Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/mzrZf0CD4ex6qUVR22i1C7AnpvM.roa
File: mzrZf0CD4ex6qUVR22i1C7AnpvM.roa (raw, json)
Hash identifier: /qCOuWyl1ijqP+m/6rCV4m1fK3ug2Fbl9JO5R2TlLUI=
Subject key identifier: 9B:3A:D9:7F:40:83:E1:EC:7A:A9:45:51:DB:68:B5:0B:B0:27:A6:F3
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0188DF930F9E7CBC439A6E9DB1B9DB39B2CD
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/mzrZf0CD4ex6qUVR22i1C7AnpvM.roa
Signing time: Wed 21 Jun 2023 20:08:56 +0000
ROA not before: Wed 21 Jun 2023 20:08:56 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:188:5fe2:b396/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:187:4695:a68a/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:188:7858:a003/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64:ffff:0:187:fa9a:b088/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:187:b2b8:a7dd/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:df:93:0f:9e:7c:bc:43:9a:6e:9d:b1:b9:db:39:b2:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Jun 21 20:08:56 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=9b3ad97f4083e1ec7aa94551db68b50bb027a6f3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:63:48:27:ed:a6:47:10:2d:91:0f:0e:4a:00:
bc:28:0f:5c:91:a4:64:fe:39:d8:9f:e8:16:3e:8f:
58:8b:f0:7b:0a:96:7a:f8:b2:33:ef:b9:68:96:f7:
e4:36:89:04:1c:e1:02:fe:d9:fe:3a:c0:18:f3:95:
35:cf:f6:f7:cf:35:9f:ad:af:64:26:71:42:36:13:
77:cd:57:d4:6a:3c:81:d2:04:1b:0c:35:3a:e8:66:
25:29:4c:71:1d:3d:0e:35:0a:e3:59:31:cc:96:bf:
a5:87:1e:3b:48:43:ee:99:ac:af:62:0a:84:a4:0c:
88:70:a6:b5:d8:b2:4a:69:aa:52:4d:f2:b3:6b:aa:
48:7f:28:48:6b:0f:95:4d:19:7d:60:4f:6a:56:01:
74:ec:41:cb:ed:4b:ee:73:d1:63:58:60:d5:06:62:
3a:8f:c2:8c:91:a9:f5:82:20:29:c1:17:77:82:16:
46:7e:98:b8:94:e3:f8:a9:2a:db:b0:b5:1f:db:fa:
aa:65:e8:11:f8:d6:30:21:6c:41:17:f2:86:f6:dd:
9e:26:8a:20:d0:e3:4e:57:70:27:34:63:ba:d7:7d:
01:d4:01:d7:05:f1:22:c9:7c:ef:88:00:1f:43:66:
18:6c:c7:45:41:cd:74:17:f8:f7:f2:04:69:62:6e:
6e:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:3A:D9:7F:40:83:E1:EC:7A:A9:45:51:DB:68:B5:0B:B0:27:A6:F3
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/mzrZf0CD4ex6qUVR22i1C7AnpvM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
4a:41:70:47:a0:f0:2b:ad:f2:c4:83:04:57:4c:38:34:0a:28:
25:fe:78:80:29:85:2b:aa:42:74:55:ce:ea:07:2a:46:4f:8a:
67:a4:2a:48:57:b3:d9:27:29:29:ff:06:1a:89:13:b1:32:65:
a4:ae:a8:60:59:3d:05:c5:fe:b4:07:c4:06:55:38:da:98:21:
70:85:83:e4:a9:00:0a:6d:bb:a6:08:d9:6f:19:34:a8:6f:2c:
d4:7d:a4:d0:29:22:0e:52:0f:5e:80:60:ca:fd:47:4e:35:59:
cd:64:24:96:aa:82:92:ba:55:bf:bb:c6:b7:c9:3e:14:a5:3b:
ca:d6:d0:4a:a3:66:4e:cf:de:d7:11:3c:82:05:d8:64:95:bd:
71:d1:56:1a:29:ae:c9:38:d2:71:a6:76:84:f9:76:e9:9c:fb:
e4:8e:df:e6:61:e8:1b:41:d1:4c:86:74:b5:68:9c:c0:c5:07:
27:d9:28:f9:47:17:7f:d7:9b:f2:18:0c:af:0d:87:5c:1e:51:
89:28:4e:c4:5e:0f:5e:93:f5:1c:2d:b5:ef:1d:20:36:ea:f4:
72:2b:e0:28:74:38:8e:06:c6:81:23:26:ac:0e:62:65:00:9f:
78:08:e9:11:19:f3:34:1d:50:1c:79:9a:02:39:86:0b:24:97:
c5:82:0b:48
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYjfkw+efLxDmm6dsbnbObLNMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcyMDQ3YmUxNWIyNzU5MDJkY2Y2MTdkYzNkMGUxNmRjMWYz
MDgwMjIwHhcNMjMwNjIxMjAwODU2WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5YjNhZDk3ZjQwODNlMWVjN2FhOTQ1NTFkYjY4YjUwYmIwMjdhNmYzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo2NIJ+2mRxAtkQ8OSgC8KA9ckaRk
/jnYn+gWPo9Yi/B7CpZ6+LIz77lolvfkNokEHOEC/tn+OsAY85U1z/b3zzWfra9k
JnFCNhN3zVfUajyB0gQbDDU66GYlKUxxHT0ONQrjWTHMlr+lhx47SEPumayvYgqE
pAyIcKa12LJKaapSTfKza6pIfyhIaw+VTRl9YE9qVgF07EHL7Uvuc9FjWGDVBmI6
j8KMkan1giApwRd3ghZGfpi4lOP4qSrbsLUf2/qqZegR+NYwIWxBF/KG9t2eJoog
0ONOV3AnNGO6130B1AHXBfEiyXzviAAfQ2YYbMdFQc10F/j38gRpYm5uKQIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFJs62X9Ag+HseqlFUdtotQuwJ6bzMB8GA1UdIwQY
MBaAFHIEe+FbJ1kC3PYX3D0OFtwfMIAiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMt
MWFiZTNhYzEwYWE2LzEvbXpyWmYwQ0Q0ZXg2cVVWUjIyaTFDN0FucHZNLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMtMWFiZTNhYzEwYWE2
LzEvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBAEpBcEeg8Cut8sSDBFdM
ODQKKCX+eIAphSuqQnRVzuoHKkZPimekKkhXs9knKSn/BhqJE7EyZaSuqGBZPQXF
/rQHxAZVONqYIXCFg+SpAAptu6YI2W8ZNKhvLNR9pNApIg5SD16AYMr9R041Wc1k
JJaqgpK6Vb+7xrfJPhSlO8rW0EqjZk7P3tcRPIIF2GSVvXHRVhoprsk40nGmdoT5
dumc++SO3+Zh6BtB0UyGdLVonMDFByfZKPlHF3/Xm/IYDK8Nh1weUYkoTsReD16T
9Rwtte8dIDbq9HIr4Ch0OI4GxoEjJqwOYmUAn3gI6REZ8zQdUBx5mgI5hgskl8WC
C0g=
-----END CERTIFICATE-----
Generated at Mon Jun 9 00:11:25 2025 by rpki-client