Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/zYB8B0Ws6M59MfPk4c6v1ptqjPE.roa
File: zYB8B0Ws6M59MfPk4c6v1ptqjPE.roa (raw, json)
Hash identifier: gNe4CX+x+o5B/5tv8bifb16bYrdkiitm3T1l2ylQ+/s=
Subject key identifier: CD:80:7C:07:45:AC:E8:CE:7D:31:F3:E4:E1:CE:AF:D6:9B:6A:8C:F1
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0189D57D7DED3A87316AD906EDA55B683622
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/zYB8B0Ws6M59MfPk4c6v1ptqjPE.roa
Signing time: Tue 08 Aug 2023 14:11:58 +0000
ROA not before: Tue 08 Aug 2023 14:11:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:188:7858:a003/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:189:a0e4:5c7d/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:d5:7d:7d:ed:3a:87:31:6a:d9:06:ed:a5:5b:68:36:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Aug 8 14:11:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=cd807c0745ace8ce7d31f3e4e1ceafd69b6a8cf1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:c1:52:f4:1b:48:3e:37:dc:c7:54:e3:8a:24:
82:7a:1f:73:ae:a6:ad:b7:b4:ca:be:6a:9d:61:25:
e0:1b:42:f9:0d:15:3a:0c:f1:14:d3:d8:92:6a:0c:
43:41:69:16:fa:8c:19:e0:46:66:ff:d8:94:c7:d9:
f2:27:f1:4f:3d:7b:bf:e9:1c:dd:cb:a9:63:30:cc:
9b:43:63:5e:b7:1f:c7:2c:32:d3:50:79:86:42:1a:
c8:48:0e:d1:78:8c:24:83:50:4b:1d:4b:25:11:7a:
a9:29:19:fd:ba:08:5d:11:1f:53:16:bd:fa:d6:a4:
53:75:81:67:9e:b0:3d:30:0c:9e:6c:f0:fd:de:7d:
d0:58:5d:a1:6d:62:3f:98:76:33:9c:f7:1e:b9:c2:
d3:d3:18:cd:b9:24:4a:aa:b6:3e:e3:5f:c0:c0:58:
14:1a:94:d5:ee:4e:fd:63:11:de:93:2b:ac:71:ac:
21:40:fa:e7:75:86:0e:13:e5:00:25:e2:45:7d:16:
f3:cb:e6:1a:41:1a:f2:c4:0b:9d:bb:e4:f1:8a:84:
1f:ec:40:f3:cd:a7:fb:78:b8:a2:e1:40:4a:71:c7:
2a:a4:38:97:36:b9:45:0d:8b:59:33:01:38:42:6c:
50:6b:fd:39:02:ee:f7:51:4d:c2:8d:76:e0:ee:e9:
bf:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:80:7C:07:45:AC:E8:CE:7D:31:F3:E4:E1:CE:AF:D6:9B:6A:8C:F1
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/zYB8B0Ws6M59MfPk4c6v1ptqjPE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
23:ce:ce:18:ad:d0:b7:00:5e:e3:f9:ff:23:34:13:dc:f0:ef:
e8:1b:e8:3a:68:f9:20:43:02:aa:62:4e:ef:ba:4b:4e:1d:2a:
2e:33:8f:ba:c4:5a:25:46:a6:86:38:78:c1:97:76:60:67:e2:
f5:af:eb:a3:30:ce:0a:aa:5b:50:0b:6d:0a:9d:5b:7d:4a:d6:
3c:11:39:e8:94:b4:22:bc:e0:d9:78:a7:eb:3a:15:ef:2e:85:
3a:55:47:9c:c4:b8:30:05:82:67:0d:aa:71:2f:11:dd:ca:81:
b4:e6:07:9e:17:17:6d:2e:7b:12:57:e0:b0:1a:e0:ea:de:d6:
03:77:ee:1a:b2:99:fe:23:a3:36:6e:29:3d:13:7c:9b:7e:6f:
2d:36:9c:68:5a:75:f6:ee:a5:f9:f8:7b:a5:00:b9:7d:94:43:
40:58:55:fa:65:8a:86:d1:c9:49:df:60:25:98:24:96:0a:d2:
01:8a:a8:1d:74:ea:f9:82:4b:b6:91:70:5e:d1:5d:63:ee:15:
11:1c:75:69:83:f0:45:a8:5a:b5:38:c4:0a:f7:3c:3f:1b:c4:
e7:20:eb:92:34:41:24:8c:83:56:a3:f6:d8:99:77:4f:ef:63:
51:e2:b8:9e:88:85:45:49:76:72:11:ed:6c:33:80:3d:d8:fb:
00:62:88:3f
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYnVfX3tOocxatkG7aVbaDYiMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcyMDQ3YmUxNWIyNzU5MDJkY2Y2MTdkYzNkMGUxNmRjMWYz
MDgwMjIwHhcNMjMwODA4MTQxMTU4WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjZDgwN2MwNzQ1YWNlOGNlN2QzMWYzZTRlMWNlYWZkNjliNmE4Y2YxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmsFS9BtIPjfcx1TjiiSCeh9zrqat
t7TKvmqdYSXgG0L5DRU6DPEU09iSagxDQWkW+owZ4EZm/9iUx9nyJ/FPPXu/6Rzd
y6ljMMybQ2Netx/HLDLTUHmGQhrISA7ReIwkg1BLHUslEXqpKRn9ughdER9TFr36
1qRTdYFnnrA9MAyebPD93n3QWF2hbWI/mHYznPceucLT0xjNuSRKqrY+41/AwFgU
GpTV7k79YxHekyuscawhQPrndYYOE+UAJeJFfRbzy+YaQRryxAudu+TxioQf7EDz
zaf7eLii4UBKcccqpDiXNrlFDYtZMwE4QmxQa/05Au73UU3CjXbg7um/7wIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFM2AfAdFrOjOfTHz5OHOr9abaozxMB8GA1UdIwQY
MBaAFHIEe+FbJ1kC3PYX3D0OFtwfMIAiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMt
MWFiZTNhYzEwYWE2LzEvellCOEIwV3M2TTU5TWZQazRjNnYxcHRxalBFLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMtMWFiZTNhYzEwYWE2
LzEvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBACPOzhit0LcAXuP5/yM0
E9zw7+gb6Dpo+SBDAqpiTu+6S04dKi4zj7rEWiVGpoY4eMGXdmBn4vWv66Mwzgqq
W1ALbQqdW31K1jwROeiUtCK84Nl4p+s6Fe8uhTpVR5zEuDAFgmcNqnEvEd3KgbTm
B54XF20uexJX4LAa4Ore1gN37hqymf4jozZuKT0TfJt+by02nGhadfbupfn4e6UA
uX2UQ0BYVfpliobRyUnfYCWYJJYK0gGKqB106vmCS7aRcF7RXWPuFREcdWmD8EWo
WrU4xAr3PD8bxOcg65I0QSSMg1aj9tiZd0/vY1HiuJ6IhUVJdnIR7WwzgD3Y+wBi
iD8=
-----END CERTIFICATE-----
Generated at Wed Apr 30 22:02:49 2025 by rpki-client