Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/RZxaHFLcfCnrbWP56EmFBW86fqY.roa
File: RZxaHFLcfCnrbWP56EmFBW86fqY.roa (raw, json)
Hash identifier: wVKGm2nPFJttSHXNzYlmlnv6W1pBggSiFVNZdRjrAk4=
Subject key identifier: 45:9C:5A:1C:52:DC:7C:29:EB:6D:63:F9:E8:49:85:05:6F:3A:7E:A6
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 01899A43E2A2C9DD52D0521B3A309484E9BC
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/RZxaHFLcfCnrbWP56EmFBW86fqY.roa
Signing time: Fri 28 Jul 2023 02:11:27 +0000
ROA not before: Fri 28 Jul 2023 02:11:27 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:188:7858:a003/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:9a:43:e2:a2:c9:dd:52:d0:52:1b:3a:30:94:84:e9:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Jul 28 02:11:27 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=459c5a1c52dc7c29eb6d63f9e84985056f3a7ea6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:78:15:96:a5:63:b1:01:02:f3:cf:be:4b:86:
58:4f:1e:5a:52:f7:b8:49:a2:b5:a2:88:27:cb:8f:
79:44:59:3b:fe:52:54:38:15:01:84:87:39:b2:4c:
0e:01:f7:6b:cd:99:4f:0c:d9:3f:45:12:30:19:b6:
3e:d9:b5:a7:1b:dd:cf:63:2b:54:4d:ab:ef:4f:87:
28:e1:ca:9a:82:b2:8f:18:c6:f8:29:8b:02:21:00:
66:11:90:5b:00:83:14:c7:d3:d8:fd:62:74:94:2f:
2b:3c:48:66:bf:f6:db:44:a8:1b:9e:07:ee:e5:8c:
28:f4:c7:11:5e:46:3c:2c:01:46:bf:e3:1e:cc:76:
c7:cc:d6:9d:93:af:d8:43:85:74:65:be:68:bf:d7:
99:53:ea:d8:5c:d1:f4:34:93:82:ef:d8:81:b0:a6:
22:04:13:12:d9:1d:b8:36:61:05:7b:32:43:dd:f9:
6b:53:f8:e0:52:c8:74:9c:08:c0:99:07:47:44:16:
2b:87:fd:eb:09:9a:d4:93:5d:fa:46:c1:5c:fe:75:
70:d8:47:bd:11:8e:be:4a:4c:f3:81:fb:9b:4d:2d:
81:62:9c:7f:26:e8:1b:6b:22:44:60:a8:29:cb:32:
49:94:b6:74:0c:26:bf:75:b0:50:be:bf:96:73:f1:
96:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:9C:5A:1C:52:DC:7C:29:EB:6D:63:F9:E8:49:85:05:6F:3A:7E:A6
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/RZxaHFLcfCnrbWP56EmFBW86fqY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
18:ad:ed:8c:0b:bc:ba:59:26:41:28:1a:51:3d:0b:eb:a7:9e:
71:c8:b3:46:58:5b:a7:b0:1d:c2:4e:46:e4:5e:24:59:26:6a:
49:61:df:aa:03:b9:d0:9e:16:b3:9c:00:38:7d:1b:b0:50:94:
46:46:54:66:1f:50:88:75:e8:0a:18:7b:c1:03:a4:12:4e:30:
50:57:27:8d:cc:fe:ae:88:a2:32:ac:00:1a:70:f5:fd:59:7b:
1b:7e:f8:96:7c:7e:9a:66:cb:71:1d:68:68:8d:e7:56:73:2e:
9e:53:59:f6:ba:52:27:33:8b:93:3a:c5:68:c8:e9:56:a3:7d:
89:ce:28:ae:2b:36:56:30:51:6a:dc:8b:0e:e7:8a:da:75:1d:
65:aa:49:2f:ec:36:17:63:ef:24:9d:25:19:aa:54:8e:22:40:
a4:f9:eb:46:42:e8:53:52:25:36:c3:99:84:39:47:2f:96:fc:
df:58:8a:e1:c5:c7:78:e4:00:b8:7b:b6:0f:62:ce:45:39:a8:
af:ef:6a:52:e8:c5:df:45:91:14:11:40:e2:49:61:0a:dc:83:
09:75:86:ae:0e:8f:97:d0:79:71:8a:22:0b:cc:7b:e4:30:a4:
26:e1:36:c0:36:7d:6a:b6:d8:fd:29:6b:e2:c2:86:b5:da:a4:
7c:7c:8b:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 21:16:55 2025 by rpki-client