLlrSYe01hsZpMBVn8Kv6pG7K5w/+oDV
3zdKx1za6ikz1wTIeqi/FP1dxx0bozvkRm+lXcRsfwLbX6aNXThEAybiL0eRkJQZ
3eRhzMsftNdpqUtpZ3JSMn48xil/WJGP/q2P6qeahZnpyRUiG3KaII1stArY2lN4
lpEzNdO3ankapki8N8mVDXC03QGcWIDcpbH+1ozVqHZaTGiTREnKf2ASqREMZHja
0Sk=
-----END CERTIFICATE-----
Generated at Fri May 2 17:23:43 2025 by rpki-client