Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/ZqsTIA9ahQqEhfdkef_ig18R_5M.roa
File: ZqsTIA9ahQqEhfdkef_ig18R_5M.roa (raw, json)
Hash identifier: Ze9HjSrflvpJd/OEPuM+XB8JN2vyEfzOkE+1IOL8tWg=
Subject key identifier: 66:AB:13:20:0F:5A:85:0A:84:85:F7:64:79:FF:E2:83:5F:11:FF:93
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 018A0EC1524723ED08B7E7ACC35EB7935FC9
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/ZqsTIA9ahQqEhfdkef_ig18R_5M.roa
Signing time: Sat 19 Aug 2023 17:04:25 +0000
ROA not before: Sat 19 Aug 2023 17:04:25 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:188:7858:a003/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18a:ec1:1c06/128 maxlen: 128
2001:67c:64:ffff:0:189:a0e4:5c7d/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:0e:c1:52:47:23:ed:08:b7:e7:ac:c3:5e:b7:93:5f:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Aug 19 17:04:25 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=66ab13200f5a850a8485f76479ffe2835f11ff93
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:2c:d3:0c:e1:71:f0:89:b9:05:e2:84:a8:9e:
a5:f9:c0:8d:f3:6f:2b:a3:b6:ba:1e:2c:e3:3f:5f:
b0:33:0f:4d:cb:64:8f:45:ab:0f:83:b0:26:98:a7:
f9:61:07:84:be:42:23:ed:58:a0:33:41:09:64:a3:
5a:d6:39:12:3d:25:28:80:bd:a6:ca:ac:ff:e0:e5:
2a:0f:7d:d6:cc:fe:46:98:b4:7b:a7:9a:4d:81:b9:
4e:ce:9e:32:f9:54:5f:a8:00:5e:39:08:ec:80:e9:
75:2a:7e:a9:11:21:df:10:b1:94:48:e8:15:e4:6c:
e4:65:6c:55:1d:bf:f7:4a:74:df:88:70:24:d4:ff:
3b:cc:9c:7a:44:97:d4:84:3e:27:27:7b:76:50:eb:
a8:c1:66:83:e0:14:e7:d2:ff:23:d7:db:d4:df:17:
e4:be:5d:eb:9b:c1:67:04:14:29:ca:bc:28:ab:39:
b0:32:17:46:d6:25:5c:7a:73:f4:81:2f:1e:22:0a:
08:c4:1a:8f:49:a6:1b:6a:ad:d2:d3:8e:23:b4:9c:
1e:b8:2b:4e:58:60:04:e3:49:7d:58:7a:9e:d4:b4:
f0:9c:0b:7e:bb:bc:f5:6d:3d:8d:66:49:2c:4f:8d:
0a:a8:5b:4d:3c:30:93:3b:62:ef:af:c2:e1:7a:2c:
70:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:AB:13:20:0F:5A:85:0A:84:85:F7:64:79:FF:E2:83:5F:11:FF:93
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/ZqsTIA9ahQqEhfdkef_ig18R_5M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
1a:7f:80:5d:16:42:03:5a:d4:e2:74:b5:9f:8d:ae:64:87:2e:
9a:1c:a0:c6:cb:a6:55:20:61:47:9e:24:58:e1:22:67:41:c1:
53:a4:bc:81:54:56:09:43:00:8b:06:45:2d:29:b4:3b:58:69:
38:6b:7d:de:be:dd:8b:76:3d:ec:2b:7e:b5:1e:da:3a:5c:89:
d7:ed:3b:7f:36:44:d5:c5:aa:1d:e5:08:7f:53:08:f5:92:31:
73:6b:0b:75:e6:ff:f8:3e:15:1d:4b:aa:37:cf:2c:1c:17:e6:
17:b7:c7:d2:85:30:54:26:20:0d:34:c7:1d:f3:aa:a9:5b:42:
9f:12:a2:d4:82:a4:1e:32:0e:c3:f1:b5:e9:84:cd:b5:18:16:
af:57:6a:85:98:5b:e0:d5:e7:a1:8e:f1:fa:d0:a8:d0:f0:b5:
00:b1:39:58:37:95:27:d5:a6:e4:81:da:f6:d4:f5:ec:87:89:
9f:d8:3b:2b:7d:a3:42:a8:5e:52:9b:48:4e:4c:81:db:b4:89:
9a:c0:95:5e:33:1c:bf:ba:c9:fe:44:cc:eb:93:78:bd:cf:8c:
d2:4a:f6:47:82:83:64:90:8f:7a:4f:46:ee:ca:49:97:43:72:
04:64:22:67:f9:0b:83:af:8d:21:7d:20:56:50:f6:0e:54:a2:
f5:74:eb:76
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYoOwVJHI+0It+esw163k1/JMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcyMDQ3YmUxNWIyNzU5MDJkY2Y2MTdkYzNkMGUxNmRjMWYz
MDgwMjIwHhcNMjMwODE5MTcwNDI1WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2NmFiMTMyMDBmNWE4NTBhODQ4NWY3NjQ3OWZmZTI4MzVmMTFmZjkzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApizTDOFx8Im5BeKEqJ6l+cCN828r
o7a6HizjP1+wMw9Ny2SPRasPg7AmmKf5YQeEvkIj7VigM0EJZKNa1jkSPSUogL2m
yqz/4OUqD33WzP5GmLR7p5pNgblOzp4y+VRfqABeOQjsgOl1Kn6pESHfELGUSOgV
5GzkZWxVHb/3SnTfiHAk1P87zJx6RJfUhD4nJ3t2UOuowWaD4BTn0v8j19vU3xfk
vl3rm8FnBBQpyrwoqzmwMhdG1iVcenP0gS8eIgoIxBqPSaYbaq3S044jtJweuCtO
WGAE40l9WHqe1LTwnAt+u7z1bT2NZkksT40KqFtNPDCTO2Lvr8Lheixw1wIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFGarEyAPWoUKhIX3ZHn/4oNfEf+TMB8GA1UdIwQY
MBaAFHIEe+FbJ1kC3PYX3D0OFtwfMIAiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMt
MWFiZTNhYzEwYWE2LzEvWnFzVElBOWFoUXFFaGZka2VmX2lnMThSXzVNLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMtMWFiZTNhYzEwYWE2
LzEvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBABp/gF0WQgNa1OJ0tZ+N
rmSHLpocoMbLplUgYUeeJFjhImdBwVOkvIFUVglDAIsGRS0ptDtYaThrfd6+3Yt2
PewrfrUe2jpcidftO382RNXFqh3lCH9TCPWSMXNrC3Xm//g+FR1LqjfPLBwX5he3
x9KFMFQmIA00xx3zqqlbQp8SotSCpB4yDsPxtemEzbUYFq9XaoWYW+DV56GO8frQ
qNDwtQCxOVg3lSfVpuSB2vbU9eyHiZ/YOyt9o0KoXlKbSE5Mgdu0iZrAlV4zHL+6
yf5EzOuTeL3PjNJK9keCg2SQj3pPRu7KSZdDcgRkImf5C4OvjSF9IFZQ9g5UovV0
63Y=
-----END CERTIFICATE-----
Generated at Tue Jun 10 11:40:37 2025 by rpki-client