Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/szyobvK4NgGuJiJBdoZHT_ZNAEA.roa
File: szyobvK4NgGuJiJBdoZHT_ZNAEA.roa (raw, json)
Hash identifier: DFbE+HzurN3UMfSJVR1nKgGeIM6g5mBQ937IjClb9nk=
Subject key identifier: B3:3C:A8:6E:F2:B8:36:01:AE:26:22:41:76:86:47:4F:F6:4D:00:40
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 018A3235C5D6C8E14CF458D276F4EF2AC402
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/szyobvK4NgGuJiJBdoZHT_ZNAEA.roa
Signing time: Sat 26 Aug 2023 14:18:19 +0000
ROA not before: Sat 26 Aug 2023 14:18:19 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:32:35:c5:d6:c8:e1:4c:f4:58:d2:76:f4:ef:2a:c4:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Aug 26 14:18:19 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=b33ca86ef2b83601ae2622417686474ff64d0040
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:f9:c1:b2:a9:56:70:8c:9d:70:de:0e:c4:ad:
e4:98:4e:d4:b2:7b:1a:03:45:51:7b:ca:d9:96:ec:
a7:e7:3f:f0:84:57:e7:b0:40:78:75:66:03:cf:74:
7b:e6:3a:be:6a:65:33:40:f3:12:d8:0a:58:a3:92:
56:d1:fd:7b:48:ef:0b:46:0d:12:89:47:11:46:bc:
32:ef:0e:24:0f:02:3f:35:36:4d:57:b4:8f:50:ca:
83:e3:ef:bd:df:30:32:fb:a8:f3:72:05:81:b2:ba:
d2:6e:cc:9f:ee:40:79:6e:60:02:38:9e:0c:83:73:
27:ce:75:27:ac:1b:69:af:7d:d3:09:21:4e:28:ef:
6f:ea:78:5c:de:da:f3:45:6d:40:6f:d2:08:a3:37:
93:a4:75:f8:6c:cd:7e:a2:6b:89:55:3a:c0:6e:02:
a9:b4:fe:09:d1:00:ec:7a:64:16:b7:e1:f9:a7:72:
51:d5:80:b2:1c:5c:8c:40:9a:1c:2b:7f:31:96:35:
77:59:de:b0:02:05:b2:68:65:6d:2b:41:12:11:45:
3d:24:2a:4c:f2:72:b8:d0:50:96:62:93:44:6a:a6:
55:39:aa:d9:31:b2:8f:5e:16:6e:7e:eb:ce:3d:0b:
0f:74:26:c6:8b:91:b4:39:5e:45:66:24:1b:96:3d:
e1:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:3C:A8:6E:F2:B8:36:01:AE:26:22:41:76:86:47:4F:F6:4D:00:40
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/szyobvK4NgGuJiJBdoZHT_ZNAEA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
76:a0:13:46:a5:2f:4f:a6:dd:c9:83:36:59:4f:ad:bf:d7:e2:
45:e6:04:50:2c:e3:4d:23:1e:7b:f0:45:98:fd:67:1f:84:96:
1e:de:d0:d6:b4:e0:c2:97:54:f3:ec:5d:ad:4a:6b:09:99:f8:
f9:1a:7e:fd:13:a7:9f:0f:3b:6c:fd:63:e5:96:80:9d:dc:ae:
5d:c3:f0:3e:f3:40:68:a6:ad:77:78:c4:1b:d8:62:d5:d3:b7:
92:87:ad:9e:62:a3:1b:1b:09:a0:8c:c1:aa:57:45:c7:fe:00:
1f:73:ca:aa:88:21:e2:57:be:da:63:41:d0:73:37:e8:8a:d8:
74:80:d0:62:05:21:aa:32:9f:b1:e9:96:e3:fb:b9:5b:dd:a1:
f5:d8:58:0a:60:f7:ab:8e:81:65:12:8e:42:4e:29:7f:49:5d:
5c:a0:04:f8:25:30:d9:87:95:ae:a2:7d:ac:b5:8d:77:5c:0b:
e1:6a:90:29:48:73:50:bb:22:f3:90:59:b4:d8:85:60:46:4b:
6e:74:ed:6c:42:c9:40:f4:a8:6c:08:2c:a8:68:44:b7:68:a4:
d2:d9:8e:ab:9a:1d:3c:41:ed:66:c4:05:27:94:a3:25:5e:dc:
e4:42:f1:bc:9f:89:c3:f6:e8:12:29:49:a3:e7:52:33:eb:ad:
30:0d:a4:61
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYoyNcXWyOFM9FjSdvTvKsQCMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcyMDQ3YmUxNWIyNzU5MDJkY2Y2MTdkYzNkMGUxNmRjMWYz
MDgwMjIwHhcNMjMwODI2MTQxODE5WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiMzNjYTg2ZWYyYjgzNjAxYWUyNjIyNDE3Njg2NDc0ZmY2NGQwMDQwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgfnBsqlWcIydcN4OxK3kmE7Usnsa
A0VRe8rZluyn5z/whFfnsEB4dWYDz3R75jq+amUzQPMS2ApYo5JW0f17SO8LRg0S
iUcRRrwy7w4kDwI/NTZNV7SPUMqD4++93zAy+6jzcgWBsrrSbsyf7kB5bmACOJ4M
g3MnznUnrBtpr33TCSFOKO9v6nhc3trzRW1Ab9IIozeTpHX4bM1+omuJVTrAbgKp
tP4J0QDsemQWt+H5p3JR1YCyHFyMQJocK38xljV3Wd6wAgWyaGVtK0ESEUU9JCpM
8nK40FCWYpNEaqZVOarZMbKPXhZufuvOPQsPdCbGi5G0OV5FZiQblj3hyQIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFLM8qG7yuDYBriYiQXaGR0/2TQBAMB8GA1UdIwQY
MBaAFHIEe+FbJ1kC3PYX3D0OFtwfMIAiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMt
MWFiZTNhYzEwYWE2LzEvc3p5b2J2SzROZ0d1SmlKQmRvWkhUX1pOQUVBLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMtMWFiZTNhYzEwYWE2
LzEvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBAHagE0alL0+m3cmDNllP
rb/X4kXmBFAs400jHnvwRZj9Zx+Elh7e0Na04MKXVPPsXa1KawmZ+Pkafv0Tp58P
O2z9Y+WWgJ3crl3D8D7zQGimrXd4xBvYYtXTt5KHrZ5ioxsbCaCMwapXRcf+AB9z
yqqIIeJXvtpjQdBzN+iK2HSA0GIFIaoyn7HpluP7uVvdofXYWApg96uOgWUSjkJO
KX9JXVygBPglMNmHla6ifay1jXdcC+FqkClIc1C7IvOQWbTYhWBGS2507WxCyUD0
qGwILKhoRLdopNLZjquaHTxB7WbEBSeUoyVe3ORC8byficP26BIpSaPnUjPrrTAN
pGE=
-----END CERTIFICATE-----
Generated at Mon Jun 9 02:44:09 2025 by rpki-client