Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/zvbqZrRu0X9MESSDT1x0RpT1RIg.roa
File: zvbqZrRu0X9MESSDT1x0RpT1RIg.roa (raw, json)
Hash identifier: UCzAqhwgQHB6cLtB7nkV1Ruz61qQsiuSEVRO2TWdW2I=
Subject key identifier: CE:F6:EA:66:B4:6E:D1:7F:4C:11:24:83:4F:5C:74:46:94:F5:44:88
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0188A48C838EA110A28941297DE1513C08AD
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/zvbqZrRu0X9MESSDT1x0RpT1RIg.roa
Signing time: Sat 10 Jun 2023 09:04:12 +0000
ROA not before: Sat 10 Jun 2023 09:04:12 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:188:a48c:7b87/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:188:5fe2:b396/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:187:4695:a68a/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:188:7858:a003/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64:ffff:0:187:fa9a:b088/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:187:b2b8:a7dd/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:a4:8c:83:8e:a1:10:a2:89:41:29:7d:e1:51:3c:08:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Jun 10 09:04:12 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=cef6ea66b46ed17f4c1124834f5c744694f54488
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:0f:d8:c3:1b:1a:2e:b9:a9:bf:91:34:0a:fa:
7f:e9:16:25:da:60:47:18:5b:ee:1f:49:fb:d8:da:
3c:51:0a:cb:c1:7d:0e:13:e7:82:6d:ed:d3:e2:3e:
55:ec:99:87:11:e3:23:92:25:34:66:e0:82:d0:c8:
c8:dc:7a:d2:74:73:81:20:fa:a1:9a:43:aa:bf:86:
e5:7c:fa:d9:2a:b7:ee:20:7c:45:27:1b:a6:bd:6c:
b8:1d:c8:98:b1:46:cf:4e:42:70:56:0a:f0:d8:df:
6f:55:9c:13:4b:3e:6a:cc:f0:a2:e9:2e:48:4d:a2:
cd:ba:8d:46:22:57:e5:37:90:6e:d3:d5:35:91:73:
6b:94:bc:d0:e5:52:1e:59:42:45:3e:3e:c5:1d:03:
17:d4:78:81:11:6e:d8:a7:35:37:71:1f:78:7d:7a:
0b:d8:a2:dd:6e:13:8a:6c:14:2d:1a:65:2c:81:70:
ab:d2:0c:ae:f4:64:22:ff:b9:0a:97:09:07:09:e1:
c2:ac:d6:bd:7f:fe:21:e5:ae:10:02:b5:12:45:59:
55:5b:2b:8c:43:cd:78:91:11:4e:4f:52:eb:03:ee:
e4:d3:65:14:b4:e3:5f:a6:70:58:35:45:a3:8f:48:
a3:ea:c6:5f:4f:44:86:ab:b9:56:dd:f2:ad:97:26:
96:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:F6:EA:66:B4:6E:D1:7F:4C:11:24:83:4F:5C:74:46:94:F5:44:88
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/zvbqZrRu0X9MESSDT1x0RpT1RIg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
78:ca:a2:97:35:37:01:17:65:ac:17:6b:f8:63:c6:f9:75:4d:
6a:52:29:43:d2:54:94:ac:9c:3c:d1:01:ac:a2:fd:eb:d9:cc:
53:a5:cb:84:aa:60:25:43:73:fa:29:71:37:c0:ea:60:bd:8e:
f2:ff:a8:10:5f:ad:e3:2c:01:2c:3b:86:cc:8f:82:95:c3:e6:
31:27:59:6d:2e:9e:ce:c5:e4:fc:e4:15:8a:8c:1e:a6:30:eb:
93:ff:af:51:e5:86:2f:11:cc:1c:45:95:d6:c8:30:a6:8f:89:
f9:ba:c6:95:b6:8d:1a:df:28:ba:5b:10:48:f6:ad:43:0a:43:
99:4b:ee:1c:b8:a7:da:f7:8f:7d:94:e7:e0:b0:30:4b:d8:d4:
20:3a:3c:38:81:18:9d:f9:07:a8:c6:fa:19:96:f5:2f:0e:6e:
04:60:81:6a:41:2f:79:6c:52:cb:6b:49:58:84:bf:6e:60:61:
ee:60:2d:13:2c:7c:7e:3d:13:3e:c8:dd:35:a5:a3:7d:4e:d1:
0a:36:b9:b1:50:07:4c:86:f5:15:4a:97:d3:87:3b:af:7a:a3:
6b:3d:b9:89:99:ff:a3:a2:10:95:80:cd:68:8e:1d:00:69:86:
dc:a1:66:13:79:ea:ce:37:24:78:3a:6a:24:01:c6:2f:bd:33:
1d:d1:a8:16
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYikjIOOoRCiiUEpfeFRPAitMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcyMDQ3YmUxNWIyNzU5MDJkY2Y2MTdkYzNkMGUxNmRjMWYz
MDgwMjIwHhcNMjMwNjEwMDkwNDEyWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjZWY2ZWE2NmI0NmVkMTdmNGMxMTI0ODM0ZjVjNzQ0Njk0ZjU0NDg4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkw/YwxsaLrmpv5E0Cvp/6RYl2mBH
GFvuH0n72No8UQrLwX0OE+eCbe3T4j5V7JmHEeMjkiU0ZuCC0MjI3HrSdHOBIPqh
mkOqv4blfPrZKrfuIHxFJxumvWy4HciYsUbPTkJwVgrw2N9vVZwTSz5qzPCi6S5I
TaLNuo1GIlflN5Bu09U1kXNrlLzQ5VIeWUJFPj7FHQMX1HiBEW7YpzU3cR94fXoL
2KLdbhOKbBQtGmUsgXCr0gyu9GQi/7kKlwkHCeHCrNa9f/4h5a4QArUSRVlVWyuM
Q814kRFOT1LrA+7k02UUtONfpnBYNUWjj0ij6sZfT0SGq7lW3fKtlyaWpQIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFM726ma0btF/TBEkg09cdEaU9USIMB8GA1UdIwQY
MBaAFHIEe+FbJ1kC3PYX3D0OFtwfMIAiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMt
MWFiZTNhYzEwYWE2LzEvenZicVpyUnUwWDlNRVNTRFQxeDBScFQxUklnLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMtMWFiZTNhYzEwYWE2
LzEvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBAHjKopc1NwEXZawXa/hj
xvl1TWpSKUPSVJSsnDzRAayi/evZzFOly4SqYCVDc/opcTfA6mC9jvL/qBBfreMs
ASw7hsyPgpXD5jEnWW0uns7F5PzkFYqMHqYw65P/r1Hlhi8RzBxFldbIMKaPifm6
xpW2jRrfKLpbEEj2rUMKQ5lL7hy4p9r3j32U5+CwMEvY1CA6PDiBGJ35B6jG+hmW
9S8ObgRggWpBL3lsUstrSViEv25gYe5gLRMsfH49Ez7I3TWlo31O0Qo2ubFQB0yG
9RVKl9OHO696o2s9uYmZ/6OiEJWAzWiOHQBphtyhZhN56s43JHg6aiQBxi+9Mx3R
qBY=
-----END CERTIFICATE-----
Generated at Thu May 1 03:25:52 2025 by rpki-client