Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/SPZyaNrKzdd6qY6lsUU7PsbywzE.roa
File: SPZyaNrKzdd6qY6lsUU7PsbywzE.roa (raw, json)
Hash identifier: zH/px9405pGempOtwEZKVV5Jj8bnlyNIdHuvxwvbcvA=
Subject key identifier: 48:F6:72:68:DA:CA:CD:D7:7A:A9:8E:A5:B1:45:3B:3E:C6:F2:C3:31
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0189367B312A1192892085CD0BDC17F24EF0
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/SPZyaNrKzdd6qY6lsUU7PsbywzE.roa
Signing time: Sat 08 Jul 2023 17:09:50 +0000
ROA not before: Sat 08 Jul 2023 17:09:50 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:188:5fe2:b396/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:187:4695:a68a/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:188:7858:a003/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64:ffff:0:187:fa9a:b088/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:187:b2b8:a7dd/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:36:7b:31:2a:11:92:89:20:85:cd:0b:dc:17:f2:4e:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Jul 8 17:09:50 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=48f67268dacacdd77aa98ea5b1453b3ec6f2c331
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:ea:c0:c3:26:e4:6a:4f:c4:58:f7:a8:25:a1:
a9:01:cb:12:f8:a6:40:79:1e:38:96:5e:62:0e:91:
0f:b4:f1:ff:82:4a:28:32:50:de:03:d1:90:c5:05:
9f:4a:d3:82:1f:4d:69:e9:26:d6:c0:dd:a1:2f:00:
3d:4f:c9:d6:31:c6:3f:36:78:12:83:fe:62:59:ca:
70:1b:fe:af:4e:e9:d3:09:88:27:59:f3:4a:57:1d:
86:a6:88:eb:b6:3b:13:6d:81:ff:18:dd:b7:ce:69:
06:ce:ef:fb:61:1f:52:86:99:8c:fd:83:40:d6:d1:
24:09:18:18:91:26:b8:33:8b:35:27:8c:fa:8b:2e:
27:32:d2:90:4b:b3:4f:c1:12:f1:8a:4a:eb:d1:2c:
f7:59:40:e8:77:62:b0:12:93:78:64:4e:a6:45:a6:
63:75:72:eb:55:d3:25:e3:05:ca:51:fd:2e:1c:d9:
57:07:a4:4a:54:a6:79:1b:87:f7:58:19:e4:8e:19:
a9:0e:6c:c9:e7:e7:c0:2d:b6:73:49:4f:dc:27:02:
1c:ff:69:20:63:17:aa:ed:cd:a0:f4:37:11:24:c6:
dc:0d:30:84:5e:17:91:ba:5f:44:54:cc:5d:98:b1:
ba:77:b3:ba:02:0f:e8:57:39:87:5f:7c:ef:7a:79:
77:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:F6:72:68:DA:CA:CD:D7:7A:A9:8E:A5:B1:45:3B:3E:C6:F2:C3:31
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/SPZyaNrKzdd6qY6lsUU7PsbywzE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
af:73:df:ee:6d:8e:ad:ae:cc:fe:1e:0a:d8:a8:bf:10:06:97:
04:e3:55:fc:2b:3f:ac:2b:09:ba:27:c4:ca:54:fb:a1:3c:12:
be:3e:d8:75:54:23:aa:dd:10:82:c1:63:59:08:5d:d9:20:2c:
bd:a8:0f:95:c8:e7:7b:c7:c6:12:0f:1a:66:5f:86:a0:96:4e:
ff:69:17:f6:bb:9e:3c:d9:48:ef:da:eb:95:b7:d8:09:37:2e:
ca:01:aa:24:48:bb:27:f9:d5:55:d3:40:51:e0:0a:2f:07:44:
7f:e4:96:6e:11:84:e0:34:90:d8:36:5e:87:27:0d:da:fc:27:
85:c4:f3:bf:8a:9e:e8:6d:f4:57:66:49:31:4c:69:05:5c:e0:
3b:b7:d4:38:a4:8d:95:c5:c2:5c:f6:a4:a1:0f:ab:58:94:7b:
62:e9:fd:5c:bd:71:70:cf:7f:5b:0c:df:4c:0b:d9:29:1c:87:
f9:47:fb:34:2b:85:50:5c:fa:db:fc:1d:11:2f:71:c4:f1:74:
02:44:62:fd:32:7d:e7:4d:65:7c:68:55:91:65:09:8c:98:09:
cc:e5:08:e5:71:8f:5a:ed:44:f2:9f:f6:b5:8f:da:8b:8c:17:
19:c0:2f:fe:37:ac:f5:a1:ea:b3:3c:1a:08:1d:b7:cb:3e:2f:
d6:41:65:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 05:38:46 2025 by rpki-client