Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/zk8hZzmSMhAOqf34PTz-yXkI9t8.roa
File: zk8hZzmSMhAOqf34PTz-yXkI9t8.roa (raw, json)
Hash identifier: uf9HKf6WOAgC5KthCPLiq/Es20z5dU2JBF3sdcGlRNg=
Subject key identifier: CE:4F:21:67:39:92:32:10:0E:A9:FD:F8:3D:3C:FE:C9:79:08:F6:DF
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 018A222059A3F7EAAD9751054888C8CE8F2F
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/zk8hZzmSMhAOqf34PTz-yXkI9t8.roa
Signing time: Wed 23 Aug 2023 11:20:59 +0000
ROA not before: Wed 23 Aug 2023 11:20:59 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:188:7858:a003/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18a:178d:7ed9/128 maxlen: 128
2001:67c:64:ffff:0:189:a0e4:5c7d/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:22:20:59:a3:f7:ea:ad:97:51:05:48:88:c8:ce:8f:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Aug 23 11:20:59 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=ce4f2167399232100ea9fdf83d3cfec97908f6df
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:0a:e1:85:bd:dc:d5:7b:49:88:02:a2:cb:ad:
63:b4:af:ee:e7:c4:e2:a4:47:46:11:92:d7:41:87:
0d:14:b2:ff:72:cd:e8:46:7a:0b:96:88:e2:01:f2:
c2:fd:d7:da:16:a3:a2:ad:a2:1e:74:ed:6c:a3:fd:
f2:66:40:14:47:dc:51:bb:06:27:91:94:05:39:3f:
3d:29:c1:8d:fd:4c:07:05:5b:db:97:64:21:79:c7:
d6:24:6d:ac:75:b5:bd:2b:7d:a6:21:a1:93:f8:a2:
be:8b:cc:31:28:4c:56:4a:4c:cf:42:32:ae:10:67:
6f:6a:d1:b1:8a:97:b5:69:93:3a:3b:2a:b4:1d:27:
e4:a3:37:c2:49:7f:88:ce:89:6d:b1:62:1f:cd:8c:
59:a5:28:2f:0f:1c:6d:b5:fd:fa:3a:43:e2:86:a0:
4b:d3:91:f4:3f:21:d4:ce:52:66:c4:69:59:17:e7:
b8:eb:06:f8:33:84:bb:61:cf:92:37:33:4b:c8:67:
33:00:78:c9:2d:80:0b:a4:c2:b9:34:9c:04:36:f8:
bb:cf:91:36:3d:cc:01:8a:85:69:bc:68:2d:ab:7a:
99:c7:20:b1:c3:2d:b5:8c:30:84:7f:4b:9c:4a:66:
ba:df:62:41:22:9a:cc:0d:4e:de:09:1b:76:af:d1:
9c:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:4F:21:67:39:92:32:10:0E:A9:FD:F8:3D:3C:FE:C9:79:08:F6:DF
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/zk8hZzmSMhAOqf34PTz-yXkI9t8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
59:09:aa:13:08:8d:5f:c2:c9:84:e2:67:9e:04:33:19:88:51:
0d:58:30:6d:18:41:4b:32:34:23:1f:39:a6:9d:b4:a1:6b:6f:
8c:a8:3e:b4:b3:2d:5f:b7:b2:03:3e:f5:6d:d7:44:f3:38:cd:
fb:e9:c8:d8:80:dd:53:a5:95:78:a1:49:7d:46:9d:ed:54:f3:
ba:d2:5b:59:75:56:b1:28:79:ba:5d:c5:d7:88:41:f5:c6:02:
9b:00:89:8b:d8:47:8a:51:6c:17:85:13:7c:f5:a3:06:7e:f3:
27:5e:1a:3f:37:9a:5a:b4:c3:ff:d2:91:8c:d4:75:6b:58:18:
4b:43:3f:ea:42:94:f1:33:1e:a0:47:03:79:9c:a2:b6:a9:55:
ea:07:f7:b4:24:2b:69:11:b6:91:86:2e:62:1b:eb:d3:15:7e:
51:e3:0f:5d:47:43:1b:58:72:75:cd:60:91:a8:26:e9:ba:65:
06:e0:5f:19:a9:e1:b1:d5:b6:86:69:37:7e:0a:b6:72:25:10:
5a:b7:bf:38:6c:c0:82:40:8b:ce:44:96:6a:18:45:51:47:4b:
58:e6:d5:5c:1a:78:c7:25:c9:e4:06:d5:49:d7:79:83:05:d5:
12:6f:18:8e:f6:06:4e:90:05:c1:5b:67:8b:91:93:6e:b7:5f:
99:37:9b:5c
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYoiIFmj9+qtl1EFSIjIzo8vMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcyMDQ3YmUxNWIyNzU5MDJkY2Y2MTdkYzNkMGUxNmRjMWYz
MDgwMjIwHhcNMjMwODIzMTEyMDU5WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjZTRmMjE2NzM5OTIzMjEwMGVhOWZkZjgzZDNjZmVjOTc5MDhmNmRmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApwrhhb3c1XtJiAKiy61jtK/u58Ti
pEdGEZLXQYcNFLL/cs3oRnoLlojiAfLC/dfaFqOiraIedO1so/3yZkAUR9xRuwYn
kZQFOT89KcGN/UwHBVvbl2QhecfWJG2sdbW9K32mIaGT+KK+i8wxKExWSkzPQjKu
EGdvatGxipe1aZM6Oyq0HSfkozfCSX+IzoltsWIfzYxZpSgvDxxttf36OkPihqBL
05H0PyHUzlJmxGlZF+e46wb4M4S7Yc+SNzNLyGczAHjJLYALpMK5NJwENvi7z5E2
PcwBioVpvGgtq3qZxyCxwy21jDCEf0ucSma632JBIprMDU7eCRt2r9GcNwIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFM5PIWc5kjIQDqn9+D08/sl5CPbfMB8GA1UdIwQY
MBaAFHIEe+FbJ1kC3PYX3D0OFtwfMIAiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMt
MWFiZTNhYzEwYWE2LzEvems4aFp6bVNNaEFPcWYzNFBUei15WGtJOXQ4LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMtMWFiZTNhYzEwYWE2
LzEvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBAFkJqhMIjV/CyYTiZ54E
MxmIUQ1YMG0YQUsyNCMfOaadtKFrb4yoPrSzLV+3sgM+9W3XRPM4zfvpyNiA3VOl
lXihSX1Gne1U87rSW1l1VrEoebpdxdeIQfXGApsAiYvYR4pRbBeFE3z1owZ+8yde
Gj83mlq0w//SkYzUdWtYGEtDP+pClPEzHqBHA3mcorapVeoH97QkK2kRtpGGLmIb
69MVflHjD11HQxtYcnXNYJGoJum6ZQbgXxmp4bHVtoZpN34KtnIlEFq3vzhswIJA
i85ElmoYRVFHS1jm1VwaeMclyeQG1UnXeYMF1RJvGI72Bk6QBcFbZ4uRk263X5k3
m1w=
-----END CERTIFICATE-----
Generated at Thu May 1 15:12:04 2025 by rpki-client