Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/zpjAn_fvPki88JHW8DWDHzvTUfU.roa
File: zpjAn_fvPki88JHW8DWDHzvTUfU.roa (raw, json)
Hash identifier: KHw/4oxwNYmfMj1vp23dNv4Ojlqrn8VRZ6dnG7UGmfI=
Subject key identifier: CE:98:C0:9F:F7:EF:3E:48:BC:F0:91:D6:F0:35:83:1F:3B:D3:51:F5
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 01868A0120612A7B5A01EF0CD246C74E78FF
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/zpjAn_fvPki88JHW8DWDHzvTUfU.roa
Signing time: Sat 25 Feb 2023 19:16:15 +0000
ROA not before: Sat 25 Feb 2023 19:16:15 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:8a:01:20:61:2a:7b:5a:01:ef:0c:d2:46:c7:4e:78:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Feb 25 19:16:15 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=ce98c09ff7ef3e48bcf091d6f035831f3bd351f5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:05:92:15:cb:cc:80:93:ee:cd:b9:b2:e2:df:
53:f1:19:6c:a9:60:94:eb:fb:c2:1e:b1:63:2a:be:
de:51:b4:7b:f3:01:84:cc:be:d4:bb:80:ed:16:88:
1c:76:c8:cf:61:ac:1b:44:75:34:72:a2:43:32:20:
da:29:fc:1f:d7:96:04:fc:2b:cd:76:4b:a6:d5:e9:
86:cb:8f:bd:44:fe:d9:bc:61:fe:d1:b2:80:d2:d5:
7f:c9:70:81:f3:4c:f3:1f:0c:f6:b0:38:f2:96:84:
93:0c:dc:99:c7:6b:14:b2:8a:98:ce:b9:42:33:2f:
7b:b2:e6:ce:7e:5e:4b:2f:b3:26:bf:0f:a9:ed:b8:
5e:8b:7f:18:2d:c2:91:69:05:aa:9d:a4:c0:84:1b:
ba:b4:38:a2:0c:5c:2b:cd:74:e9:a2:70:51:cc:3d:
f2:5a:18:61:37:d0:fa:3c:17:74:ef:6a:37:2b:f2:
2a:f3:98:8c:85:2c:6b:3e:29:16:79:e8:74:e4:78:
eb:f6:69:2e:c0:66:12:6a:86:d2:a7:72:0c:b1:b4:
9f:88:15:6c:85:19:57:48:2c:34:41:2d:bf:46:62:
1f:17:93:cb:f4:2c:9a:7a:da:6b:af:84:17:17:cb:
e6:7a:d4:ef:1c:c8:65:d8:7b:5b:d9:1e:bd:93:e4:
0f:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:98:C0:9F:F7:EF:3E:48:BC:F0:91:D6:F0:35:83:1F:3B:D3:51:F5
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/zpjAn_fvPki88JHW8DWDHzvTUfU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
4e:b5:e1:8d:15:ef:34:8d:1d:55:19:08:78:c1:6e:5e:8c:14:
17:e1:1e:eb:a8:5d:89:bc:91:6f:17:76:00:aa:bd:94:13:70:
c1:6c:85:44:e0:e3:a8:db:f8:37:75:54:fb:97:e3:8a:aa:8b:
30:89:de:b9:da:71:3e:31:14:3e:bc:7f:92:5c:c4:c7:17:4e:
0d:17:c1:50:58:61:00:6f:2f:18:1c:9c:21:7f:62:25:d5:ae:
ec:68:ed:eb:06:ca:a7:ee:2d:f1:8b:29:03:ad:6c:99:31:9b:
a5:44:2b:e9:0b:7a:f3:e3:11:d3:f2:b6:6c:a8:69:f0:52:17:
c6:97:30:f2:13:a1:21:b7:4a:3a:a0:2e:ca:ff:55:af:cb:01:
9c:e8:31:09:15:87:b4:1f:71:1f:b9:0d:a4:79:e3:4d:57:ec:
bf:79:fd:79:8c:07:30:e8:7a:68:65:d9:3e:e2:72:75:cf:5c:
d8:56:84:eb:51:ac:df:74:59:75:99:15:e2:1e:07:51:5f:ab:
2c:66:44:91:1c:fc:d2:c5:ad:3f:33:25:ea:65:87:22:93:f5:
a0:ff:53:f8:cd:3b:1b:f1:b2:2e:ad:db:df:9c:67:78:ae:3e:
85:62:3b:86:47:f3:69:54:6e:17:bd:e5:ae:9a:78:c3:1e:5a:
bd:a1:47:07
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYaKASBhKntaAe8M0kbHTnj/MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcyMDQ3YmUxNWIyNzU5MDJkY2Y2MTdkYzNkMGUxNmRjMWYz
MDgwMjIwHhcNMjMwMjI1MTkxNjE1WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjZTk4YzA5ZmY3ZWYzZTQ4YmNmMDkxZDZmMDM1ODMxZjNiZDM1MWY1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhgWSFcvMgJPuzbmy4t9T8RlsqWCU
6/vCHrFjKr7eUbR78wGEzL7Uu4DtFogcdsjPYawbRHU0cqJDMiDaKfwf15YE/CvN
dkum1emGy4+9RP7ZvGH+0bKA0tV/yXCB80zzHwz2sDjyloSTDNyZx2sUsoqYzrlC
My97subOfl5LL7Mmvw+p7bhei38YLcKRaQWqnaTAhBu6tDiiDFwrzXTponBRzD3y
WhhhN9D6PBd072o3K/Iq85iMhSxrPikWeeh05Hjr9mkuwGYSaobSp3IMsbSfiBVs
hRlXSCw0QS2/RmIfF5PL9Cyaetprr4QXF8vmetTvHMhl2Htb2R69k+QP7wIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFM6YwJ/37z5IvPCR1vA1gx8701H1MB8GA1UdIwQY
MBaAFHIEe+FbJ1kC3PYX3D0OFtwfMIAiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMt
MWFiZTNhYzEwYWE2LzEvenBqQW5fZnZQa2k4OEpIVzhEV0RIenZUVWZVLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMtMWFiZTNhYzEwYWE2
LzEvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBAE614Y0V7zSNHVUZCHjB
bl6MFBfhHuuoXYm8kW8XdgCqvZQTcMFshUTg46jb+Dd1VPuX44qqizCJ3rnacT4x
FD68f5JcxMcXTg0XwVBYYQBvLxgcnCF/YiXVruxo7esGyqfuLfGLKQOtbJkxm6VE
K+kLevPjEdPytmyoafBSF8aXMPIToSG3SjqgLsr/Va/LAZzoMQkVh7QfcR+5DaR5
401X7L95/XmMBzDoemhl2T7icnXPXNhWhOtRrN90WXWZFeIeB1FfqyxmRJEc/NLF
rT8zJeplhyKT9aD/U/jNOxvxsi6t29+cZ3iuPoViO4ZH82lUbhe95a6aeMMeWr2h
Rwc=
-----END CERTIFICATE-----
Generated at Thu May 1 05:38:31 2025 by rpki-client