Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/nzNsZc_2QaLruYjaVYfHV7SipXI.roa
File: nzNsZc_2QaLruYjaVYfHV7SipXI.roa (raw, json)
Hash identifier: clfjagu+d1MgFcVvPcZ/VWxv8wpPE94+EIZDtU7hBzo=
Subject key identifier: 9F:33:6C:65:CF:F6:41:A2:EB:B9:88:DA:55:87:C7:57:B4:A2:A5:72
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0186AF23BEAC50196EA25941848517F064FF
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/nzNsZc_2QaLruYjaVYfHV7SipXI.roa
Signing time: Sun 05 Mar 2023 00:20:00 +0000
ROA not before: Sun 05 Mar 2023 00:20:00 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:af:23:be:ac:50:19:6e:a2:59:41:84:85:17:f0:64:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Mar 5 00:20:00 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=9f336c65cff641a2ebb988da5587c757b4a2a572
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:e1:ea:8e:4d:52:0c:22:91:43:4f:17:c8:fb:
19:ce:42:98:36:42:35:c9:16:a6:54:a1:91:a5:d0:
96:50:0b:9f:b6:a3:c2:46:ea:b9:69:1c:3d:28:f6:
a7:c1:4d:d2:25:9a:d3:79:ef:38:1d:99:73:39:57:
7f:02:83:f4:ab:7c:32:66:8b:22:d0:64:5c:3d:5a:
2d:dd:be:57:e3:89:59:ac:65:4c:b1:3b:b2:c2:af:
14:a8:c5:78:d1:4d:f9:a8:b1:9e:06:66:91:ef:d1:
66:f4:57:a2:ac:30:e4:ea:8f:a4:c2:62:12:56:ed:
40:2b:4c:00:c8:54:12:93:f4:a1:1f:a8:62:c6:e9:
bd:60:c0:b1:f0:c9:75:85:e2:e6:6b:69:1a:5b:09:
92:6c:0e:b0:77:d2:7b:36:15:01:45:1c:73:11:9a:
66:ce:c1:a6:42:02:a8:d3:04:e8:88:de:af:10:8e:
c6:04:3f:30:2d:38:ee:e2:e3:15:42:e0:1c:d4:e3:
c0:95:7a:d4:65:48:52:88:2c:ec:6b:0c:83:5b:ee:
b9:89:8b:5e:99:c1:e1:94:49:8d:b3:51:3a:f0:55:
e9:e1:f5:72:71:b5:0a:39:2f:7f:7d:50:29:59:a3:
56:ee:5c:eb:04:a6:9e:54:40:a8:68:84:53:db:85:
6c:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:33:6C:65:CF:F6:41:A2:EB:B9:88:DA:55:87:C7:57:B4:A2:A5:72
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/nzNsZc_2QaLruYjaVYfHV7SipXI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
28:3d:ae:5c:e5:94:fd:f9:99:13:ac:a2:d8:f4:42:a8:62:06:
e0:6d:f1:05:b8:08:7b:94:ab:f4:7b:2b:2e:4a:42:62:33:9d:
4f:31:d2:ea:4e:fa:c8:ae:f4:f5:16:cc:cc:7f:73:7e:db:00:
51:f9:12:83:e4:db:c8:3a:dc:1c:0d:35:cd:72:11:c1:7d:b9:
bc:f5:a0:9d:62:9a:6f:85:b9:65:19:d0:6d:03:3d:6f:60:62:
07:8a:e6:86:9e:6d:3b:6a:ae:a0:e9:48:a6:5e:53:fe:c4:3f:
58:a4:34:e7:07:5e:e3:63:48:80:33:6e:55:8e:84:6d:31:5f:
96:a5:92:f8:2b:d0:87:d0:8d:9b:0d:b4:c7:79:f2:90:ec:da:
48:4d:15:e1:c9:36:42:38:2b:fa:17:1b:ed:d1:a0:ef:23:a9:
31:8c:e6:f6:55:6b:00:d4:c4:1b:c7:0e:42:40:42:59:73:56:
a2:7a:36:a6:1c:0e:40:8c:6e:91:f2:e2:2c:e9:7d:23:72:d9:
ba:d6:5e:9c:ce:2c:ba:95:1b:df:e3:f9:4d:27:87:46:d9:16:
a2:c5:d3:3e:ed:d2:d3:07:b1:c8:43:0d:bf:ec:b2:9a:eb:8f:
57:db:f7:27:71:8c:37:5c:02:11:96:4d:0f:0c:82:bb:12:2e:
49:58:a9:d9
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYavI76sUBluollBhIUX8GT/MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcyMDQ3YmUxNWIyNzU5MDJkY2Y2MTdkYzNkMGUxNmRjMWYz
MDgwMjIwHhcNMjMwMzA1MDAyMDAwWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5ZjMzNmM2NWNmZjY0MWEyZWJiOTg4ZGE1NTg3Yzc1N2I0YTJhNTcyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh+Hqjk1SDCKRQ08XyPsZzkKYNkI1
yRamVKGRpdCWUAuftqPCRuq5aRw9KPanwU3SJZrTee84HZlzOVd/AoP0q3wyZosi
0GRcPVot3b5X44lZrGVMsTuywq8UqMV40U35qLGeBmaR79Fm9FeirDDk6o+kwmIS
Vu1AK0wAyFQSk/ShH6hixum9YMCx8Ml1heLma2kaWwmSbA6wd9J7NhUBRRxzEZpm
zsGmQgKo0wToiN6vEI7GBD8wLTju4uMVQuAc1OPAlXrUZUhSiCzsawyDW+65iYte
mcHhlEmNs1E68FXp4fVycbUKOS9/fVApWaNW7lzrBKaeVECoaIRT24VsQQIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFJ8zbGXP9kGi67mI2lWHx1e0oqVyMB8GA1UdIwQY
MBaAFHIEe+FbJ1kC3PYX3D0OFtwfMIAiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMt
MWFiZTNhYzEwYWE2LzEvbnpOc1pjXzJRYUxydVlqYVZZZkhWN1NpcFhJLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMtMWFiZTNhYzEwYWE2
LzEvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBACg9rlzllP35mROsotj0
QqhiBuBt8QW4CHuUq/R7Ky5KQmIznU8x0upO+siu9PUWzMx/c37bAFH5EoPk28g6
3BwNNc1yEcF9ubz1oJ1imm+FuWUZ0G0DPW9gYgeK5oaebTtqrqDpSKZeU/7EP1ik
NOcHXuNjSIAzblWOhG0xX5alkvgr0IfQjZsNtMd58pDs2khNFeHJNkI4K/oXG+3R
oO8jqTGM5vZVawDUxBvHDkJAQllzVqJ6NqYcDkCMbpHy4izpfSNy2brWXpzOLLqV
G9/j+U0nh0bZFqLF0z7t0tMHschDDb/ssprrj1fb9ydxjDdcAhGWTQ8MgrsSLklY
qdk=
-----END CERTIFICATE-----
Generated at Mon Jun 9 12:01:09 2025 by rpki-client