Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/zTEHIc9WU7TUktO6KW0iJJZjYiE.roa
File: zTEHIc9WU7TUktO6KW0iJJZjYiE.roa (raw, json)
Hash identifier: v6PKUxlAm+A+K7VU7mCK8gZrrJimcZbgwgPNwhVSxpk=
Subject key identifier: CD:31:07:21:CF:56:53:B4:D4:92:D3:BA:29:6D:22:24:96:63:62:21
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 018A2EC5098E4069D47CAA81F4C1DA95DBC4
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/zTEHIc9WU7TUktO6KW0iJJZjYiE.roa
Signing time: Fri 25 Aug 2023 22:16:19 +0000
ROA not before: Fri 25 Aug 2023 22:16:19 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:2e:c5:09:8e:40:69:d4:7c:aa:81:f4:c1:da:95:db:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Aug 25 22:16:19 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=cd310721cf5653b4d492d3ba296d222496636221
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:03:26:23:57:b9:67:36:5c:9f:c3:68:ab:01:
aa:6f:17:fc:ae:2f:fd:d6:5c:5d:2c:9f:a2:62:69:
8f:83:53:fd:5e:12:cf:e6:0e:75:52:c5:fd:2d:1f:
e4:ee:5b:c1:a3:1c:59:bb:95:e0:74:92:4b:57:ea:
3f:05:ad:11:8e:20:60:67:ac:b0:cc:38:d5:c9:50:
d0:9c:8b:28:aa:39:ad:ad:be:21:1f:dd:8a:c8:64:
1e:b6:21:a1:22:1f:91:af:83:5c:a4:52:12:e5:64:
72:40:cf:db:8b:ca:bc:00:b7:8e:18:54:08:75:69:
c8:70:8f:88:61:1d:49:f4:03:4d:3c:64:45:d8:df:
ff:a5:eb:6a:25:2c:84:e0:8a:f7:cc:52:92:d9:b0:
f4:88:19:0a:5d:e3:65:08:0e:df:1e:ce:05:ce:fb:
aa:db:4d:10:2e:b2:bb:c5:d8:fb:32:10:1a:bf:78:
46:c3:c8:70:9d:07:f7:59:cd:a3:d8:f1:a3:54:55:
9f:de:15:b5:d6:2c:0f:2d:f5:06:e0:7e:67:ba:5e:
00:fe:db:69:3b:9e:c6:db:ed:1a:9b:07:d2:e0:54:
80:e6:5a:af:c6:b9:88:4e:d6:d1:9c:ad:91:42:43:
db:e2:b5:5a:8c:10:bf:5a:9c:45:c2:ae:86:bf:4f:
fb:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:31:07:21:CF:56:53:B4:D4:92:D3:BA:29:6D:22:24:96:63:62:21
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/zTEHIc9WU7TUktO6KW0iJJZjYiE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
6f:32:34:3f:d8:3c:69:1c:d3:5d:da:87:5c:77:49:ab:e3:0b:
17:8b:2f:47:a3:a4:68:11:97:6f:f6:b6:1b:19:19:9c:9e:f0:
8f:c8:c7:4d:69:46:b7:97:e4:2a:33:2c:95:52:a8:1f:69:71:
6b:5f:2d:27:5f:e0:c3:85:74:29:3f:79:0f:85:ac:d8:f4:bd:
fa:9b:03:a8:04:8e:f0:47:d8:43:cc:a3:8f:ef:67:ef:72:b0:
b3:f3:ed:4e:6a:44:8e:17:33:09:9e:a3:45:05:e2:b0:26:33:
f1:9e:7a:9a:e9:79:f8:fd:3f:42:72:6f:22:bd:a6:26:18:98:
b3:99:69:7f:11:ab:50:d7:f1:fa:bf:ff:85:a5:ef:c2:5a:ca:
07:5f:00:8b:90:03:b8:9f:63:af:f5:a2:49:59:1f:77:c2:5b:
df:01:a5:47:cc:d8:25:78:9e:10:24:e1:c7:bd:0b:02:31:8c:
71:a7:14:25:8d:ca:85:be:d4:43:45:89:72:16:26:fa:29:6f:
38:54:92:76:ab:a4:34:f6:f5:c3:2e:03:b7:33:96:70:75:bf:
38:0d:0d:d7:e4:97:9f:c2:5b:85:a5:0c:14:62:88:1b:18:b8:
26:ae:98:f1:07:aa:8e:97:e4:f2:15:93:56:b8:9c:89:ad:dd:
77:62:60:e3
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYouxQmOQGnUfKqB9MHaldvEMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcyMDQ3YmUxNWIyNzU5MDJkY2Y2MTdkYzNkMGUxNmRjMWYz
MDgwMjIwHhcNMjMwODI1MjIxNjE5WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjZDMxMDcyMWNmNTY1M2I0ZDQ5MmQzYmEyOTZkMjIyNDk2NjM2MjIxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAygMmI1e5ZzZcn8NoqwGqbxf8ri/9
1lxdLJ+iYmmPg1P9XhLP5g51UsX9LR/k7lvBoxxZu5XgdJJLV+o/Ba0RjiBgZ6yw
zDjVyVDQnIsoqjmtrb4hH92KyGQetiGhIh+Rr4NcpFIS5WRyQM/bi8q8ALeOGFQI
dWnIcI+IYR1J9ANNPGRF2N//petqJSyE4Ir3zFKS2bD0iBkKXeNlCA7fHs4Fzvuq
200QLrK7xdj7MhAav3hGw8hwnQf3Wc2j2PGjVFWf3hW11iwPLfUG4H5nul4A/ttp
O57G2+0amwfS4FSA5lqvxrmITtbRnK2RQkPb4rVajBC/WpxFwq6Gv0/7cQIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFM0xByHPVlO01JLTuiltIiSWY2IhMB8GA1UdIwQY
MBaAFHIEe+FbJ1kC3PYX3D0OFtwfMIAiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMt
MWFiZTNhYzEwYWE2LzEvelRFSEljOVdVN1RVa3RPNktXMGlKSlpqWWlFLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMtMWFiZTNhYzEwYWE2
LzEvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBAG8yND/YPGkc013ah1x3
SavjCxeLL0ejpGgRl2/2thsZGZye8I/Ix01pRreX5CozLJVSqB9pcWtfLSdf4MOF
dCk/eQ+FrNj0vfqbA6gEjvBH2EPMo4/vZ+9ysLPz7U5qRI4XMwmeo0UF4rAmM/Ge
eprpefj9P0JybyK9piYYmLOZaX8Rq1DX8fq//4Wl78JaygdfAIuQA7ifY6/1oklZ
H3fCW98BpUfM2CV4nhAk4ce9CwIxjHGnFCWNyoW+1ENFiXIWJvopbzhUknarpDT2
9cMuA7czlnB1vzgNDdfkl5/CW4WlDBRiiBsYuCaumPEHqo6X5PIVk1a4nImt3Xdi
YOM=
-----END CERTIFICATE-----
Generated at Sun May 4 16:05:37 2025 by rpki-client