Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/zmxWWelF6XXiw015F285vL0CoXw.roa
File: zmxWWelF6XXiw015F285vL0CoXw.roa (raw, json)
Hash identifier: d/SHWk7GwUuo80Klw1bJFgGpkb27O+xtsjrIunQ/oF4=
Subject key identifier: CE:6C:56:59:E9:45:E9:75:E2:C3:4D:79:17:6F:39:BC:BD:02:A1:7C
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 01844A842A37445925B4119A647AB51CEF6D
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/zmxWWelF6XXiw015F285vL0CoXw.roa
Signing time: Sun 06 Nov 2022 01:18:06 +0000
ROA not before: Sun 06 Nov 2022 01:18:06 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:184:3fbd:71f7/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:184:4250:a4df/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:4a:84:2a:37:44:59:25:b4:11:9a:64:7a:b5:1c:ef:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Nov 6 01:18:06 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=ce6c5659e945e975e2c34d79176f39bcbd02a17c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:34:7a:dd:3a:5d:e2:d0:a1:a0:0d:f9:fc:4f:
4c:6e:76:99:90:0c:93:55:ac:bb:ea:3b:d5:76:a2:
11:3f:7f:cf:50:16:d5:d9:24:7c:80:f6:ae:84:05:
27:76:79:fc:f7:fc:31:42:b5:1f:5b:80:53:45:dd:
b7:c3:b0:ac:71:9e:01:38:1b:fb:ba:ff:b0:b3:4b:
5b:bb:21:03:c9:bc:8b:4b:36:94:4f:69:a1:6c:14:
7e:a9:56:59:8b:53:b6:e4:bd:29:b0:fa:f4:f8:ba:
ad:f7:18:f2:89:10:01:76:c8:4a:24:f0:71:51:56:
31:7e:7c:2b:2d:38:fa:38:45:c2:1f:c7:5c:13:a6:
8f:33:f1:0e:26:51:86:22:98:99:b4:21:65:96:60:
96:46:5c:8b:f5:56:83:20:31:e6:e8:92:9d:57:88:
59:11:4f:6c:a5:1f:98:64:e8:06:b8:a9:72:74:ad:
22:3b:66:bb:df:9e:41:7f:40:24:50:61:79:45:e1:
70:75:bb:e4:18:36:20:84:c2:9d:2e:6c:fc:59:24:
37:c3:79:68:2e:0d:04:3d:79:96:e9:c3:3c:b7:11:
a2:09:b5:12:cb:0b:bf:82:06:64:a7:f1:97:60:d5:
e7:ef:f2:19:88:e3:10:7a:f1:62:d1:e9:ba:9d:ea:
4b:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:6C:56:59:E9:45:E9:75:E2:C3:4D:79:17:6F:39:BC:BD:02:A1:7C
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/zmxWWelF6XXiw015F285vL0CoXw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
57:98:c2:d2:57:54:41:42:91:39:92:8b:29:af:1d:f8:5d:80:
04:1b:03:0b:c5:a2:1e:4e:fd:e4:e9:bd:24:68:fa:82:aa:95:
a3:ad:33:e5:29:6f:27:28:c1:16:e0:c8:06:98:66:d1:fb:b9:
5c:25:eb:1b:64:31:84:b3:6e:26:f1:3b:b8:a7:e6:16:85:49:
71:21:60:c5:17:3b:d7:10:1e:8b:12:e1:33:f2:17:e5:f0:5d:
62:5e:1e:9f:89:db:b5:8a:b1:bd:91:3a:2d:e7:46:cd:f2:2f:
0f:8f:f1:ff:79:ee:6a:b4:ce:29:6d:f7:de:c8:f8:c6:b2:85:
5b:ff:0e:f8:17:04:1c:59:e7:b7:1d:d6:d8:63:d8:3f:06:5f:
9b:89:19:cb:85:9a:75:2b:96:ab:23:9b:b5:4d:98:c0:bc:21:
df:59:88:6f:6e:5f:4d:5f:59:6c:3a:47:77:28:71:c6:96:1e:
ce:3c:46:2c:49:94:47:fd:1a:46:8e:e3:8f:ef:6b:32:60:c9:
37:f4:48:fb:34:45:81:32:15:b1:67:62:a4:8c:c6:49:73:b2:
2f:ff:54:de:4b:17:c8:06:f1:25:e4:c2:48:38:0d:8e:d6:ae:
ff:7b:e9:13:d8:9a:3f:34:46:5d:cf:35:fa:95:77:d6:69:cc:
9b:24:dc:cb
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYRKhCo3RFkltBGaZHq1HO9tMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcyMDQ3YmUxNWIyNzU5MDJkY2Y2MTdkYzNkMGUxNmRjMWYz
MDgwMjIwHhcNMjIxMTA2MDExODA2WhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjZTZjNTY1OWU5NDVlOTc1ZTJjMzRkNzkxNzZmMzliY2JkMDJhMTdjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0jR63Tpd4tChoA35/E9MbnaZkAyT
Vay76jvVdqIRP3/PUBbV2SR8gPauhAUndnn89/wxQrUfW4BTRd23w7CscZ4BOBv7
uv+ws0tbuyEDybyLSzaUT2mhbBR+qVZZi1O25L0psPr0+Lqt9xjyiRABdshKJPBx
UVYxfnwrLTj6OEXCH8dcE6aPM/EOJlGGIpiZtCFllmCWRlyL9VaDIDHm6JKdV4hZ
EU9spR+YZOgGuKlydK0iO2a7355Bf0AkUGF5ReFwdbvkGDYghMKdLmz8WSQ3w3lo
Lg0EPXmW6cM8txGiCbUSywu/ggZkp/GXYNXn7/IZiOMQevFi0em6nepLfwIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFM5sVlnpRel14sNNeRdvOby9AqF8MB8GA1UdIwQY
MBaAFHIEe+FbJ1kC3PYX3D0OFtwfMIAiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMt
MWFiZTNhYzEwYWE2LzEvem14V1dlbEY2WFhpdzAxNUYyODV2TDBDb1h3LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMtMWFiZTNhYzEwYWE2
LzEvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBAFeYwtJXVEFCkTmSiymv
HfhdgAQbAwvFoh5O/eTpvSRo+oKqlaOtM+UpbycowRbgyAaYZtH7uVwl6xtkMYSz
bibxO7in5haFSXEhYMUXO9cQHosS4TPyF+XwXWJeHp+J27WKsb2ROi3nRs3yLw+P
8f957mq0zilt997I+MayhVv/DvgXBBxZ57cd1thj2D8GX5uJGcuFmnUrlqsjm7VN
mMC8Id9ZiG9uX01fWWw6R3coccaWHs48RixJlEf9GkaO44/vazJgyTf0SPs0RYEy
FbFnYqSMxklzsi//VN5LF8gG8SXkwkg4DY7Wrv976RPYmj80Rl3PNfqVd9ZpzJsk
3Ms=
-----END CERTIFICATE-----
Generated at Sat May 3 01:59:10 2025 by rpki-client