Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/Z89puZjwPMfZ_qAfkQFZNMBUnbU.roa
File: Z89puZjwPMfZ_qAfkQFZNMBUnbU.roa (raw, json)
Hash identifier: 1aUC5by4dzRfPBe91pPERqf++tRQqVz00o3K7AkHaE4=
Subject key identifier: 67:CF:69:B9:98:F0:3C:C7:D9:FE:A0:1F:91:01:59:34:C0:54:9D:B5
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 73BF1A9C
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/Z89puZjwPMfZ_qAfkQFZNMBUnbU.roa
Signing time: Sat 19 Mar 2022 06:10:53 +0000
ROA not before: Sat 19 Mar 2022 06:10:53 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:17f:1bf4:40b5/128 maxlen: 128
2001:67c:64:ffff:0:17f:20ac:a2bd/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:17f:87e3:2531/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1941904028 (0x73bf1a9c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Mar 19 06:10:53 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=67cf69b998f03cc7d9fea01f91015934c0549db5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:a4:19:7d:c6:3e:22:71:99:3f:ce:81:83:a2:
32:0c:03:91:b9:86:4c:fd:f0:4d:cd:3b:a2:fc:13:
30:43:11:0a:14:ec:0d:34:5c:12:df:13:19:5d:90:
37:a2:63:49:45:ec:c9:d6:fb:1b:11:5d:da:ea:3f:
93:ab:f2:26:6f:49:cb:27:a9:b2:72:6f:6f:19:fb:
85:87:c7:f7:12:4f:f4:e4:1d:56:e5:d2:b7:05:2c:
5b:16:0a:b0:5b:2a:56:0d:4b:44:f9:40:da:03:0e:
3c:55:7d:97:41:d1:06:02:33:19:40:15:ad:40:56:
f2:79:7f:53:85:25:80:22:55:59:b8:c5:8c:46:c7:
d8:8e:0c:98:53:54:00:ef:11:9e:a7:c8:ff:63:36:
f3:95:cb:aa:f0:ca:d0:f6:5d:1d:38:2d:0d:17:6c:
60:01:26:19:1a:68:43:df:f1:9e:17:3d:8d:af:27:
93:f5:a9:dc:7c:e7:3c:06:c0:f3:93:d1:6e:b1:7f:
d3:9c:49:b0:52:33:54:ea:31:85:aa:2b:d0:b7:11:
5b:40:0a:f0:95:8a:5f:c9:0a:9b:7b:f5:40:ef:52:
57:a3:ef:dc:f2:57:9b:a5:74:4e:40:65:e2:87:ea:
fb:58:7a:d2:43:62:90:47:a5:ee:29:c5:e8:9b:cb:
27:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:CF:69:B9:98:F0:3C:C7:D9:FE:A0:1F:91:01:59:34:C0:54:9D:B5
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/Z89puZjwPMfZ_qAfkQFZNMBUnbU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
12:e9:2b:16:78:43:1a:2c:bf:94:bf:53:7e:47:08:93:9a:a4:
85:ac:06:cf:39:b9:3c:e5:41:9f:79:14:c3:53:16:f9:e9:f4:
37:92:07:e6:d4:9d:05:2b:cc:70:83:ed:6e:6b:6f:b3:41:d2:
e8:c5:81:76:a7:62:f3:8d:34:42:37:56:25:6c:7d:26:c4:8d:
1e:0a:5c:56:8b:28:cb:e5:14:e8:de:ec:5a:28:ca:bb:02:75:
f0:18:bb:7e:27:dd:bf:8c:c7:12:16:ed:b3:1d:2e:3b:a4:a6:
c7:f2:7f:89:ac:52:2e:15:a1:5e:f1:d6:64:8c:df:d0:1e:07:
4a:68:2b:8f:3c:f2:c1:2b:99:f2:d2:cc:a7:3d:0e:35:a1:4a:
32:8a:3b:55:1f:7f:7e:79:31:16:6e:bc:19:62:0e:95:db:83:
5d:48:81:b7:be:e3:27:61:77:54:b3:a7:0e:99:c3:cc:47:6e:
ca:be:f2:a7:e2:e7:fe:a2:15:f5:cc:95:a4:37:2b:9a:6b:97:
ae:18:76:c1:05:7e:66:03:ed:3d:02:6c:99:2b:81:4a:de:a8:
8e:03:6e:03:87:3a:4e:72:eb:51:c3:b2:be:2c:ae:02:aa:86:
e9:7c:e0:e8:8c:56:23:b9:7c:90:8e:04:1f:dd:18:a8:f6:f4:
d1:c8:16:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 02:53:20 2025 by rpki-client