Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/zm4y3TrEsMfccsAToLoSjX34DaI.roa
File: zm4y3TrEsMfccsAToLoSjX34DaI.roa (raw, json)
Hash identifier: QyadNl01l/0442gfyU7e6rbDDMP6GXph+x3WkKF0yA4=
Subject key identifier: CE:6E:32:DD:3A:C4:B0:C7:DC:72:C0:13:A0:BA:12:8D:7D:F8:0D:A2
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0185FDA6D8BCF415FB0ABBDFFA33B0855AAD
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/zm4y3TrEsMfccsAToLoSjX34DaI.roa
Signing time: Sun 29 Jan 2023 13:10:48 +0000
ROA not before: Sun 29 Jan 2023 13:10:48 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:fd:a6:d8:bc:f4:15:fb:0a:bb:df:fa:33:b0:85:5a:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Jan 29 13:10:48 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=ce6e32dd3ac4b0c7dc72c013a0ba128d7df80da2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:c1:99:4f:b3:50:14:25:bf:13:3f:c5:8b:36:
0a:23:a5:5b:90:f9:25:98:ce:76:99:9a:4e:22:53:
0b:97:b4:d7:53:c3:ea:bf:60:62:26:28:4d:1c:eb:
17:aa:59:59:78:ad:1e:de:c2:ac:ce:19:e3:92:1c:
56:ba:46:ca:26:c1:74:d0:66:5d:53:56:4b:02:dd:
b6:6f:9e:e9:1d:5e:28:a1:a1:b7:aa:a4:28:4e:73:
b4:c5:44:f5:3d:c2:f1:2f:db:0e:27:81:01:95:e7:
9c:77:4f:99:6e:b6:fa:32:83:ee:9f:9c:49:ad:15:
9b:74:d2:06:28:66:a1:67:bb:a7:55:6e:04:37:3f:
48:6a:39:1c:20:5c:e5:62:64:62:af:eb:44:ef:9c:
92:4e:1b:86:76:d7:6a:4c:8c:53:61:3d:03:f8:11:
b7:f6:62:ca:3c:62:cc:5a:63:d9:a8:a0:5f:82:da:
13:60:32:f0:8c:c9:be:eb:11:92:cf:c3:3b:85:5f:
04:bb:52:a9:a1:09:ad:5d:45:ef:2f:75:58:fd:9d:
a8:e3:39:b4:76:58:05:d7:07:b7:90:7e:32:83:5e:
33:f8:a1:81:9c:f3:fe:56:b7:2a:e0:2c:88:c2:dc:
14:20:8f:05:d0:d9:5f:b1:a3:1e:d7:df:69:2b:64:
26:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:6E:32:DD:3A:C4:B0:C7:DC:72:C0:13:A0:BA:12:8D:7D:F8:0D:A2
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/zm4y3TrEsMfccsAToLoSjX34DaI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
29:43:d1:46:5e:32:dd:d1:ac:00:76:d5:3b:95:ea:ca:80:8e:
48:bc:c4:db:00:f3:70:51:a9:d2:b4:33:ef:ac:75:85:24:4a:
7c:58:f6:b9:7f:3c:a4:ee:3a:f8:0a:fb:f4:01:4f:55:43:83:
2c:b5:9b:5e:de:c2:fe:18:e9:52:bc:44:d0:f1:13:47:fd:99:
6c:65:56:78:0b:e0:c5:ac:1f:fe:3a:25:92:3e:50:b6:ca:bc:
b1:a7:dc:1f:60:dc:a8:52:01:fc:a2:bb:28:0b:36:7a:ec:6c:
58:2a:a8:01:e7:ec:99:7e:45:a8:e6:86:56:95:0a:d4:12:ca:
2e:1e:43:02:61:ee:f1:9b:64:7c:dd:ae:fe:ee:d5:32:ae:4a:
83:29:d3:c2:2e:b8:44:ac:37:a4:97:13:85:1e:de:17:40:0c:
a2:59:26:a7:de:6c:a5:f2:00:0f:e5:55:a6:3c:e0:ad:f7:af:
df:b2:ee:03:5b:bd:bf:4f:7a:04:6b:b2:81:96:f7:0a:58:88:
82:8c:65:3d:0d:fa:5a:41:fc:66:b9:a1:6b:aa:09:5f:9e:d0:
02:3c:97:56:65:9c:47:4a:de:25:dd:41:bf:4a:01:21:4b:f2:
e7:79:50:2a:13:48:9a:d6:c1:0f:d2:f7:13:b6:69:89:0d:1e:
9f:cc:32:47
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYX9pti89BX7Crvf+jOwhVqtMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcyMDQ3YmUxNWIyNzU5MDJkY2Y2MTdkYzNkMGUxNmRjMWYz
MDgwMjIwHhcNMjMwMTI5MTMxMDQ4WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjZTZlMzJkZDNhYzRiMGM3ZGM3MmMwMTNhMGJhMTI4ZDdkZjgwZGEyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvcGZT7NQFCW/Ez/FizYKI6VbkPkl
mM52mZpOIlMLl7TXU8Pqv2BiJihNHOsXqllZeK0e3sKszhnjkhxWukbKJsF00GZd
U1ZLAt22b57pHV4ooaG3qqQoTnO0xUT1PcLxL9sOJ4EBleecd0+Zbrb6MoPun5xJ
rRWbdNIGKGahZ7unVW4ENz9IajkcIFzlYmRir+tE75ySThuGdtdqTIxTYT0D+BG3
9mLKPGLMWmPZqKBfgtoTYDLwjMm+6xGSz8M7hV8Eu1KpoQmtXUXvL3VY/Z2o4zm0
dlgF1we3kH4yg14z+KGBnPP+Vrcq4CyIwtwUII8F0NlfsaMe199pK2QmDQIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFM5uMt06xLDH3HLAE6C6Eo19+A2iMB8GA1UdIwQY
MBaAFHIEe+FbJ1kC3PYX3D0OFtwfMIAiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMt
MWFiZTNhYzEwYWE2LzEvem00eTNUckVzTWZjY3NBVG9Mb1NqWDM0RGFJLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMtMWFiZTNhYzEwYWE2
LzEvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBAClD0UZeMt3RrAB21TuV
6sqAjki8xNsA83BRqdK0M++sdYUkSnxY9rl/PKTuOvgK+/QBT1VDgyy1m17ewv4Y
6VK8RNDxE0f9mWxlVngL4MWsH/46JZI+ULbKvLGn3B9g3KhSAfyiuygLNnrsbFgq
qAHn7Jl+RajmhlaVCtQSyi4eQwJh7vGbZHzdrv7u1TKuSoMp08IuuESsN6SXE4Ue
3hdADKJZJqfebKXyAA/lVaY84K33r9+y7gNbvb9PegRrsoGW9wpYiIKMZT0N+lpB
/Ga5oWuqCV+e0AI8l1ZlnEdK3iXdQb9KASFL8ud5UCoTSJrWwQ/S9xO2aYkNHp/M
Mkc=
-----END CERTIFICATE-----
Generated at Mon Jun 9 00:10:24 2025 by rpki-client