Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/ZCWSQiYFU_iW2dNHihGv-FZNtG0.roa
File: ZCWSQiYFU_iW2dNHihGv-FZNtG0.roa (raw, json)
Hash identifier: rCpk8BQ+l5R7dI5/PNX7BFjavvndfFrQAic2mnTQe7A=
Subject key identifier: 64:25:92:42:26:05:53:F8:96:D9:D3:47:8A:11:AF:F8:56:4D:B4:6D
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 018256C0F848AFD8F8C377636BB08633F7C2
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/ZCWSQiYFU_iW2dNHihGv-FZNtG0.roa
Signing time: Mon 01 Aug 2022 00:14:23 +0000
ROA not before: Mon 01 Aug 2022 00:14:23 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:182:3f1d:a803/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:182:383f:6b78/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:56:c0:f8:48:af:d8:f8:c3:77:63:6b:b0:86:33:f7:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Aug 1 00:14:23 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=64259242260553f896d9d3478a11aff8564db46d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:99:95:0d:83:28:64:00:35:84:b7:96:16:e7:
4b:9e:e5:50:bc:f7:aa:96:37:8b:e3:73:71:9c:2f:
2c:f6:96:5d:dd:71:ea:c6:b3:a6:4c:c2:a4:68:6f:
a3:68:04:76:50:56:0d:e4:99:86:6e:3e:f5:6d:a3:
8e:4e:68:93:db:61:9b:8f:89:be:79:81:df:f1:30:
78:64:8a:65:8a:7f:43:f7:86:57:9c:e1:87:7b:83:
b1:b0:36:f2:c9:53:4e:62:b9:31:ba:98:6a:7b:c2:
3f:0c:de:8a:27:69:07:5c:15:b3:b9:f1:77:36:31:
af:52:af:4b:9d:b8:bc:19:77:41:ab:db:ff:75:e8:
ee:de:60:b0:79:72:cc:ad:01:89:c8:81:b9:2d:13:
e2:93:2e:2e:8d:08:83:ac:33:20:9a:d6:33:59:e3:
61:c8:85:90:70:b9:38:0c:a5:47:71:9f:ed:cf:16:
e3:03:0e:d0:d9:a4:8f:ca:2c:6a:35:37:d8:8d:1c:
9e:b7:06:ed:2e:70:09:57:5c:fc:90:77:59:dc:bf:
4e:b4:31:99:0b:e5:d0:2f:e5:b0:d1:d3:86:94:ca:
0d:97:e2:8a:9c:5f:b4:0c:e1:66:df:cb:2d:07:2b:
53:23:7f:51:63:e4:dd:66:e8:01:80:95:0f:95:27:
e3:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:25:92:42:26:05:53:F8:96:D9:D3:47:8A:11:AF:F8:56:4D:B4:6D
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/ZCWSQiYFU_iW2dNHihGv-FZNtG0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
63:7a:c3:3d:b9:e3:a4:f8:73:43:28:69:ec:cc:cb:3f:c9:15:
11:88:07:e0:17:71:a4:97:b4:de:a4:de:e9:26:bc:e9:d1:3d:
dc:31:cb:41:c1:68:36:8a:af:b4:ec:8a:b2:8c:17:6f:95:bf:
ed:1f:35:28:de:85:60:39:78:42:6b:00:11:da:88:fd:43:9b:
7e:71:a5:a9:aa:b3:55:7f:6f:a6:90:7e:fe:c3:76:db:ce:28:
bb:16:bc:d9:95:cf:f4:c5:62:ca:1d:ea:2a:5c:98:57:8d:ea:
80:37:f8:b7:a9:22:53:e7:a9:25:10:72:59:22:60:81:de:b4:
d7:63:19:23:4f:25:ab:35:88:f8:91:45:5c:8d:d8:4f:af:a5:
dc:1c:64:3f:b3:d2:0c:3e:de:db:e9:05:7a:49:c9:4d:8e:27:
16:a7:03:4a:61:9d:c1:53:42:ae:ab:e5:ee:18:39:14:d7:11:
fa:4f:28:a1:f4:e7:1b:cc:34:e3:22:d9:17:51:c3:2e:04:1f:
2f:ec:c0:9b:5c:ef:20:3f:09:d9:57:74:13:3d:54:0b:3d:9a:
76:fc:67:16:53:34:61:f1:13:5b:f5:36:93:fa:06:86:58:79:
66:7e:d2:52:ee:57:62:67:5f:22:27:90:4f:31:de:96:98:ed:
0f:94:78:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 02:52:07 2025 by rpki-client