Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/zCEWn5YKHT2P4BI7uQOAh2G-dVU.roa
File: zCEWn5YKHT2P4BI7uQOAh2G-dVU.roa (raw, json)
Hash identifier: uWILwe7eYMxEPtNsq0l7pHyFUVSRnaHwhCzE8trMH+0=
Subject key identifier: CC:21:16:9F:96:0A:1D:3D:8F:E0:12:3B:B9:03:80:87:61:BE:75:55
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0182B22B90B7015D9B3A5FDE73CA4988A844
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/zCEWn5YKHT2P4BI7uQOAh2G-dVU.roa
Signing time: Thu 18 Aug 2022 18:16:15 +0000
ROA not before: Thu 18 Aug 2022 18:16:15 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:182:3f1d:a803/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:182:7cb2:99d4/128 maxlen: 128
2001:67c:64:ffff:0:182:383f:6b78/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:b2:2b:90:b7:01:5d:9b:3a:5f:de:73:ca:49:88:a8:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Aug 18 18:16:15 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=cc21169f960a1d3d8fe0123bb903808761be7555
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:95:ed:f3:f3:af:92:7b:3f:2d:5d:34:cc:3b:
37:d0:40:41:16:49:76:80:7a:96:4f:a2:73:ed:31:
0b:82:a7:66:a3:a6:b0:23:ae:dd:18:d2:61:37:ff:
11:c9:ae:34:5c:a9:6d:d8:05:91:91:50:70:4a:bd:
42:57:74:20:06:fb:61:43:06:54:9b:04:11:dc:9c:
9c:34:77:15:2b:86:95:a0:62:ee:fc:de:a2:8e:2d:
f8:6c:f2:b8:21:5e:d0:f6:a0:6e:0d:95:a8:5d:47:
51:72:69:50:63:0f:f1:62:7f:b8:0c:4d:40:3d:a4:
23:21:d2:cd:55:22:5a:4c:40:d1:59:5c:3a:56:38:
4b:73:ea:1d:c5:3c:69:68:c2:05:86:b0:47:df:bf:
b0:19:6b:cc:8f:45:8f:40:4c:e6:d5:be:07:aa:ab:
13:86:fc:f9:a6:64:fc:22:c7:73:e5:3c:dc:7f:ae:
8c:35:2a:24:f8:c6:4a:40:44:63:b3:eb:7e:11:bd:
20:e1:ca:a8:7a:c0:e4:19:e4:af:c3:fe:20:25:c9:
57:6f:8a:b1:96:18:1a:be:5d:54:29:d3:35:9d:c8:
4b:7a:96:01:ef:21:84:4d:0d:d2:0e:d4:19:60:cc:
86:67:83:d2:40:40:3b:ea:a0:9f:1a:d9:8a:07:50:
bd:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:21:16:9F:96:0A:1D:3D:8F:E0:12:3B:B9:03:80:87:61:BE:75:55
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/zCEWn5YKHT2P4BI7uQOAh2G-dVU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
1c:6d:1e:03:2c:5f:74:75:fd:16:7f:f7:17:7c:a1:0c:f9:e1:
69:a4:ad:ab:c9:a6:e5:ca:5d:53:09:bf:4a:c8:3d:a2:59:e9:
28:b3:6f:b5:55:8e:f8:3c:7f:99:d0:fa:d0:b6:ee:77:97:f5:
f6:e5:9e:d2:96:4b:3d:02:56:43:5c:0a:f7:7f:e0:ed:d7:51:
ac:38:3a:f5:a9:26:ac:23:2b:51:b2:a8:23:df:f6:cf:54:a9:
c0:b5:fb:d4:17:67:c7:63:08:83:7f:20:d1:1d:d5:fb:29:94:
d4:ba:02:07:47:21:fe:81:2d:04:57:c1:82:b9:fe:f5:82:bd:
9f:57:94:c9:7a:8c:88:50:2a:7b:c5:3d:9a:72:cd:30:9d:fe:
04:80:54:7f:6c:2b:4a:81:50:76:43:2c:75:ca:81:b8:62:6f:
ab:eb:6a:e5:0b:b8:30:80:65:35:20:d1:c7:1e:28:cd:59:04:
dc:16:22:6a:42:f3:e8:ed:70:e1:03:93:66:42:06:b7:89:b7:
84:86:c7:ba:89:b2:48:ec:4d:7e:5f:9c:8a:63:f1:6e:c3:e0:
6e:08:bf:fc:cf:7d:b0:2b:55:05:ba:00:d7:d1:78:1e:a1:ab:
83:70:be:e0:86:23:08:bd:be:2c:52:b4:fd:fa:89:44:17:a9:
26:34:19:66
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYKyK5C3AV2bOl/ec8pJiKhEMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcyMDQ3YmUxNWIyNzU5MDJkY2Y2MTdkYzNkMGUxNmRjMWYz
MDgwMjIwHhcNMjIwODE4MTgxNjE1WhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjYzIxMTY5Zjk2MGExZDNkOGZlMDEyM2JiOTAzODA4NzYxYmU3NTU1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAipXt8/Ovkns/LV00zDs30EBBFkl2
gHqWT6Jz7TELgqdmo6awI67dGNJhN/8Rya40XKlt2AWRkVBwSr1CV3QgBvthQwZU
mwQR3JycNHcVK4aVoGLu/N6iji34bPK4IV7Q9qBuDZWoXUdRcmlQYw/xYn+4DE1A
PaQjIdLNVSJaTEDRWVw6VjhLc+odxTxpaMIFhrBH37+wGWvMj0WPQEzm1b4HqqsT
hvz5pmT8Isdz5Tzcf66MNSok+MZKQERjs+t+Eb0g4cqoesDkGeSvw/4gJclXb4qx
lhgavl1UKdM1nchLepYB7yGETQ3SDtQZYMyGZ4PSQEA76qCfGtmKB1C9KQIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFMwhFp+WCh09j+ASO7kDgIdhvnVVMB8GA1UdIwQY
MBaAFHIEe+FbJ1kC3PYX3D0OFtwfMIAiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMt
MWFiZTNhYzEwYWE2LzEvekNFV241WUtIVDJQNEJJN3VRT0FoMkctZFZVLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMtMWFiZTNhYzEwYWE2
LzEvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBABxtHgMsX3R1/RZ/9xd8
oQz54WmkravJpuXKXVMJv0rIPaJZ6Sizb7VVjvg8f5nQ+tC27neX9fblntKWSz0C
VkNcCvd/4O3XUaw4OvWpJqwjK1GyqCPf9s9UqcC1+9QXZ8djCIN/INEd1fsplNS6
AgdHIf6BLQRXwYK5/vWCvZ9XlMl6jIhQKnvFPZpyzTCd/gSAVH9sK0qBUHZDLHXK
gbhib6vrauULuDCAZTUg0cceKM1ZBNwWImpC8+jtcOEDk2ZCBreJt4SGx7qJskjs
TX5fnIpj8W7D4G4Iv/zPfbArVQW6ANfReB6hq4NwvuCGIwi9vixStP36iUQXqSY0
GWY=
-----END CERTIFICATE-----
Generated at Sun Jun 8 22:36:02 2025 by rpki-client