Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/Z0JDGCdtrwyO1gfhA5Iqqe_Fmmo.roa
File: Z0JDGCdtrwyO1gfhA5Iqqe_Fmmo.roa (raw, json)
Hash identifier: akjZJfzCDye61JLGQRmjLE3yBihk223csoBnIuqB4HU=
Subject key identifier: 67:42:43:18:27:6D:AF:0C:8E:D6:07:E1:03:92:2A:A9:EF:C5:9A:6A
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0186AF83E14D026F624BB95A418A0082CEE3
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/Z0JDGCdtrwyO1gfhA5Iqqe_Fmmo.roa
Signing time: Sun 05 Mar 2023 02:05:00 +0000
ROA not before: Sun 05 Mar 2023 02:05:00 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
2001:67c:64:ffff:0:186:af83:680a/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:af:83:e1:4d:02:6f:62:4b:b9:5a:41:8a:00:82:ce:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Mar 5 02:05:00 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=67424318276daf0c8ed607e103922aa9efc59a6a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:93:c6:14:a7:d6:d1:5c:9e:00:d3:9d:4a:d4:
a5:f8:ea:90:b2:d6:2b:05:64:85:47:3d:ca:1a:22:
4c:6b:84:cd:18:bd:59:f9:12:ff:0e:ba:ce:ba:4b:
74:5e:7f:95:f6:12:af:5d:97:fc:1b:a0:6b:f4:4d:
cd:42:a3:f3:d2:a2:83:76:32:53:5a:2b:bf:5f:aa:
15:f2:e6:39:72:da:d5:bb:bd:18:30:a5:77:b4:fc:
08:2b:80:cd:3c:99:9e:2f:5b:cd:be:1c:db:31:d2:
33:01:d3:99:cf:50:88:43:b0:da:29:35:e4:34:7f:
d2:d2:ea:08:f3:79:32:d1:2e:61:22:83:cd:ef:cf:
86:22:fd:a4:9e:69:52:a2:6c:28:28:f7:52:5f:2d:
e1:9b:a1:44:9a:f8:42:92:60:47:ff:a6:b4:17:82:
44:8a:b9:a7:53:d9:1b:46:d9:dd:06:81:73:04:e9:
5b:e9:c5:a4:e8:80:e4:e9:9e:ee:d6:d0:46:28:9a:
9e:24:e4:62:84:85:18:a3:25:8f:6b:3d:4b:ed:03:
c0:8c:15:22:43:30:e1:58:2c:09:89:52:85:eb:3d:
7f:b5:b4:58:47:0d:8c:1a:4c:0b:09:0f:be:bd:75:
e0:95:a1:bb:d6:98:8a:e0:b5:d6:7b:2c:cf:95:34:
31:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:42:43:18:27:6D:AF:0C:8E:D6:07:E1:03:92:2A:A9:EF:C5:9A:6A
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/Z0JDGCdtrwyO1gfhA5Iqqe_Fmmo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
72:26:fd:cf:b3:4c:99:23:15:45:bd:d5:e7:f3:b4:ad:9f:5e:
84:b4:c2:b8:6e:ff:ee:b8:63:2d:b6:3a:66:a0:10:e9:c9:a2:
11:8a:93:81:77:7a:d3:a2:88:8d:f2:fa:af:a6:04:7c:6f:5d:
b9:b2:b8:1e:9a:63:29:1e:1f:89:03:59:d8:07:f4:da:da:85:
3c:4f:3c:64:94:44:72:c0:80:1b:7e:51:19:8a:f6:83:46:19:
89:f0:7c:ac:a5:a9:15:76:2f:5c:78:5e:34:0a:bb:c6:af:6f:
c1:de:ad:c5:de:02:bd:7d:f1:fd:63:69:6b:db:dd:1f:95:23:
f4:76:aa:92:8e:a5:8c:17:e1:a4:bf:10:5c:1c:57:87:e7:75:
82:fa:9c:a3:52:6d:d6:f5:84:0b:af:44:2e:3b:74:13:47:67:
47:66:7e:e5:9f:7f:95:0f:b3:43:31:4b:00:6d:60:5d:8f:8f:
2f:66:5d:d7:12:20:13:49:f3:c9:67:f6:25:26:f2:fd:63:e5:
42:ca:20:f9:57:21:9d:b9:2f:67:10:12:f2:00:48:2f:42:b1:
39:86:90:b8:54:66:76:21:cd:58:83:05:b1:6c:24:5a:95:88:
11:41:db:3e:49:4e:81:c8:fe:51:02:41:0f:ab:78:08:a3:e9:
e1:a2:15:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 03:34:04 2025 by rpki-client