Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/ZiaxYgvE-T_z3mbOFT_Uh2WVtVc.roa
File: ZiaxYgvE-T_z3mbOFT_Uh2WVtVc.roa (raw, json)
Hash identifier: 9FNDNM8DfhfL+JWEga2nvzw5lNoPjH2RoCBiHEtODlw=
Subject key identifier: 66:26:B1:62:0B:C4:F9:3F:F3:DE:66:CE:15:3F:D4:87:65:95:B5:57
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 01898E75B9E7398F88BA6BD7E99EBA88D861
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/ZiaxYgvE-T_z3mbOFT_Uh2WVtVc.roa
Signing time: Tue 25 Jul 2023 19:10:27 +0000
ROA not before: Tue 25 Jul 2023 19:10:27 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:188:7858:a003/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:8e:75:b9:e7:39:8f:88:ba:6b:d7:e9:9e:ba:88:d8:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Jul 25 19:10:27 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=6626b1620bc4f93ff3de66ce153fd4876595b557
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:2f:0f:b5:68:0a:9b:6c:77:5d:3c:ea:f2:73:
33:3c:cc:15:75:01:cd:cc:fc:e3:d7:d1:9b:1a:6d:
ac:3a:0e:d5:06:61:4e:4c:d8:f2:8f:5d:6a:ac:2d:
b3:24:5e:16:04:5d:e7:80:64:75:f6:85:20:22:bc:
69:e5:92:94:07:13:3e:b0:51:ff:97:39:ff:82:25:
ec:a4:49:10:56:31:91:cc:5a:76:14:ea:f5:3c:3e:
9b:17:0b:f7:6d:bf:5d:d8:11:8c:82:7c:df:b2:1f:
93:59:a8:f2:25:f5:3b:89:45:f3:10:1e:90:85:02:
4e:ae:55:e2:a9:01:e2:87:42:39:4f:1d:04:ee:e7:
77:4f:8d:ff:1e:2d:99:64:0f:0f:21:76:ab:24:3a:
87:75:75:48:aa:9b:b0:0f:0d:f0:9f:af:ba:45:2b:
91:44:47:bd:26:d6:8a:a0:d4:6a:e3:07:36:d6:45:
03:2a:dc:66:c5:11:55:c1:90:96:94:d2:da:2c:0b:
d9:2a:ce:b3:11:93:57:e6:c8:e9:5b:db:dd:1a:ae:
6b:62:e5:27:d1:8c:97:2e:4f:a3:bb:95:c4:39:16:
70:62:16:05:e7:aa:34:0c:9a:61:68:e0:6a:67:a6:
1d:2a:c9:3c:e8:2e:44:35:86:04:f4:0e:be:63:62:
a9:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:26:B1:62:0B:C4:F9:3F:F3:DE:66:CE:15:3F:D4:87:65:95:B5:57
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/ZiaxYgvE-T_z3mbOFT_Uh2WVtVc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
29:74:91:de:5b:08:1c:68:42:c2:51:b5:1f:7a:a6:d0:b6:94:
9e:cb:b3:96:ce:7c:59:cc:71:e5:41:7c:68:ce:b2:f0:f8:42:
f9:c6:00:86:74:63:3e:43:c9:ba:5f:b1:20:b9:da:17:02:8e:
7a:6e:91:71:fb:71:de:8d:05:6b:5c:99:33:0e:3e:1c:5f:43:
39:43:fb:ea:6e:ce:4b:eb:ac:2d:44:c2:89:c7:9f:1c:c8:85:
57:84:04:80:67:63:b1:5d:32:d7:98:11:4d:a5:65:98:27:02:
0b:e3:d8:6a:df:38:d3:5e:de:68:84:b4:11:01:48:ee:19:18:
67:a6:da:78:f1:83:2e:27:c2:41:48:23:33:bc:70:6a:b5:56:
af:a5:47:95:06:fc:90:89:42:60:cc:0e:af:58:7b:52:04:10:
4e:01:4a:f9:29:bf:06:e3:99:87:85:10:e4:c6:c1:62:3d:02:
c0:9e:27:81:a3:11:f4:90:44:9b:a2:0d:e1:c5:62:fe:ae:92:
19:87:77:38:18:0c:33:39:90:7a:69:40:b8:14:a1:23:8f:bf:
c4:44:5f:eb:5b:59:02:d4:ee:eb:04:d0:9a:32:ed:0a:f3:1b:
79:44:c4:87:ea:54:b0:54:81:b8:01:00:3b:e0:ef:07:1f:e3:
0c:97:d0:a6
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYmOdbnnOY+IumvX6Z66iNhhMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcyMDQ3YmUxNWIyNzU5MDJkY2Y2MTdkYzNkMGUxNmRjMWYz
MDgwMjIwHhcNMjMwNzI1MTkxMDI3WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2NjI2YjE2MjBiYzRmOTNmZjNkZTY2Y2UxNTNmZDQ4NzY1OTViNTU3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0i8PtWgKm2x3XTzq8nMzPMwVdQHN
zPzj19GbGm2sOg7VBmFOTNjyj11qrC2zJF4WBF3ngGR19oUgIrxp5ZKUBxM+sFH/
lzn/giXspEkQVjGRzFp2FOr1PD6bFwv3bb9d2BGMgnzfsh+TWajyJfU7iUXzEB6Q
hQJOrlXiqQHih0I5Tx0E7ud3T43/Hi2ZZA8PIXarJDqHdXVIqpuwDw3wn6+6RSuR
REe9JtaKoNRq4wc21kUDKtxmxRFVwZCWlNLaLAvZKs6zEZNX5sjpW9vdGq5rYuUn
0YyXLk+ju5XEORZwYhYF56o0DJphaOBqZ6YdKsk86C5ENYYE9A6+Y2KpLwIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFGYmsWILxPk/895mzhU/1IdllbVXMB8GA1UdIwQY
MBaAFHIEe+FbJ1kC3PYX3D0OFtwfMIAiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMt
MWFiZTNhYzEwYWE2LzEvWmlheFlndkUtVF96M21iT0ZUX1VoMldWdFZjLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMtMWFiZTNhYzEwYWE2
LzEvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBACl0kd5bCBxoQsJRtR96
ptC2lJ7Ls5bOfFnMceVBfGjOsvD4QvnGAIZ0Yz5DybpfsSC52hcCjnpukXH7cd6N
BWtcmTMOPhxfQzlD++puzkvrrC1EwonHnxzIhVeEBIBnY7FdMteYEU2lZZgnAgvj
2GrfONNe3miEtBEBSO4ZGGem2njxgy4nwkFIIzO8cGq1Vq+lR5UG/JCJQmDMDq9Y
e1IEEE4BSvkpvwbjmYeFEOTGwWI9AsCeJ4GjEfSQRJuiDeHFYv6ukhmHdzgYDDM5
kHppQLgUoSOPv8REX+tbWQLU7usE0Joy7QrzG3lExIfqVLBUgbgBADvg7wcf4wyX
0KY=
-----END CERTIFICATE-----
Generated at Mon Jun 9 08:33:04 2025 by rpki-client