Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/ZBQzLt1OR_oMYil5H8yhFXZuWK4.roa
File: ZBQzLt1OR_oMYil5H8yhFXZuWK4.roa (raw, json)
Hash identifier: +7Bf2CYRHoE3Fl6wSiI6kzO6Pe4wZehAiZIKZHtZ/WI=
Subject key identifier: 64:14:33:2E:DD:4E:47:FA:0C:62:29:79:1F:CC:A1:15:76:6E:58:AE
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 66A81458
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/ZBQzLt1OR_oMYil5H8yhFXZuWK4.roa
Signing time: Mon 31 Jan 2022 14:09:40 +0000
ROA not before: Mon 31 Jan 2022 14:09:40 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:17e:a0dd:2f5b/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1722291288 (0x66a81458)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Jan 31 14:09:40 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=6414332edd4e47fa0c6229791fcca115766e58ae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:29:54:ed:b3:26:00:be:97:13:32:a7:51:2c:
09:8c:49:b7:02:c3:e0:ca:c6:1c:77:ab:5f:85:d2:
44:9b:46:35:78:fb:fe:1c:ec:96:6d:27:26:41:29:
7c:44:4c:25:c7:f3:b6:7b:c7:68:30:06:0f:f2:5c:
a1:dd:8d:bb:02:6c:a2:d7:99:8e:a7:6c:2b:3f:3f:
b9:c6:74:2a:c4:8a:82:eb:43:3f:64:ae:48:26:ec:
26:1f:aa:32:06:b5:a4:8f:2d:06:ce:be:3b:d4:c4:
fd:ca:70:64:bb:75:b3:75:e4:ec:3e:82:e3:52:2c:
18:4b:98:78:2f:ab:b6:89:28:b1:89:a2:c0:13:36:
38:fb:d5:d2:c8:0a:6b:f2:5e:cc:49:64:00:2d:a3:
37:c8:3e:6b:0d:a7:0e:9a:dc:b4:4a:a5:6a:11:a3:
3b:ac:89:8d:57:9c:cb:d9:b2:41:9b:de:8a:67:19:
7e:80:42:93:f0:c1:e9:d4:d9:d9:19:0b:95:47:22:
17:d7:57:55:6e:e8:1a:a2:ec:b4:39:85:a9:f4:d0:
2a:8d:f9:d0:28:e0:83:d4:ec:35:ee:47:4f:4b:10:
d8:be:f0:04:a8:08:68:12:b2:98:ea:ed:04:9a:58:
fc:2f:5a:38:75:82:ff:09:9c:88:5a:a7:c3:06:8f:
e1:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:14:33:2E:DD:4E:47:FA:0C:62:29:79:1F:CC:A1:15:76:6E:58:AE
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/ZBQzLt1OR_oMYil5H8yhFXZuWK4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
ad:62:31:30:06:76:95:c6:4f:dc:f0:48:21:42:86:0a:97:13:
a3:cf:ae:66:9d:cf:5f:d3:0f:e7:b8:bf:80:25:71:c5:6d:6a:
b5:ea:e1:8c:e4:88:24:f6:53:2e:65:d0:8b:b2:db:94:c9:90:
c5:d0:67:50:4a:97:ff:08:b1:97:e2:ed:77:b0:65:8d:6f:7f:
2e:d0:dc:74:9b:e3:c2:7e:dd:d6:33:ed:2a:1d:7b:a6:c7:ac:
8c:66:ed:c6:cc:30:ca:40:67:93:1f:87:2b:6a:85:38:c6:00:
8a:b9:38:d3:12:72:7d:30:28:7d:a1:53:62:bc:91:42:da:10:
b6:e2:e2:83:90:93:ed:e0:75:04:08:1b:bd:c1:6e:4b:67:8d:
12:23:95:24:22:6d:88:f2:3b:22:c2:16:2f:fc:fc:cc:fc:ae:
12:3c:a4:c9:5a:14:b3:29:57:ed:c4:09:1c:ee:8c:10:36:29:
2d:63:53:c3:55:d6:22:91:9b:a4:73:9c:99:8f:65:bb:ae:45:
a7:55:5f:35:66:03:48:e5:4a:86:75:6e:11:12:a3:fb:c4:5c:
99:11:84:85:1c:3b:fd:82:7c:a1:ad:c5:d2:3b:da:88:7f:0d:
56:fe:23:d2:33:9a:ee:22:0d:34:15:b9:59:00:27:57:8d:37:
82:ba:fe:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 18:50:02 2025 by rpki-client