Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/zvxcQU988u_efm_unWCHW5To9k8.roa
File: zvxcQU988u_efm_unWCHW5To9k8.roa (raw, json)
Hash identifier: 92h1CEfzf80kinWfwwwEXI+JW/BpgjgzpRbYNHMz97c=
Subject key identifier: CE:FC:5C:41:4F:7C:F2:EF:DE:7E:6F:EE:9D:60:87:5B:94:E8:F6:4F
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 018674542C77F0154BEB943DC30705CDF408
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/zvxcQU988u_efm_unWCHW5To9k8.roa
Signing time: Tue 21 Feb 2023 14:15:18 +0000
ROA not before: Tue 21 Feb 2023 14:15:18 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:74:54:2c:77:f0:15:4b:eb:94:3d:c3:07:05:cd:f4:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Feb 21 14:15:18 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=cefc5c414f7cf2efde7e6fee9d60875b94e8f64f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:55:66:24:49:a0:88:93:5a:43:12:cc:b3:30:
4b:16:c2:bb:ba:c8:ba:7a:12:8a:af:75:65:49:19:
7d:14:e4:2f:fa:8f:1b:94:63:14:df:7b:39:3e:fb:
b8:b5:84:9c:92:12:fe:2c:06:ed:53:fe:1d:bb:ce:
49:ea:59:7d:12:53:08:29:d0:53:0d:ad:eb:0e:05:
23:1a:9b:ed:fc:1e:34:5d:25:bc:00:25:f2:b2:bc:
06:f0:31:5c:3e:4b:c3:bc:14:ad:8d:30:11:1d:2d:
35:c9:86:ea:d3:5d:8b:fb:22:c4:e9:5b:ac:74:ab:
21:43:92:18:5c:8a:a5:16:2a:11:34:28:0f:29:e0:
68:95:37:af:2e:c6:2c:10:cf:cb:44:ec:40:65:74:
1b:ae:27:b0:2a:bd:59:b4:65:e2:78:c3:bf:b4:77:
34:9f:b2:02:a1:93:d0:cb:7b:e9:b7:f2:73:f1:8f:
37:71:61:fa:14:f4:64:ea:88:2c:20:e0:15:54:60:
f1:4e:76:db:38:c1:fd:89:41:91:a1:f4:5f:5c:9c:
33:8c:a6:8a:b9:66:9c:e6:6a:ca:d4:7d:64:eb:c9:
e8:ab:1b:25:53:08:5e:02:f3:e8:2b:2f:1e:f4:99:
f2:08:94:69:e7:5b:a8:4f:48:76:4c:8f:64:0e:a5:
f5:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:FC:5C:41:4F:7C:F2:EF:DE:7E:6F:EE:9D:60:87:5B:94:E8:F6:4F
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/zvxcQU988u_efm_unWCHW5To9k8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
16:c6:49:70:f5:fc:11:68:94:0b:ec:cd:e9:a0:33:d0:83:59:
2b:48:91:00:0d:12:51:af:f6:a3:99:0c:fd:5b:b4:a9:1b:e5:
16:2a:e4:90:c2:40:40:eb:b2:7a:6d:e4:4c:2a:e7:52:a0:4f:
39:f4:15:75:24:2b:e3:89:54:a4:ae:90:da:83:d6:32:dc:88:
10:3b:bc:99:3b:0d:cb:ad:bf:cf:01:8e:e5:dc:17:7a:23:e2:
c5:e4:7f:7d:70:13:06:5b:f0:e4:4e:bc:a6:b2:39:bb:fa:d8:
de:36:f6:6f:5c:c5:e5:ce:0e:0b:24:af:3d:75:bf:3c:20:67:
7a:a4:89:a5:2d:4f:dd:74:da:c7:a8:c5:5c:e9:35:71:a1:84:
cf:11:52:fd:96:e8:12:56:b8:4b:31:b5:2c:10:93:a2:80:05:
c4:a5:74:f7:86:bd:a3:92:37:75:6d:ff:7b:51:f2:f6:57:da:
cb:7a:4e:a7:aa:93:cf:01:3a:5a:cc:15:3e:0e:33:de:0c:f4:
d3:d0:71:48:0a:a5:b1:8e:44:52:7e:23:a3:8b:fa:ca:ab:1d:
dd:ea:4b:20:44:e2:d8:36:2a:46:03:23:49:74:93:ac:12:02:
5a:38:e0:52:b7:9b:4b:97:8b:d1:db:4f:a9:82:07:2e:d3:68:
92:3c:4a:bb
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYZ0VCx38BVL65Q9wwcFzfQIMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcyMDQ3YmUxNWIyNzU5MDJkY2Y2MTdkYzNkMGUxNmRjMWYz
MDgwMjIwHhcNMjMwMjIxMTQxNTE4WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjZWZjNWM0MTRmN2NmMmVmZGU3ZTZmZWU5ZDYwODc1Yjk0ZThmNjRmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvVVmJEmgiJNaQxLMszBLFsK7usi6
ehKKr3VlSRl9FOQv+o8blGMU33s5Pvu4tYSckhL+LAbtU/4du85J6ll9ElMIKdBT
Da3rDgUjGpvt/B40XSW8ACXysrwG8DFcPkvDvBStjTARHS01yYbq012L+yLE6Vus
dKshQ5IYXIqlFioRNCgPKeBolTevLsYsEM/LROxAZXQbriewKr1ZtGXieMO/tHc0
n7ICoZPQy3vpt/Jz8Y83cWH6FPRk6ogsIOAVVGDxTnbbOMH9iUGRofRfXJwzjKaK
uWac5mrK1H1k68noqxslUwheAvPoKy8e9JnyCJRp51uoT0h2TI9kDqX11QIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFM78XEFPfPLv3n5v7p1gh1uU6PZPMB8GA1UdIwQY
MBaAFHIEe+FbJ1kC3PYX3D0OFtwfMIAiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMt
MWFiZTNhYzEwYWE2LzEvenZ4Y1FVOTg4dV9lZm1fdW5XQ0hXNVRvOWs4LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMtMWFiZTNhYzEwYWE2
LzEvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBABbGSXD1/BFolAvszemg
M9CDWStIkQANElGv9qOZDP1btKkb5RYq5JDCQEDrsnpt5Ewq51KgTzn0FXUkK+OJ
VKSukNqD1jLciBA7vJk7Dcutv88BjuXcF3oj4sXkf31wEwZb8OROvKayObv62N42
9m9cxeXODgskrz11vzwgZ3qkiaUtT9102seoxVzpNXGhhM8RUv2W6BJWuEsxtSwQ
k6KABcSldPeGvaOSN3Vt/3tR8vZX2st6Tqeqk88BOlrMFT4OM94M9NPQcUgKpbGO
RFJ+I6OL+sqrHd3qSyBE4tg2KkYDI0l0k6wSAlo44FK3m0uXi9HbT6mCBy7TaJI8
Srs=
-----END CERTIFICATE-----
Generated at Wed Apr 30 20:26:19 2025 by rpki-client