Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/zj0c2glw-LxB7mf3776eTw9i-aM.roa
File: zj0c2glw-LxB7mf3776eTw9i-aM.roa (raw, json)
Hash identifier: c89n6YlsMg+4IMniF1uCbNey5fJekvX/+lsnN5Qo1zk=
Subject key identifier: CE:3D:1C:DA:09:70:F8:BC:41:EE:67:F7:EF:BE:9E:4F:0F:62:F9:A3
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 018711CA5A8D9085696066CFE0BE3F7D34AE
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/zj0c2glw-LxB7mf3776eTw9i-aM.roa
Signing time: Fri 24 Mar 2023 04:04:46 +0000
ROA not before: Fri 24 Mar 2023 04:04:46 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:187:11ca:24f4/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:11:ca:5a:8d:90:85:69:60:66:cf:e0:be:3f:7d:34:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Mar 24 04:04:46 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=ce3d1cda0970f8bc41ee67f7efbe9e4f0f62f9a3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:fd:e0:05:77:3a:75:d1:d5:82:16:ce:7a:6f:
73:ae:71:02:53:89:91:29:aa:b9:26:4b:dd:a2:50:
8b:95:6d:be:a7:66:05:c8:01:31:bf:c2:31:ab:cf:
33:9d:99:bc:95:48:fc:95:bb:9b:d5:55:45:d0:77:
82:31:2f:cc:3b:ec:6f:b7:95:2f:cd:0a:c1:23:f3:
ad:6f:98:d1:d7:09:3e:17:84:fb:78:6c:95:22:e7:
dd:6a:c9:ef:51:a8:86:61:82:e9:1b:e0:c6:7b:43:
5e:dc:5a:65:ae:5f:c8:05:e1:9b:dd:66:2a:27:d8:
22:85:18:fc:f5:b4:a2:22:17:ad:39:f6:b8:e4:03:
64:39:7a:4e:d0:5d:17:ce:38:15:7a:20:76:93:f0:
5b:0a:f8:08:14:a0:dc:c7:ac:31:26:56:82:6b:19:
2b:1e:77:e7:83:15:ef:75:9d:ac:a0:04:94:63:a0:
0a:45:25:41:b9:d2:38:2a:b9:fd:eb:ac:62:37:48:
0e:e0:ce:40:12:6b:39:1f:af:8e:5c:2e:75:6b:7b:
4b:6d:0b:e6:57:5e:7f:25:c9:f9:c1:d9:53:ef:28:
45:23:ad:c5:dd:b9:43:52:48:1a:6d:30:2d:f6:84:
8c:c7:03:a7:88:de:bd:04:a5:52:1e:08:be:04:fa:
69:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:3D:1C:DA:09:70:F8:BC:41:EE:67:F7:EF:BE:9E:4F:0F:62:F9:A3
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/zj0c2glw-LxB7mf3776eTw9i-aM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
76:47:93:70:95:ef:fd:3c:2f:aa:01:75:72:5e:74:83:f2:68:
b1:f3:79:c4:8d:f7:33:76:6b:1e:34:1b:ea:9d:21:3b:e9:c1:
3b:4c:00:73:a5:50:1c:e4:5c:b7:f1:0e:19:67:d2:04:2f:36:
0d:87:01:54:76:17:37:2e:27:15:17:96:7d:c9:a2:60:07:b6:
8e:0f:a1:f3:d5:f8:9e:e7:7d:8d:a6:3f:67:4a:6a:9f:65:a0:
de:51:e3:a6:4c:33:d9:98:af:ff:1d:20:0f:f9:63:69:37:a5:
02:a4:95:5e:40:7a:49:67:b3:73:5f:46:60:15:9f:f1:7f:e5:
fa:ee:87:bd:80:28:4e:11:57:4e:fe:f2:0a:18:01:f8:5c:3c:
e9:da:a8:65:76:35:f3:e8:6d:89:d6:dd:05:f3:00:48:12:d9:
19:bb:4c:e3:e4:3e:bf:d1:9b:2c:84:9a:3f:6e:38:68:70:c8:
ff:2b:93:b4:01:77:b8:2e:02:3c:91:96:a9:ea:7e:c7:6b:24:
a3:af:8b:08:61:37:f0:be:e8:fd:1c:da:3d:95:3e:54:87:b3:
90:9b:c4:c7:e2:06:76:37:06:10:f5:1f:99:8a:9f:ff:87:68:
39:44:4b:f5:3c:ba:13:e4:80:9d:0f:5c:4b:11:76:06:41:ef:
a5:62:9f:12
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYcRylqNkIVpYGbP4L4/fTSuMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcyMDQ3YmUxNWIyNzU5MDJkY2Y2MTdkYzNkMGUxNmRjMWYz
MDgwMjIwHhcNMjMwMzI0MDQwNDQ2WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjZTNkMWNkYTA5NzBmOGJjNDFlZTY3ZjdlZmJlOWU0ZjBmNjJmOWEzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtP3gBXc6ddHVghbOem9zrnECU4mR
Kaq5JkvdolCLlW2+p2YFyAExv8Ixq88znZm8lUj8lbub1VVF0HeCMS/MO+xvt5Uv
zQrBI/Otb5jR1wk+F4T7eGyVIufdasnvUaiGYYLpG+DGe0Ne3Fplrl/IBeGb3WYq
J9gihRj89bSiIhetOfa45ANkOXpO0F0XzjgVeiB2k/BbCvgIFKDcx6wxJlaCaxkr
HnfngxXvdZ2soASUY6AKRSVBudI4Krn966xiN0gO4M5AEms5H6+OXC51a3tLbQvm
V15/Jcn5wdlT7yhFI63F3blDUkgabTAt9oSMxwOniN69BKVSHgi+BPppRwIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFM49HNoJcPi8Qe5n9+++nk8PYvmjMB8GA1UdIwQY
MBaAFHIEe+FbJ1kC3PYX3D0OFtwfMIAiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMt
MWFiZTNhYzEwYWE2LzEvemowYzJnbHctTHhCN21mMzc3NmVUdzlpLWFNLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMtMWFiZTNhYzEwYWE2
LzEvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBAHZHk3CV7/08L6oBdXJe
dIPyaLHzecSN9zN2ax40G+qdITvpwTtMAHOlUBzkXLfxDhln0gQvNg2HAVR2Fzcu
JxUXln3JomAHto4PofPV+J7nfY2mP2dKap9loN5R46ZMM9mYr/8dIA/5Y2k3pQKk
lV5Aeklns3NfRmAVn/F/5fruh72AKE4RV07+8goYAfhcPOnaqGV2NfPobYnW3QXz
AEgS2Rm7TOPkPr/RmyyEmj9uOGhwyP8rk7QBd7guAjyRlqnqfsdrJKOviwhhN/C+
6P0c2j2VPlSHs5CbxMfiBnY3BhD1H5mKn/+HaDlES/U8uhPkgJ0PXEsRdgZB76Vi
nxI=
-----END CERTIFICATE-----
Generated at Wed Apr 30 17:42:47 2025 by rpki-client