Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/ZPb-_TwoxHexfGugQjIJobTRPt0.roa
File: ZPb-_TwoxHexfGugQjIJobTRPt0.roa (raw, json)
Hash identifier: AaKE3Z17ya5+R+Gndv9Q7KWXQGIsB5b580hiLwaxr3I=
Subject key identifier: 64:F6:FE:FD:3C:28:C4:77:B1:7C:6B:A0:42:32:09:A1:B4:D1:3E:DD
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 01866E51274445A69716428F4F174F40BB16
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/ZPb-_TwoxHexfGugQjIJobTRPt0.roa
Signing time: Mon 20 Feb 2023 10:14:17 +0000
ROA not before: Mon 20 Feb 2023 10:14:17 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:6e:51:27:44:45:a6:97:16:42:8f:4f:17:4f:40:bb:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Feb 20 10:14:17 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=64f6fefd3c28c477b17c6ba0423209a1b4d13edd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:5f:de:79:f8:28:40:dd:89:42:09:86:81:a4:
21:43:65:d3:b6:f7:ec:81:ef:2e:49:bd:20:12:09:
6a:f7:63:42:26:e2:1a:41:fe:d4:fc:01:d1:9a:de:
c2:5d:6f:19:4e:28:94:85:3b:23:93:f8:9d:0a:b0:
94:81:72:5d:60:53:90:1a:f5:44:00:5d:a2:49:7d:
ff:2f:21:d3:cf:95:38:1e:4d:3e:8e:b6:59:27:2e:
b4:1a:e5:d8:55:a8:42:94:77:da:39:ad:f6:65:c0:
4a:68:80:ee:04:5a:16:e9:1e:a5:69:d9:f6:29:bd:
24:53:87:c1:76:fd:c2:7d:22:71:94:34:3b:15:f9:
c7:19:91:a9:73:d4:54:e8:fa:8b:de:12:69:17:d5:
68:b8:f9:08:3f:4f:89:ad:3e:fb:26:74:cf:03:f5:
f9:09:cf:a3:ee:67:22:04:66:65:aa:1f:55:c0:86:
30:fa:5c:3a:e3:75:7e:0e:74:39:52:07:e3:3a:f5:
20:0b:a2:d8:97:59:6d:9a:f8:56:2c:98:c5:b4:32:
24:21:36:d1:f4:9e:a4:b4:2e:81:9b:21:38:a5:47:
d6:72:5c:cc:6e:a8:49:f1:11:29:2a:cb:4f:36:f8:
90:c5:bd:96:85:78:ee:b1:93:ca:44:45:66:e3:a1:
30:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:F6:FE:FD:3C:28:C4:77:B1:7C:6B:A0:42:32:09:A1:B4:D1:3E:DD
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/ZPb-_TwoxHexfGugQjIJobTRPt0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
a1:f5:81:8e:9d:ef:b0:29:bf:f8:17:65:4f:89:06:2c:96:27:
fc:8f:7d:e8:1b:6b:c9:f8:f4:d7:7c:9c:0e:37:30:0a:c6:a3:
75:63:56:48:a1:18:f8:cb:8c:ae:c7:9a:28:47:49:69:a9:a6:
7a:52:5f:60:21:9f:6e:be:48:e1:f3:bc:e3:a7:49:ab:97:bc:
17:ee:af:f5:0c:a5:55:20:04:72:73:41:11:fd:04:a7:5b:be:
f8:a1:c6:5c:77:d8:9c:be:ff:52:9f:6e:0a:aa:cc:09:ac:5d:
02:ff:c4:8e:73:d9:57:8b:f5:c8:1c:c9:01:19:eb:9c:42:1c:
1e:22:33:cb:f4:ca:be:5f:b2:42:9e:17:28:92:4f:c9:9a:80:
08:fa:0d:4f:c0:1d:94:aa:40:08:37:0d:ee:b8:96:4a:29:0f:
e7:20:63:51:d8:f4:74:17:1d:94:06:85:58:08:1f:9f:43:63:
26:16:1a:87:8a:82:d6:8e:ba:9d:f3:42:7a:3c:46:36:12:f5:
58:59:89:86:12:64:5d:89:e1:0c:dd:c1:40:9a:17:d0:1c:e5:
8c:32:be:b9:0d:45:db:64:ca:de:dc:65:8f:13:ab:68:35:b7:
4f:be:b5:c6:23:ce:e8:b3:05:6f:fd:e2:d1:f0:2e:c8:9c:39:
36:11:5a:98
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYZuUSdERaaXFkKPTxdPQLsWMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcyMDQ3YmUxNWIyNzU5MDJkY2Y2MTdkYzNkMGUxNmRjMWYz
MDgwMjIwHhcNMjMwMjIwMTAxNDE3WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2NGY2ZmVmZDNjMjhjNDc3YjE3YzZiYTA0MjMyMDlhMWI0ZDEzZWRkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlV/eefgoQN2JQgmGgaQhQ2XTtvfs
ge8uSb0gEglq92NCJuIaQf7U/AHRmt7CXW8ZTiiUhTsjk/idCrCUgXJdYFOQGvVE
AF2iSX3/LyHTz5U4Hk0+jrZZJy60GuXYVahClHfaOa32ZcBKaIDuBFoW6R6ladn2
Kb0kU4fBdv3CfSJxlDQ7FfnHGZGpc9RU6PqL3hJpF9VouPkIP0+JrT77JnTPA/X5
Cc+j7mciBGZlqh9VwIYw+lw643V+DnQ5UgfjOvUgC6LYl1ltmvhWLJjFtDIkITbR
9J6ktC6BmyE4pUfWclzMbqhJ8REpKstPNviQxb2WhXjusZPKREVm46EwkQIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFGT2/v08KMR3sXxroEIyCaG00T7dMB8GA1UdIwQY
MBaAFHIEe+FbJ1kC3PYX3D0OFtwfMIAiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMt
MWFiZTNhYzEwYWE2LzEvWlBiLV9Ud294SGV4Zkd1Z1FqSUpvYlRSUHQwLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMtMWFiZTNhYzEwYWE2
LzEvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBAKH1gY6d77Apv/gXZU+J
BiyWJ/yPfegba8n49Nd8nA43MArGo3VjVkihGPjLjK7HmihHSWmppnpSX2Ahn26+
SOHzvOOnSauXvBfur/UMpVUgBHJzQRH9BKdbvvihxlx32Jy+/1KfbgqqzAmsXQL/
xI5z2VeL9cgcyQEZ65xCHB4iM8v0yr5fskKeFyiST8magAj6DU/AHZSqQAg3De64
lkopD+cgY1HY9HQXHZQGhVgIH59DYyYWGoeKgtaOup3zQno8RjYS9VhZiYYSZF2J
4QzdwUCaF9Ac5YwyvrkNRdtkyt7cZY8Tq2g1t0++tcYjzuizBW/94tHwLsicOTYR
Wpg=
-----END CERTIFICATE-----
Generated at Mon Jun 9 00:23:11 2025 by rpki-client