Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/zcXkwRNX4bqb1AilnYZjE6pwlPA.roa
File: zcXkwRNX4bqb1AilnYZjE6pwlPA.roa (raw, json)
Hash identifier: Y3yJJ7+u0Wv1AfYx8rB7CNB+dRk/Mz1Jv3GfeSw4gr0=
Subject key identifier: CD:C5:E4:C1:13:57:E1:BA:9B:D4:08:A5:9D:86:63:13:AA:70:94:F0
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 018835D88EE229AECE0ED315CB8EC10325C7
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/zcXkwRNX4bqb1AilnYZjE6pwlPA.roa
Signing time: Fri 19 May 2023 21:09:24 +0000
ROA not before: Fri 19 May 2023 21:09:24 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:187:4695:a68a/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64:ffff:0:187:fa9a:b088/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:187:b2b8:a7dd/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:35:d8:8e:e2:29:ae:ce:0e:d3:15:cb:8e:c1:03:25:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: May 19 21:09:24 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=cdc5e4c11357e1ba9bd408a59d866313aa7094f0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:23:72:47:f5:56:08:ce:98:71:de:41:0d:93:
20:1f:db:62:98:14:88:9e:a9:7d:24:e0:f6:d0:8d:
02:47:11:f1:b8:ff:0b:8d:92:1f:54:4f:86:1a:7e:
72:54:d7:f9:15:2c:04:d0:c2:e4:9a:80:58:df:07:
0a:85:bd:09:e8:ed:aa:63:e5:12:6e:5a:fa:1b:36:
4c:9f:11:8c:38:f0:21:51:48:19:f5:a7:d6:f5:10:
8b:87:a3:70:e2:83:4d:c5:23:d3:85:c6:84:1e:d0:
66:ce:a5:b9:2d:ab:08:27:f5:77:12:7f:09:42:ca:
75:39:e9:84:06:93:08:e0:a9:43:89:09:85:08:54:
3d:b5:cd:7a:f7:bd:61:a6:0f:a3:aa:be:bb:94:d1:
69:e1:0a:f3:f5:b8:e1:2e:de:e2:dd:33:ce:bf:a4:
0a:ad:be:d8:60:b8:7d:eb:07:2c:63:70:cd:38:3d:
d9:42:00:a4:74:ee:ff:fb:e1:20:04:ef:72:a8:3f:
93:c2:fd:37:1a:48:22:3a:76:fc:3c:57:a2:fd:48:
ac:5b:0a:39:89:53:6f:61:89:77:05:3d:d4:e7:eb:
1e:91:b9:3d:89:e8:0f:91:5f:8c:72:ce:ab:90:d4:
96:4a:15:5c:3f:a0:46:79:7d:eb:49:45:f3:72:64:
41:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:C5:E4:C1:13:57:E1:BA:9B:D4:08:A5:9D:86:63:13:AA:70:94:F0
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/zcXkwRNX4bqb1AilnYZjE6pwlPA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
b3:cf:1a:7a:1f:55:34:3a:cf:e6:04:ef:54:ff:6d:81:d5:38:
ae:8d:88:5a:1e:43:35:15:42:66:a3:36:d3:f7:76:e0:aa:5e:
4d:11:07:7f:57:5c:28:f9:ec:c9:1a:17:1e:68:7c:e7:46:d2:
0f:b9:ce:39:ae:e9:ec:9d:68:d2:f5:a0:1a:81:b4:af:f6:84:
79:6c:b8:22:d4:e0:9c:d2:b5:08:f5:3f:f3:dd:ae:a4:b4:07:
b6:8c:bb:aa:44:50:30:10:70:67:6f:df:50:ac:22:1f:18:48:
7b:7f:90:87:f9:8b:b4:2e:3b:ff:98:a7:80:0c:4d:6c:78:5d:
71:05:4d:42:80:bd:47:ee:69:80:a6:b7:da:ea:fa:79:24:07:
fa:57:e7:f7:b0:7c:fb:fd:a3:4b:fe:12:79:a3:5d:fd:91:df:
e6:7f:8f:fd:f6:ca:b2:bc:e1:db:20:00:8c:01:aa:33:4d:a4:
f2:de:71:c2:c8:ba:eb:73:e7:c2:89:18:c4:69:2c:83:89:ae:
de:6b:80:6c:8f:44:53:78:e9:6b:34:2a:66:cf:05:60:91:b9:
7e:f2:df:60:a3:96:43:16:1a:ab:c0:d9:bf:96:bf:66:bd:1c:
79:0c:65:bb:4e:d5:bd:fa:9b:3f:43:91:0c:46:ad:15:ed:5e:
e5:3f:f7:4b
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYg12I7iKa7ODtMVy47BAyXHMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcyMDQ3YmUxNWIyNzU5MDJkY2Y2MTdkYzNkMGUxNmRjMWYz
MDgwMjIwHhcNMjMwNTE5MjEwOTI0WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjZGM1ZTRjMTEzNTdlMWJhOWJkNDA4YTU5ZDg2NjMxM2FhNzA5NGYwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArSNyR/VWCM6Ycd5BDZMgH9timBSI
nql9JOD20I0CRxHxuP8LjZIfVE+GGn5yVNf5FSwE0MLkmoBY3wcKhb0J6O2qY+US
blr6GzZMnxGMOPAhUUgZ9afW9RCLh6Nw4oNNxSPThcaEHtBmzqW5LasIJ/V3En8J
Qsp1OemEBpMI4KlDiQmFCFQ9tc16971hpg+jqr67lNFp4Qrz9bjhLt7i3TPOv6QK
rb7YYLh96wcsY3DNOD3ZQgCkdO7/++EgBO9yqD+Twv03GkgiOnb8PFei/UisWwo5
iVNvYYl3BT3U5+sekbk9iegPkV+Mcs6rkNSWShVcP6BGeX3rSUXzcmRBsQIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFM3F5METV+G6m9QIpZ2GYxOqcJTwMB8GA1UdIwQY
MBaAFHIEe+FbJ1kC3PYX3D0OFtwfMIAiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMt
MWFiZTNhYzEwYWE2LzEvemNYa3dSTlg0YnFiMUFpbG5ZWmpFNnB3bFBBLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMtMWFiZTNhYzEwYWE2
LzEvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBALPPGnofVTQ6z+YE71T/
bYHVOK6NiFoeQzUVQmajNtP3duCqXk0RB39XXCj57MkaFx5ofOdG0g+5zjmu6eyd
aNL1oBqBtK/2hHlsuCLU4JzStQj1P/PdrqS0B7aMu6pEUDAQcGdv31CsIh8YSHt/
kIf5i7QuO/+Yp4AMTWx4XXEFTUKAvUfuaYCmt9rq+nkkB/pX5/ewfPv9o0v+Enmj
Xf2R3+Z/j/32yrK84dsgAIwBqjNNpPLeccLIuutz58KJGMRpLIOJrt5rgGyPRFN4
6Ws0KmbPBWCRuX7y32CjlkMWGqvA2b+Wv2a9HHkMZbtO1b36mz9DkQxGrRXtXuU/
90s=
-----END CERTIFICATE-----
Generated at Fri May 2 04:07:21 2025 by rpki-client