Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/ZNElzuTPrwfrSvt0Mz_QHlnYTfg.roa
File: ZNElzuTPrwfrSvt0Mz_QHlnYTfg.roa (raw, json)
Hash identifier: Esdt/7eIM8Fy+Kkcxxwz/ETzxHhsn464K34JI5oJDec=
Subject key identifier: 64:D1:25:CE:E4:CF:AF:07:EB:4A:FB:74:33:3F:D0:1E:59:D8:4D:F8
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 018537CF4CCC04BDCEDFA70123F49E285FFF
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/ZNElzuTPrwfrSvt0Mz_QHlnYTfg.roa
Signing time: Thu 22 Dec 2022 03:10:10 +0000
ROA not before: Thu 22 Dec 2022 03:10:10 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:37:cf:4c:cc:04:bd:ce:df:a7:01:23:f4:9e:28:5f:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Dec 22 03:10:10 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=64d125cee4cfaf07eb4afb74333fd01e59d84df8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:5d:29:da:e5:77:e0:46:fe:06:9b:23:0e:54:
a6:fb:d5:3e:7d:22:c6:8c:17:9e:de:c2:df:1f:d2:
de:95:23:a3:ab:1d:83:dd:fd:7c:84:14:30:af:4b:
62:6b:19:fa:8e:34:f6:31:de:1a:f1:cb:34:f8:e8:
7f:cb:09:b3:7f:af:82:04:d6:0d:d9:7e:68:d1:12:
b2:b2:b8:95:fe:31:e1:ba:f9:11:a4:04:f1:7b:28:
05:d7:4e:fd:b6:74:12:0d:a5:7a:06:35:a2:22:47:
fd:ea:be:3f:4d:19:67:19:b3:da:21:6e:79:19:4f:
bc:a2:33:ef:8e:07:6d:dc:9e:0e:87:91:8b:00:c0:
bc:a4:5e:9d:d2:db:ef:a6:27:a3:9c:a5:72:a5:ad:
2d:ce:e7:3b:ad:58:13:17:f6:49:9b:01:f5:07:7d:
d8:c8:ee:e5:60:84:c4:0d:ad:04:c2:91:c6:89:c7:
d3:39:be:4d:f9:a8:a7:f4:eb:d7:e0:e3:73:ed:8b:
6b:ab:24:6d:6e:86:2d:fd:40:38:46:02:89:a5:ee:
df:c7:7f:a6:72:de:f2:4c:df:02:88:df:1c:ed:54:
9b:30:23:d7:c1:e9:57:9e:ad:12:1e:35:fa:1d:19:
36:e1:47:27:4a:6e:e1:dc:91:c1:5c:19:6f:4c:67:
c6:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:D1:25:CE:E4:CF:AF:07:EB:4A:FB:74:33:3F:D0:1E:59:D8:4D:F8
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/ZNElzuTPrwfrSvt0Mz_QHlnYTfg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
78:51:68:24:07:5a:af:d9:d3:12:d5:4c:06:1a:66:e4:b0:8e:
7f:9c:82:8c:18:ba:1b:3d:de:e0:bc:4a:b9:2a:f4:97:d1:f7:
79:3b:90:59:64:b0:0a:7f:81:4b:66:ea:51:41:04:03:14:97:
c0:f5:b2:f4:ca:48:35:29:2f:de:4c:b3:1a:be:77:75:25:b3:
8c:59:70:94:e4:ff:b5:61:d6:70:ca:1d:08:c2:c2:e8:33:75:
a4:89:4a:c8:9c:e8:4a:65:13:dd:ff:b1:d6:29:bb:9a:51:bc:
0d:20:3f:dc:da:3a:62:b8:c5:b7:95:c3:5f:76:82:d1:7e:9f:
1a:50:aa:cc:76:cd:6a:da:aa:03:12:e5:2c:72:3e:2e:50:d8:
03:15:6d:95:a9:95:ca:24:75:b7:55:e8:0f:8c:2a:98:02:1d:
ad:23:f5:0e:71:44:47:c3:ca:54:7b:3d:0d:c3:c4:a8:58:6c:
94:d7:bb:8f:34:67:68:86:f5:15:e9:cd:0a:6e:80:bd:6a:9b:
a9:eb:2c:59:3a:88:fd:ce:98:3f:11:0d:76:c0:79:c9:53:74:
69:fa:7e:b8:59:43:cd:87:ed:e2:d4:e4:b6:36:98:d3:ce:95:
7d:41:71:5f:16:5e:70:d2:ed:8f:0d:fb:83:79:c0:36:5f:5b:
23:41:fb:c5
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYU3z0zMBL3O36cBI/SeKF//MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcyMDQ3YmUxNWIyNzU5MDJkY2Y2MTdkYzNkMGUxNmRjMWYz
MDgwMjIwHhcNMjIxMjIyMDMxMDEwWhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2NGQxMjVjZWU0Y2ZhZjA3ZWI0YWZiNzQzMzNmZDAxZTU5ZDg0ZGY4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjF0p2uV34Eb+BpsjDlSm+9U+fSLG
jBee3sLfH9LelSOjqx2D3f18hBQwr0tiaxn6jjT2Md4a8cs0+Oh/ywmzf6+CBNYN
2X5o0RKysriV/jHhuvkRpATxeygF1079tnQSDaV6BjWiIkf96r4/TRlnGbPaIW55
GU+8ojPvjgdt3J4Oh5GLAMC8pF6d0tvvpiejnKVypa0tzuc7rVgTF/ZJmwH1B33Y
yO7lYITEDa0EwpHGicfTOb5N+ain9OvX4ONz7YtrqyRtboYt/UA4RgKJpe7fx3+m
ct7yTN8CiN8c7VSbMCPXwelXnq0SHjX6HRk24UcnSm7h3JHBXBlvTGfGBQIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFGTRJc7kz68H60r7dDM/0B5Z2E34MB8GA1UdIwQY
MBaAFHIEe+FbJ1kC3PYX3D0OFtwfMIAiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMt
MWFiZTNhYzEwYWE2LzEvWk5FbHp1VFByd2ZyU3Z0ME16X1FIbG5ZVGZnLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMtMWFiZTNhYzEwYWE2
LzEvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBAHhRaCQHWq/Z0xLVTAYa
ZuSwjn+cgowYuhs93uC8Srkq9JfR93k7kFlksAp/gUtm6lFBBAMUl8D1svTKSDUp
L95Msxq+d3Uls4xZcJTk/7Vh1nDKHQjCwugzdaSJSsic6EplE93/sdYpu5pRvA0g
P9zaOmK4xbeVw192gtF+nxpQqsx2zWraqgMS5SxyPi5Q2AMVbZWplcokdbdV6A+M
KpgCHa0j9Q5xREfDylR7PQ3DxKhYbJTXu480Z2iG9RXpzQpugL1qm6nrLFk6iP3O
mD8RDXbAeclTdGn6frhZQ82H7eLU5LY2mNPOlX1BcV8WXnDS7Y8N+4N5wDZfWyNB
+8U=
-----END CERTIFICATE-----
Generated at Mon Jun 9 02:41:55 2025 by rpki-client