Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/zNuftEuStTOgWRHqLYVG9a51PiM.roa
File: zNuftEuStTOgWRHqLYVG9a51PiM.roa (raw, json)
Hash identifier: r1rplCaTiwxZ8e4sn2K341fU2vuIgzx0pAXdALDlFJQ=
Subject key identifier: CC:DB:9F:B4:4B:92:B5:33:A0:59:11:EA:2D:85:46:F5:AE:75:3E:23
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 01887112698CBFC3BB77C973BA05D43D86BA
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/zNuftEuStTOgWRHqLYVG9a51PiM.roa
Signing time: Wed 31 May 2023 09:10:12 +0000
ROA not before: Wed 31 May 2023 09:10:12 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:188:5fe2:b396/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:187:4695:a68a/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64:ffff:0:187:fa9a:b088/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:187:b2b8:a7dd/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:71:12:69:8c:bf:c3:bb:77:c9:73:ba:05:d4:3d:86:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: May 31 09:10:12 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=ccdb9fb44b92b533a05911ea2d8546f5ae753e23
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:3f:f2:11:b8:11:01:ba:17:5a:7a:bc:72:29:
a4:b9:ce:8e:77:02:5e:c6:95:be:db:f7:b7:3d:1b:
2d:c6:02:61:91:37:f5:cb:fa:0a:a4:0f:f8:f0:e4:
06:68:d9:fe:ab:8c:11:b6:68:70:83:30:f2:e1:d6:
bc:f6:a1:75:33:3d:a5:6e:7b:4d:a9:f9:46:d2:3f:
eb:28:9e:81:4c:13:3d:ed:69:b6:ab:15:cd:75:61:
e7:bd:0a:5d:c5:06:3a:a7:8b:57:34:9f:58:84:2e:
08:38:d8:f8:ef:7c:a4:1e:7e:e4:38:0f:97:64:3f:
df:0b:74:e3:20:ff:1d:d1:34:8e:05:2a:0c:f3:80:
47:19:64:c6:50:7c:8f:2e:81:c3:c2:c5:de:9a:f3:
2d:c5:4a:9f:46:a4:8e:86:7c:e9:ba:f0:bc:91:bd:
3d:1d:0a:f1:49:96:d0:59:d4:ae:19:80:96:27:55:
f5:3f:a8:b2:df:03:91:f8:7e:5d:2b:41:37:cb:a9:
d6:8d:63:db:ea:84:d1:b3:f7:6f:a2:e3:c7:32:c9:
e2:b9:91:9a:80:e8:2d:35:ce:52:62:c1:c8:de:39:
05:02:f8:1b:93:50:ab:89:f6:49:af:7b:34:68:24:
1c:02:c6:ab:66:22:57:fc:73:4b:be:b0:7d:f6:38:
9d:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:DB:9F:B4:4B:92:B5:33:A0:59:11:EA:2D:85:46:F5:AE:75:3E:23
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/zNuftEuStTOgWRHqLYVG9a51PiM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
4a:02:b5:65:65:30:da:68:be:32:ce:23:8b:e3:10:d2:53:57:
54:d5:56:d3:f7:ac:8c:9e:98:95:c8:61:3e:69:79:58:81:51:
8f:24:ce:57:3d:58:78:c3:bb:9c:a2:3f:7f:57:eb:a1:8e:d5:
6e:55:25:73:85:57:60:c6:4f:ff:e0:63:72:e0:45:c4:ce:6b:
77:79:fb:7d:b6:6d:35:ed:cf:c8:70:62:54:9c:91:fe:ba:e0:
cf:7f:75:4e:39:b5:9f:29:9c:4e:21:34:f4:72:d6:45:7f:29:
f8:a6:13:8a:aa:9d:85:4b:06:99:35:07:18:0b:87:49:4e:71:
47:46:34:f0:8a:05:03:d8:a9:74:f7:74:d4:38:d4:f7:4c:2b:
1e:be:82:d1:0d:4f:24:6d:74:8f:a3:bf:6c:dc:a5:51:0d:a8:
60:6d:31:b9:62:0a:66:7b:4d:5f:4d:fc:0b:43:f1:26:30:b6:
fe:e0:7f:76:65:9f:57:53:b0:5b:73:7d:82:64:d8:45:e1:68:
48:59:f8:c3:55:d5:f5:fd:2c:1d:7b:d6:16:4d:92:3d:f5:12:
9f:65:3c:f6:e8:46:cd:5b:5b:b8:29:95:76:c4:9a:a7:0a:c6:
0d:67:b6:d8:4b:08:c6:c7:1f:2a:84:cb:76:1a:0a:d5:fe:8d:
b6:47:56:c0
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYhxEmmMv8O7d8lzugXUPYa6MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcyMDQ3YmUxNWIyNzU5MDJkY2Y2MTdkYzNkMGUxNmRjMWYz
MDgwMjIwHhcNMjMwNTMxMDkxMDEyWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjY2RiOWZiNDRiOTJiNTMzYTA1OTExZWEyZDg1NDZmNWFlNzUzZTIzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwT/yEbgRAboXWnq8cimkuc6OdwJe
xpW+2/e3PRstxgJhkTf1y/oKpA/48OQGaNn+q4wRtmhwgzDy4da89qF1Mz2lbntN
qflG0j/rKJ6BTBM97Wm2qxXNdWHnvQpdxQY6p4tXNJ9YhC4IONj473ykHn7kOA+X
ZD/fC3TjIP8d0TSOBSoM84BHGWTGUHyPLoHDwsXemvMtxUqfRqSOhnzpuvC8kb09
HQrxSZbQWdSuGYCWJ1X1P6iy3wOR+H5dK0E3y6nWjWPb6oTRs/dvouPHMsniuZGa
gOgtNc5SYsHI3jkFAvgbk1CrifZJr3s0aCQcAsarZiJX/HNLvrB99jiduQIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFMzbn7RLkrUzoFkR6i2FRvWudT4jMB8GA1UdIwQY
MBaAFHIEe+FbJ1kC3PYX3D0OFtwfMIAiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMt
MWFiZTNhYzEwYWE2LzEvek51ZnRFdVN0VE9nV1JIcUxZVkc5YTUxUGlNLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMtMWFiZTNhYzEwYWE2
LzEvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBAEoCtWVlMNpovjLOI4vj
ENJTV1TVVtP3rIyemJXIYT5peViBUY8kzlc9WHjDu5yiP39X66GO1W5VJXOFV2DG
T//gY3LgRcTOa3d5+322bTXtz8hwYlSckf664M9/dU45tZ8pnE4hNPRy1kV/Kfim
E4qqnYVLBpk1BxgLh0lOcUdGNPCKBQPYqXT3dNQ41PdMKx6+gtENTyRtdI+jv2zc
pVENqGBtMbliCmZ7TV9N/AtD8SYwtv7gf3Zln1dTsFtzfYJk2EXhaEhZ+MNV1fX9
LB171hZNkj31Ep9lPPboRs1bW7gplXbEmqcKxg1ntthLCMbHHyqEy3YaCtX+jbZH
VsA=
-----END CERTIFICATE-----
Generated at Sun Jun 8 22:41:06 2025 by rpki-client