Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/ziKMNiDVSx87G6Q5KpOq7_3AF30.roa
File: ziKMNiDVSx87G6Q5KpOq7_3AF30.roa (raw, json)
Hash identifier: lrQFh8MOBcNd68JeDGKf1t+mvPt2tC07vq6kCxLQYJU=
Subject key identifier: CE:22:8C:36:20:D5:4B:1F:3B:1B:A4:39:2A:93:AA:EF:FD:C0:17:7D
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0184DB85C12CCBF263E6977D58271536A02D
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/ziKMNiDVSx87G6Q5KpOq7_3AF30.roa
Signing time: Sun 04 Dec 2022 05:04:46 +0000
ROA not before: Sun 04 Dec 2022 05:04:46 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:184:db85:8ba8/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:db:85:c1:2c:cb:f2:63:e6:97:7d:58:27:15:36:a0:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Dec 4 05:04:46 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=ce228c3620d54b1f3b1ba4392a93aaeffdc0177d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:7e:30:16:04:bc:88:93:ec:fb:ab:79:98:31:
27:04:5d:9b:9b:09:f5:34:0d:4f:ce:57:c6:1e:e2:
20:c7:1f:ae:8d:57:6d:bc:c3:67:38:2d:99:64:c1:
18:af:8a:50:36:ce:ed:e0:5a:d9:08:2a:8f:cd:d8:
71:bb:3d:8a:73:55:32:69:50:88:7f:cb:d8:86:a2:
27:38:f1:96:2a:41:03:cd:77:85:a6:b8:0c:0d:b7:
c1:bd:db:17:21:52:91:fe:4d:c5:6e:25:51:ee:b2:
10:51:3c:b3:63:2b:f4:bd:aa:73:ca:0b:39:40:8d:
87:02:e2:4f:c0:93:e3:ad:fa:8d:ee:c5:7c:4f:a9:
bd:36:d6:fb:87:db:b0:16:99:12:43:30:eb:82:26:
23:ee:d5:96:07:9c:3f:de:5a:40:aa:71:ad:d1:2e:
9d:45:d0:bc:b1:f2:50:60:0d:a3:c6:56:85:9f:0a:
d2:07:55:2f:df:86:32:0c:d7:5b:d7:c8:ae:f1:ac:
c3:a4:1b:e4:99:83:67:43:ab:43:40:f5:ab:5b:0f:
b5:2b:0d:5c:f0:e4:6c:57:8a:f7:cd:d5:24:f2:ca:
e6:a9:24:72:68:6a:54:d8:1a:d0:4a:27:16:30:0e:
a0:08:7d:3d:7e:c5:a7:25:cc:d7:b4:d5:0b:d5:01:
9d:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:22:8C:36:20:D5:4B:1F:3B:1B:A4:39:2A:93:AA:EF:FD:C0:17:7D
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/ziKMNiDVSx87G6Q5KpOq7_3AF30.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
89:48:63:36:33:51:56:51:dc:04:c8:b7:78:7f:fc:17:e2:3e:
12:25:9e:9c:02:44:3c:35:2b:35:32:08:d0:95:55:9d:48:8e:
4f:4f:ea:c5:94:5c:56:83:a1:18:24:a3:f8:bf:b0:2e:92:75:
e1:f6:d5:59:f3:f7:7d:03:a1:85:5c:b9:04:a6:23:d9:6b:f4:
b5:1c:84:7e:40:71:c0:cb:68:ba:ad:e4:12:dd:bc:fa:c1:29:
da:42:d0:e1:cb:e9:d9:e2:2f:8d:a1:eb:1a:bb:11:f2:92:f7:
b6:a9:a8:46:2a:3b:f4:ae:44:1e:7b:15:c0:3c:45:16:9d:ad:
1e:ac:db:00:db:cb:8d:91:2a:8f:f7:e6:fc:a4:c5:14:60:2d:
87:ad:d9:76:c0:e0:c6:79:a7:63:30:32:2c:a2:f7:12:39:22:
ed:a9:9e:cb:d3:35:36:57:cc:fb:25:0a:fb:34:c8:79:e8:33:
54:ef:a3:8d:9b:35:a4:e6:d6:6f:7f:15:37:ad:da:c8:d7:d9:
92:24:28:5c:da:2d:74:60:68:ff:53:b8:56:4f:16:f7:9c:8a:
df:19:e5:b2:33:e0:c0:bf:93:c3:1a:42:f5:3a:aa:c0:31:6d:
a6:9c:1f:ca:42:a5:9e:03:57:f8:87:9a:55:ce:10:2b:49:19:
28:a6:46:bd
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYTbhcEsy/Jj5pd9WCcVNqAtMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcyMDQ3YmUxNWIyNzU5MDJkY2Y2MTdkYzNkMGUxNmRjMWYz
MDgwMjIwHhcNMjIxMjA0MDUwNDQ2WhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjZTIyOGMzNjIwZDU0YjFmM2IxYmE0MzkyYTkzYWFlZmZkYzAxNzdkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgX4wFgS8iJPs+6t5mDEnBF2bmwn1
NA1PzlfGHuIgxx+ujVdtvMNnOC2ZZMEYr4pQNs7t4FrZCCqPzdhxuz2Kc1UyaVCI
f8vYhqInOPGWKkEDzXeFprgMDbfBvdsXIVKR/k3FbiVR7rIQUTyzYyv0vapzygs5
QI2HAuJPwJPjrfqN7sV8T6m9Ntb7h9uwFpkSQzDrgiYj7tWWB5w/3lpAqnGt0S6d
RdC8sfJQYA2jxlaFnwrSB1Uv34YyDNdb18iu8azDpBvkmYNnQ6tDQPWrWw+1Kw1c
8ORsV4r3zdUk8srmqSRyaGpU2BrQSicWMA6gCH09fsWnJczXtNUL1QGduwIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFM4ijDYg1UsfOxukOSqTqu/9wBd9MB8GA1UdIwQY
MBaAFHIEe+FbJ1kC3PYX3D0OFtwfMIAiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMt
MWFiZTNhYzEwYWE2LzEvemlLTU5pRFZTeDg3RzZRNUtwT3E3XzNBRjMwLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMtMWFiZTNhYzEwYWE2
LzEvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBAIlIYzYzUVZR3ATIt3h/
/BfiPhIlnpwCRDw1KzUyCNCVVZ1Ijk9P6sWUXFaDoRgko/i/sC6SdeH21Vnz930D
oYVcuQSmI9lr9LUchH5AccDLaLqt5BLdvPrBKdpC0OHL6dniL42h6xq7EfKS97ap
qEYqO/SuRB57FcA8RRadrR6s2wDby42RKo/35vykxRRgLYet2XbA4MZ5p2MwMiyi
9xI5Iu2pnsvTNTZXzPslCvs0yHnoM1Tvo42bNaTm1m9/FTet2sjX2ZIkKFzaLXRg
aP9TuFZPFvecit8Z5bIz4MC/k8MaQvU6qsAxbaacH8pCpZ4DV/iHmlXOECtJGSim
Rr0=
-----END CERTIFICATE-----
Generated at Thu May 1 05:36:40 2025 by rpki-client