Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/CZVp3yze9QRRFqmsAq7XEjKEgeM.roa
File: CZVp3yze9QRRFqmsAq7XEjKEgeM.roa (raw, json)
Hash identifier: zb3GwNZvXTu+UV8whQkOlq6eNIAdv+s9PVdRKb+8340=
Subject key identifier: 09:95:69:DF:2C:DE:F5:04:51:16:A9:AC:02:AE:D7:12:32:84:81:E3
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 018A006A0DEBCBAA001E7AFE87028B89C83F
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/CZVp3yze9QRRFqmsAq7XEjKEgeM.roa
Signing time: Wed 16 Aug 2023 22:14:24 +0000
ROA not before: Wed 16 Aug 2023 22:14:24 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:188:7858:a003/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:189:a0e4:5c7d/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:00:6a:0d:eb:cb:aa:00:1e:7a:fe:87:02:8b:89:c8:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Aug 16 22:14:24 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=099569df2cdef5045116a9ac02aed712328481e3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:3e:d2:ce:c0:98:cf:5d:44:57:63:b1:8d:cd:
11:71:c4:f9:b3:1d:51:20:dc:c4:4b:5b:49:70:24:
57:4c:92:3d:11:57:27:dc:ca:92:27:9f:20:2b:12:
28:09:c5:96:be:2f:16:b0:71:de:4e:c4:2c:c8:44:
13:63:85:17:90:ea:70:6c:66:cf:95:a0:0b:f1:68:
c8:9b:bb:ba:8a:79:22:fb:39:8a:64:aa:c6:ab:cd:
39:90:4c:e3:6d:4c:1a:09:be:fd:56:0d:fa:ba:c5:
10:91:d2:e2:7c:67:40:f7:09:f7:f4:6f:e9:cb:3c:
5f:3e:6b:2a:29:0f:14:85:8a:eb:2e:ce:60:c0:fc:
9f:82:f2:aa:eb:3e:83:22:04:ed:8f:d8:b0:1d:0e:
7c:13:40:0b:0f:e8:72:4c:59:65:c0:b8:ad:2a:d3:
49:74:04:0b:50:4a:cb:2a:87:14:5e:34:d3:e9:23:
e0:f7:ad:3e:f7:c1:4b:27:60:23:6c:12:5d:98:75:
3a:06:98:17:05:97:f6:5b:d7:77:7f:3d:16:28:d0:
39:39:1a:c2:04:bc:7e:c8:e7:b5:df:2a:40:05:0d:
a5:95:3f:34:b9:38:34:0d:ff:fa:4d:2d:c2:f3:2f:
cb:a2:4b:16:89:da:8f:b5:e8:d2:73:40:5b:c0:ea:
00:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:95:69:DF:2C:DE:F5:04:51:16:A9:AC:02:AE:D7:12:32:84:81:E3
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/CZVp3yze9QRRFqmsAq7XEjKEgeM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
6f:80:b8:28:3a:32:a9:bb:df:98:14:47:d1:77:1a:82:76:6f:
a4:f6:d5:9a:b9:07:b5:66:ee:66:4e:a5:38:f8:c3:2f:7b:29:
1c:d4:c1:26:81:41:2e:f5:90:26:96:0f:d1:d7:eb:13:68:d4:
3f:0d:5f:be:8c:50:ae:63:fa:d6:e5:3e:37:13:00:75:0e:8b:
c0:b3:2e:9d:9b:ca:45:1b:05:0b:64:a2:7a:e6:10:7e:bb:5d:
88:6e:3d:69:3b:f7:1f:de:32:16:0b:4a:fc:44:83:6d:6c:2e:
8a:42:b3:a4:ea:ec:2c:92:65:68:cb:5c:be:46:fa:75:ad:bf:
a2:ca:db:17:55:b9:e0:94:83:86:43:67:45:b6:ae:d1:dc:b4:
e7:2e:94:bd:31:e3:52:53:45:04:5b:c8:5f:fd:f8:a9:e5:5d:
70:52:91:f8:31:b4:42:14:fe:b8:2f:60:b5:3c:fe:59:19:b2:
77:d5:b4:78:73:33:43:8d:ef:a7:43:3c:57:2a:bb:d6:ed:5b:
52:28:58:fe:fa:9f:e8:ef:a3:33:17:43:e1:da:21:8c:ee:ae:
df:77:f4:7a:06:eb:96:59:cf:d9:fe:4f:e1:eb:4e:ee:07:6c:
25:77:79:0b:4a:51:99:b8:6c:ba:9c:4c:79:d4:b3:28:38:aa:
22:60:f1:e8
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYoAag3ry6oAHnr+hwKLicg/MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcyMDQ3YmUxNWIyNzU5MDJkY2Y2MTdkYzNkMGUxNmRjMWYz
MDgwMjIwHhcNMjMwODE2MjIxNDI0WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwOTk1NjlkZjJjZGVmNTA0NTExNmE5YWMwMmFlZDcxMjMyODQ4MWUzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjD7SzsCYz11EV2Oxjc0RccT5sx1R
INzES1tJcCRXTJI9EVcn3MqSJ58gKxIoCcWWvi8WsHHeTsQsyEQTY4UXkOpwbGbP
laAL8WjIm7u6inki+zmKZKrGq805kEzjbUwaCb79Vg36usUQkdLifGdA9wn39G/p
yzxfPmsqKQ8UhYrrLs5gwPyfgvKq6z6DIgTtj9iwHQ58E0ALD+hyTFllwLitKtNJ
dAQLUErLKocUXjTT6SPg960+98FLJ2AjbBJdmHU6BpgXBZf2W9d3fz0WKNA5ORrC
BLx+yOe13ypABQ2llT80uTg0Df/6TS3C8y/LoksWidqPtejSc0BbwOoADwIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFAmVad8s3vUEURaprAKu1xIyhIHjMB8GA1UdIwQY
MBaAFHIEe+FbJ1kC3PYX3D0OFtwfMIAiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMt
MWFiZTNhYzEwYWE2LzEvQ1pWcDN5emU5UVJSRnFtc0FxN1hFaktFZ2VNLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMtMWFiZTNhYzEwYWE2
LzEvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBAG+AuCg6Mqm735gUR9F3
GoJ2b6T21Zq5B7Vm7mZOpTj4wy97KRzUwSaBQS71kCaWD9HX6xNo1D8NX76MUK5j
+tblPjcTAHUOi8CzLp2bykUbBQtkonrmEH67XYhuPWk79x/eMhYLSvxEg21sLopC
s6Tq7CySZWjLXL5G+nWtv6LK2xdVueCUg4ZDZ0W2rtHctOculL0x41JTRQRbyF/9
+KnlXXBSkfgxtEIU/rgvYLU8/lkZsnfVtHhzM0ON76dDPFcqu9btW1IoWP76n+jv
ozMXQ+HaIYzurt939HoG65ZZz9n+T+HrTu4HbCV3eQtKUZm4bLqcTHnUsyg4qiJg
8eg=
-----END CERTIFICATE-----
Generated at Wed Jun 11 12:32:58 2025 by rpki-client