Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/zvX2c0giw8C7WxxZzSKr-KpzMvY.roa
File: zvX2c0giw8C7WxxZzSKr-KpzMvY.roa (raw, json)
Hash identifier: r+VNsCydo05QKJHuTxAxta+Aro2k8f16HrIwrVb2Tu0=
Subject key identifier: CE:F5:F6:73:48:22:C3:C0:BB:5B:1C:59:CD:22:AB:F8:AA:73:32:F6
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 018A22C52539C4CE63754DAA64C660E150B4
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/zvX2c0giw8C7WxxZzSKr-KpzMvY.roa
Signing time: Wed 23 Aug 2023 14:21:00 +0000
ROA not before: Wed 23 Aug 2023 14:21:00 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:188:7858:a003/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18a:178d:7ed9/128 maxlen: 128
2001:67c:64:ffff:0:189:a0e4:5c7d/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:22:c5:25:39:c4:ce:63:75:4d:aa:64:c6:60:e1:50:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Aug 23 14:21:00 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=cef5f6734822c3c0bb5b1c59cd22abf8aa7332f6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:b6:da:15:7c:0d:5d:18:e9:bb:01:65:ac:d8:
76:62:e8:42:a9:c2:92:36:05:89:03:0f:6e:71:af:
db:c3:72:91:97:77:1b:f1:3f:b1:c6:8f:5a:e4:29:
b2:b8:40:e6:5d:40:3f:ff:35:f3:71:bd:23:6e:67:
14:69:08:ba:df:73:2b:5c:c8:9a:0b:46:77:3e:53:
71:77:5c:f2:30:5d:85:0a:a8:a5:06:39:08:93:0e:
1d:55:bb:45:a4:65:35:e5:66:1d:ac:ba:3e:57:bb:
74:f9:89:7b:ca:f3:05:69:a2:c8:9d:52:a8:2e:a1:
ce:da:13:77:d6:ef:b4:a1:49:67:fc:47:a4:2e:c0:
78:4d:59:0c:26:15:fc:88:04:25:c2:81:8f:9b:14:
f4:2e:53:59:4b:4a:40:9a:71:6c:99:bd:35:c9:7b:
69:58:bb:62:50:7f:84:4b:f7:cc:27:82:05:e1:71:
3a:3f:b3:8b:17:1d:9b:9a:b5:a8:50:a8:ae:b6:ee:
3e:c3:a3:99:d8:92:9d:18:be:89:c3:b6:dd:eb:7c:
d6:56:2e:65:88:3a:3c:fc:14:05:13:34:0f:b2:5f:
08:8a:69:d5:20:a5:31:f0:77:55:e2:a1:23:d6:f8:
55:4c:d9:7d:6b:92:a5:9b:e5:1e:af:cc:41:0d:a1:
06:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:F5:F6:73:48:22:C3:C0:BB:5B:1C:59:CD:22:AB:F8:AA:73:32:F6
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/zvX2c0giw8C7WxxZzSKr-KpzMvY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
02:52:f7:a1:e9:b9:bc:c2:2b:c4:7e:8c:c0:36:70:fa:57:90:
47:0d:e9:20:59:97:11:91:08:45:35:05:99:2e:1d:83:57:12:
61:35:c3:e9:07:d2:10:9d:92:76:89:ba:85:0a:7e:fc:c3:88:
96:19:41:05:60:dc:ff:79:46:62:a3:e6:42:30:71:22:93:56:
21:98:98:1b:39:50:b1:a1:ae:4c:ff:a3:b9:29:48:63:4d:6e:
c4:76:2b:6b:70:cc:dc:15:00:9f:d6:c6:5d:e5:fd:6e:cf:70:
bc:17:f2:b9:dc:33:da:98:b0:b1:11:c0:c2:fb:46:66:4d:3d:
1e:52:c5:a4:c5:85:f5:ff:a8:57:18:21:46:3f:b0:7b:8d:93:
e4:72:f5:9a:45:06:2e:64:de:33:46:ca:b6:f9:f8:bb:45:0c:
80:76:d9:e7:72:6e:06:09:60:c0:2f:2c:a3:e5:c9:ea:a5:c3:
d2:7e:bf:cf:d3:6f:3f:6f:c1:1f:07:ef:35:34:74:08:4c:1d:
56:0d:32:75:54:46:02:a2:85:2a:49:a4:fd:26:3f:02:e4:68:
ee:b1:aa:ed:31:32:c9:27:f7:13:f3:a4:5c:18:4b:d9:8e:ad:
1f:fa:86:b5:12:f6:bf:fb:65:4a:58:f7:de:29:60:19:ec:bc:
f7:52:fb:1f
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYoixSU5xM5jdU2qZMZg4VC0MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcyMDQ3YmUxNWIyNzU5MDJkY2Y2MTdkYzNkMGUxNmRjMWYz
MDgwMjIwHhcNMjMwODIzMTQyMTAwWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjZWY1ZjY3MzQ4MjJjM2MwYmI1YjFjNTljZDIyYWJmOGFhNzMzMmY2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAirbaFXwNXRjpuwFlrNh2YuhCqcKS
NgWJAw9uca/bw3KRl3cb8T+xxo9a5CmyuEDmXUA//zXzcb0jbmcUaQi633MrXMia
C0Z3PlNxd1zyMF2FCqilBjkIkw4dVbtFpGU15WYdrLo+V7t0+Yl7yvMFaaLInVKo
LqHO2hN31u+0oUln/EekLsB4TVkMJhX8iAQlwoGPmxT0LlNZS0pAmnFsmb01yXtp
WLtiUH+ES/fMJ4IF4XE6P7OLFx2bmrWoUKiutu4+w6OZ2JKdGL6Jw7bd63zWVi5l
iDo8/BQFEzQPsl8IimnVIKUx8HdV4qEj1vhVTNl9a5Klm+Uer8xBDaEGWwIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFM719nNIIsPAu1scWc0iq/iqczL2MB8GA1UdIwQY
MBaAFHIEe+FbJ1kC3PYX3D0OFtwfMIAiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMt
MWFiZTNhYzEwYWE2LzEvenZYMmMwZ2l3OEM3V3h4WnpTS3ItS3B6TXZZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMtMWFiZTNhYzEwYWE2
LzEvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBAAJS96HpubzCK8R+jMA2
cPpXkEcN6SBZlxGRCEU1BZkuHYNXEmE1w+kH0hCdknaJuoUKfvzDiJYZQQVg3P95
RmKj5kIwcSKTViGYmBs5ULGhrkz/o7kpSGNNbsR2K2twzNwVAJ/Wxl3l/W7PcLwX
8rncM9qYsLERwML7RmZNPR5SxaTFhfX/qFcYIUY/sHuNk+Ry9ZpFBi5k3jNGyrb5
+LtFDIB22edybgYJYMAvLKPlyeqlw9J+v8/Tbz9vwR8H7zU0dAhMHVYNMnVURgKi
hSpJpP0mPwLkaO6xqu0xMskn9xPzpFwYS9mOrR/6hrUS9r/7ZUpY994pYBnsvPdS
+x8=
-----END CERTIFICATE-----
Generated at Thu May 1 06:10:12 2025 by rpki-client