Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/zvZHxy1as_rHoD6GeSDEFrcEt7w.roa
File: zvZHxy1as_rHoD6GeSDEFrcEt7w.roa (raw, json)
Hash identifier: W7dICwXL4MmfL/6q0dIczYfHA63ZNJ9f1XcNB14SrRg=
Subject key identifier: CE:F6:47:C7:2D:5A:B3:FA:C7:A0:3E:86:79:20:C4:16:B7:04:B7:BC
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0189EDBDAFEB6A2620A0A437569A9AA5CBAC
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/zvZHxy1as_rHoD6GeSDEFrcEt7w.roa
Signing time: Sun 13 Aug 2023 07:12:58 +0000
ROA not before: Sun 13 Aug 2023 07:12:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:188:7858:a003/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:189:a0e4:5c7d/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:ed:bd:af:eb:6a:26:20:a0:a4:37:56:9a:9a:a5:cb:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Aug 13 07:12:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=cef647c72d5ab3fac7a03e867920c416b704b7bc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:0a:fa:3a:45:f5:9a:bd:4c:f1:b5:f2:0f:d0:
fd:fb:ec:cb:76:14:ef:b3:ff:56:af:1c:7d:ec:05:
13:2c:7e:8b:98:f6:cc:36:47:80:42:62:df:6f:5f:
62:55:ce:fc:21:d1:79:83:df:ca:9c:7e:c9:b4:7c:
7a:c1:c0:9f:c0:4c:97:bc:0e:7a:64:05:6d:55:84:
95:8f:ad:db:37:9e:8f:3b:95:28:9f:c1:3d:84:71:
5a:9e:9d:ae:5f:01:0a:61:d0:9e:fa:81:48:8a:e3:
6f:05:8e:88:c7:66:6a:9c:2d:d2:dd:b2:de:eb:9a:
d4:9a:8c:56:e1:44:58:96:cb:ab:9c:05:01:c3:16:
5b:7d:85:18:34:a4:b2:7d:9c:a8:96:a7:25:ed:b6:
63:7f:b9:8d:d5:65:ed:00:ff:6d:8d:33:8f:5d:4f:
69:c6:12:9a:68:cc:c6:e2:f6:8b:fa:01:fb:d5:c9:
b5:a5:5e:1c:e8:68:43:10:32:3a:7d:21:1c:cc:cd:
8f:5c:5e:7d:bf:65:6c:b5:15:fe:46:b1:7a:5d:dc:
ff:00:cf:0d:86:15:8a:77:c0:5c:4d:07:ff:b0:10:
25:a1:40:df:8a:be:58:ad:5a:0c:84:2c:61:05:09:
e1:a1:6f:d7:ef:9c:06:4f:08:91:fe:90:f3:41:2b:
7f:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:F6:47:C7:2D:5A:B3:FA:C7:A0:3E:86:79:20:C4:16:B7:04:B7:BC
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/zvZHxy1as_rHoD6GeSDEFrcEt7w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
85:33:74:b6:93:b0:0b:a9:49:9f:93:fb:df:66:9d:b0:9c:f0:
d0:3d:95:5e:6c:46:6e:59:55:65:7a:97:f6:1c:51:bc:7a:0c:
2d:05:94:ba:8a:1b:7c:97:fb:14:c7:ed:62:04:19:eb:0e:8e:
be:cd:52:ad:0e:9b:99:b8:76:cf:b4:1a:1a:35:7b:c8:1b:fd:
0b:83:61:b5:6e:d3:51:68:a2:95:a4:d8:6d:b0:1e:a5:c1:c5:
bd:25:0d:9e:5d:64:ab:90:d0:e0:9b:c0:a0:ca:44:d6:63:a1:
18:4f:6e:b3:02:50:e7:00:2c:c1:66:bc:d6:73:fb:45:1d:a0:
7d:13:63:1c:ed:0a:60:99:6e:80:2a:dc:0c:8f:b5:82:25:42:
55:0b:8e:eb:d3:cf:af:92:e0:d4:b6:ed:a6:91:f7:aa:28:53:
a0:c5:f4:92:f9:d8:e3:4a:c8:3c:d4:3e:6b:a6:3c:4a:76:ae:
b5:9b:58:6c:1c:cb:d3:05:5f:ac:1b:f3:a7:59:3a:36:ae:5e:
2d:e2:3f:81:c4:c3:a4:33:9f:e8:85:2d:e5:db:9b:51:b1:b3:
c6:90:8e:1b:10:2d:c0:15:e1:96:63:a6:5d:73:c6:dc:45:fb:
42:ba:42:e6:94:17:1a:4b:a1:a8:a2:5e:2a:5d:38:be:6e:30:
77:f1:ad:98
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYntva/raiYgoKQ3VpqapcusMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcyMDQ3YmUxNWIyNzU5MDJkY2Y2MTdkYzNkMGUxNmRjMWYz
MDgwMjIwHhcNMjMwODEzMDcxMjU4WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjZWY2NDdjNzJkNWFiM2ZhYzdhMDNlODY3OTIwYzQxNmI3MDRiN2JjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsAr6OkX1mr1M8bXyD9D9++zLdhTv
s/9Wrxx97AUTLH6LmPbMNkeAQmLfb19iVc78IdF5g9/KnH7JtHx6wcCfwEyXvA56
ZAVtVYSVj63bN56PO5Uon8E9hHFanp2uXwEKYdCe+oFIiuNvBY6Ix2ZqnC3S3bLe
65rUmoxW4URYlsurnAUBwxZbfYUYNKSyfZyolqcl7bZjf7mN1WXtAP9tjTOPXU9p
xhKaaMzG4vaL+gH71cm1pV4c6GhDEDI6fSEczM2PXF59v2VstRX+RrF6Xdz/AM8N
hhWKd8BcTQf/sBAloUDfir5YrVoMhCxhBQnhoW/X75wGTwiR/pDzQSt/zQIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFM72R8ctWrP6x6A+hnkgxBa3BLe8MB8GA1UdIwQY
MBaAFHIEe+FbJ1kC3PYX3D0OFtwfMIAiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMt
MWFiZTNhYzEwYWE2LzEvenZaSHh5MWFzX3JIb0Q2R2VTREVGcmNFdDd3LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMtMWFiZTNhYzEwYWE2
LzEvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBAIUzdLaTsAupSZ+T+99m
nbCc8NA9lV5sRm5ZVWV6l/YcUbx6DC0FlLqKG3yX+xTH7WIEGesOjr7NUq0Om5m4
ds+0Gho1e8gb/QuDYbVu01FoopWk2G2wHqXBxb0lDZ5dZKuQ0OCbwKDKRNZjoRhP
brMCUOcALMFmvNZz+0UdoH0TYxztCmCZboAq3AyPtYIlQlULjuvTz6+S4NS27aaR
96ooU6DF9JL52ONKyDzUPmumPEp2rrWbWGwcy9MFX6wb86dZOjauXi3iP4HEw6Qz
n+iFLeXbm1Gxs8aQjhsQLcAV4ZZjpl1zxtxF+0K6QuaUFxpLoaiiXipdOL5uMHfx
rZg=
-----END CERTIFICATE-----
Generated at Thu May 1 03:24:16 2025 by rpki-client