Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/Z1NzO7pNtTmkeCyMkoyHSjRN2dc.roa
File: Z1NzO7pNtTmkeCyMkoyHSjRN2dc.roa (raw, json)
Hash identifier: B1BkudGZ1JnPEwFfl+3smzD8TuDcUa3MyDRivc0MfSQ=
Subject key identifier: 67:53:73:3B:BA:4D:B5:39:A4:78:2C:8C:92:8C:87:4A:34:4D:D9:D7
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 018A09D1E36F2DF8605C9660E3D3F5D1B3F3
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/Z1NzO7pNtTmkeCyMkoyHSjRN2dc.roa
Signing time: Fri 18 Aug 2023 18:04:24 +0000
ROA not before: Fri 18 Aug 2023 18:04:24 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:188:7858:a003/128 maxlen: 128
2001:67c:64:ffff:0:18a:9d1:bb13/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:189:a0e4:5c7d/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:09:d1:e3:6f:2d:f8:60:5c:96:60:e3:d3:f5:d1:b3:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Aug 18 18:04:24 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=6753733bba4db539a4782c8c928c874a344dd9d7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:9c:49:e0:89:82:a5:5d:ec:db:b0:55:69:b0:
0d:2a:87:8b:4c:a2:27:3c:3f:ba:91:32:49:e5:9b:
c5:fa:1f:15:3a:76:28:8b:38:a4:33:bd:1d:8d:da:
88:cd:77:85:04:8c:23:6f:3e:70:b6:4f:0f:c8:4e:
9a:4b:e1:48:4b:3e:68:8a:e1:3e:0c:01:09:72:8f:
73:13:af:f7:a4:70:09:16:95:da:01:ad:89:0a:6c:
de:82:7c:cf:fe:0b:ed:bf:98:78:be:88:85:14:f9:
2a:ab:2f:99:46:08:f2:78:1f:72:84:93:cb:a9:08:
33:a9:17:80:6c:b9:07:15:c7:9e:7e:1c:94:1c:d0:
13:a1:5a:b1:8a:e3:95:65:b6:cc:b6:f7:10:7f:be:
11:4e:95:a1:3f:03:24:a0:b2:23:f5:bf:f3:55:00:
e6:c4:5d:4d:51:b8:40:d1:f8:d6:f4:36:14:ba:55:
1c:6b:7c:50:a7:f4:53:c5:41:1d:6b:15:d3:a6:52:
eb:24:a7:fa:ad:6f:11:a8:fb:cb:67:8a:a6:24:c6:
66:9f:0d:37:52:fb:4a:a3:15:4b:64:c0:a4:a6:d5:
f8:0a:f2:05:cf:f3:2c:51:46:39:91:cc:d7:a7:b0:
21:69:06:20:38:7e:ee:45:03:e8:12:ed:02:9c:a2:
af:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:53:73:3B:BA:4D:B5:39:A4:78:2C:8C:92:8C:87:4A:34:4D:D9:D7
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/Z1NzO7pNtTmkeCyMkoyHSjRN2dc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
99:7b:57:cf:8f:cd:78:2f:97:5c:60:ca:f1:ca:3e:c9:fb:5d:
7f:05:75:bc:23:4a:e0:30:5d:c7:83:08:6c:dc:9f:43:a0:57:
19:3a:eb:51:2b:20:92:dc:06:b7:06:e3:3f:a5:20:d8:73:ad:
4c:4e:08:d9:6a:34:9c:61:a9:37:8a:0a:f5:5b:e5:a7:61:3f:
12:78:f9:4a:2c:d0:49:eb:dd:44:79:5e:4e:af:b0:f1:52:d0:
52:f3:ca:a9:25:49:11:0a:62:cc:96:a4:e6:0e:fe:4c:46:d0:
0f:5a:30:89:6b:f2:e0:ed:0b:cf:16:0a:28:63:90:a0:ff:f8:
75:0c:39:83:e2:48:34:4d:e3:80:f1:d9:0e:3d:15:90:52:bd:
db:bf:e2:2e:6d:a7:cb:77:e5:4b:0e:6e:08:2c:f0:83:5c:aa:
65:f6:93:63:bd:07:e9:69:59:7b:54:f1:f3:2e:c0:ef:6d:2e:
9c:61:32:ae:ed:85:41:82:d7:6d:f8:92:e0:90:17:29:65:d1:
00:97:49:88:f1:85:79:46:ae:91:62:a1:77:a1:9f:c1:b6:60:
a0:c4:63:10:aa:a0:f5:6b:9b:18:c2:1e:45:cb:64:b9:a1:24:
e6:0f:d8:5d:91:b2:5f:cd:e5:79:ec:5d:e6:81:26:9b:fd:b4:
64:37:8b:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 18:17:19 2025 by rpki-client