Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/zkOqm_1GoFsQdtItLpcG5XGK0ME.roa
File: zkOqm_1GoFsQdtItLpcG5XGK0ME.roa (raw, json)
Hash identifier: 97xRLn8m4wUSNFq5nMsYu4HiwF2J1W4sFrUruR5vhpI=
Subject key identifier: CE:43:AA:9B:FD:46:A0:5B:10:76:D2:2D:2E:97:06:E5:71:8A:D0:C1
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 018644033D9CF011A69D63F9BEFCFCCFDDAB
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/zkOqm_1GoFsQdtItLpcG5XGK0ME.roa
Signing time: Sun 12 Feb 2023 05:05:08 +0000
ROA not before: Sun 12 Feb 2023 05:05:08 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:4402:a260/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:44:03:3d:9c:f0:11:a6:9d:63:f9:be:fc:fc:cf:dd:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Feb 12 05:05:08 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=ce43aa9bfd46a05b1076d22d2e9706e5718ad0c1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:f9:34:02:08:f9:b7:e4:ad:07:b3:bb:47:84:
6a:5e:92:cd:b1:34:f8:cf:df:de:d5:d1:1d:81:97:
cc:4e:7f:83:65:7e:9a:66:e4:1d:da:85:62:5a:e1:
6b:1f:ac:61:f2:a2:4a:bb:76:da:d9:09:13:fd:99:
ce:20:4d:1b:b6:6b:56:63:15:1a:ca:98:1f:df:39:
b6:69:3f:2d:e3:75:9b:a3:b0:93:d7:13:44:c2:fc:
ec:e3:b4:1c:69:4a:28:20:0b:6d:90:5f:3b:c8:f1:
a9:4e:3e:80:66:0f:25:b8:7c:9c:f4:0c:33:e5:fa:
30:56:bd:04:81:fb:1e:8e:a2:d1:f5:ba:37:b4:c2:
20:8d:36:5f:62:6f:fa:d3:46:8c:92:99:48:cc:81:
c3:31:9a:e5:c6:c6:ec:fd:bd:3a:c4:7c:8d:2f:b1:
1a:ec:fa:7b:d5:e5:2d:36:3b:fc:85:31:4c:9b:4e:
87:13:2d:f5:d0:f5:89:a5:c0:4a:f9:d0:bd:8f:71:
15:ec:92:4f:e8:a8:51:19:f8:4f:7b:cc:70:8b:cf:
b5:6f:78:91:da:5b:e7:14:5a:90:91:a3:7d:99:56:
d4:fa:52:ba:6f:77:1f:0f:d2:fc:50:be:37:b1:a6:
e2:e2:d7:ae:c6:3c:85:74:8d:94:32:ae:da:63:bf:
a5:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:43:AA:9B:FD:46:A0:5B:10:76:D2:2D:2E:97:06:E5:71:8A:D0:C1
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/zkOqm_1GoFsQdtItLpcG5XGK0ME.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
02:7d:35:6c:69:50:14:bc:9d:19:58:11:7e:73:9e:a0:27:40:
ec:76:b2:8e:25:26:42:48:e0:e5:71:d9:1d:e4:8b:f5:ba:b1:
22:9b:b7:d0:b8:7d:35:82:39:1f:3a:27:aa:c2:f6:a2:69:7c:
22:92:0e:98:61:a6:84:63:74:e4:bd:03:bf:a1:76:f2:79:9c:
7f:27:09:d0:f4:82:a8:90:e3:ad:53:3d:6c:e6:4f:13:8b:20:
0f:4b:c8:ad:31:29:a9:c9:14:51:d3:88:db:84:95:29:3b:08:
49:c5:7f:17:f6:6d:0f:3a:c6:a8:62:cd:a6:3f:2b:5a:1d:ad:
49:ea:de:4c:52:48:5e:91:0b:74:b5:ac:df:ef:a1:89:cb:ea:
b7:06:16:a2:a3:55:ef:fa:5b:b2:56:d9:fa:68:7e:42:ab:04:
05:79:d6:d3:37:df:df:d2:8f:dd:b6:71:db:0b:cf:f8:ee:72:
9f:93:11:e3:2f:4e:08:2a:42:c5:9d:a2:3d:f6:a2:5a:ac:27:
6b:3f:99:ed:21:5f:52:e0:62:a3:c5:a9:df:08:63:2d:a7:3c:
c5:26:80:6c:74:2e:a0:59:1c:2e:64:37:be:d4:2c:8f:0a:14:
d2:fd:51:16:74:2a:79:7f:81:3e:81:04:1a:f6:d1:a8:4a:71:
d2:07:af:d5
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYZEAz2c8BGmnWP5vvz8z92rMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcyMDQ3YmUxNWIyNzU5MDJkY2Y2MTdkYzNkMGUxNmRjMWYz
MDgwMjIwHhcNMjMwMjEyMDUwNTA4WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjZTQzYWE5YmZkNDZhMDViMTA3NmQyMmQyZTk3MDZlNTcxOGFkMGMxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3fk0Agj5t+StB7O7R4RqXpLNsTT4
z9/e1dEdgZfMTn+DZX6aZuQd2oViWuFrH6xh8qJKu3ba2QkT/ZnOIE0btmtWYxUa
ypgf3zm2aT8t43Wbo7CT1xNEwvzs47QcaUooIAttkF87yPGpTj6AZg8luHyc9Awz
5fowVr0EgfsejqLR9bo3tMIgjTZfYm/600aMkplIzIHDMZrlxsbs/b06xHyNL7Ea
7Pp71eUtNjv8hTFMm06HEy310PWJpcBK+dC9j3EV7JJP6KhRGfhPe8xwi8+1b3iR
2lvnFFqQkaN9mVbU+lK6b3cfD9L8UL43sabi4teuxjyFdI2UMq7aY7+lLwIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFM5Dqpv9RqBbEHbSLS6XBuVxitDBMB8GA1UdIwQY
MBaAFHIEe+FbJ1kC3PYX3D0OFtwfMIAiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMt
MWFiZTNhYzEwYWE2LzEvemtPcW1fMUdvRnNRZHRJdExwY0c1WEdLME1FLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMtMWFiZTNhYzEwYWE2
LzEvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBAAJ9NWxpUBS8nRlYEX5z
nqAnQOx2so4lJkJI4OVx2R3ki/W6sSKbt9C4fTWCOR86J6rC9qJpfCKSDphhpoRj
dOS9A7+hdvJ5nH8nCdD0gqiQ461TPWzmTxOLIA9LyK0xKanJFFHTiNuElSk7CEnF
fxf2bQ86xqhizaY/K1odrUnq3kxSSF6RC3S1rN/voYnL6rcGFqKjVe/6W7JW2fpo
fkKrBAV51tM339/Sj922cdsLz/jucp+TEeMvTggqQsWdoj32olqsJ2s/me0hX1Lg
YqPFqd8IYy2nPMUmgGx0LqBZHC5kN77ULI8KFNL9URZ0Knl/gT6BBBr20ahKcdIH
r9U=
-----END CERTIFICATE-----
Generated at Thu May 1 00:08:17 2025 by rpki-client