Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/ZC_t0B0c6j-8N4gACVuHhri7ofY.roa
File: ZC_t0B0c6j-8N4gACVuHhri7ofY.roa (raw, json)
Hash identifier: IuPF07U3LxMTVn+MWzKop4/jeH6V4guRO7Beic6GD0w=
Subject key identifier: 64:2F:ED:D0:1D:1C:EA:3F:BC:37:88:00:09:5B:87:86:B8:BB:A1:F6
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0187B96476C41449EE8EB6CBEE5BC6A3C76E
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/ZC_t0B0c6j-8N4gACVuHhri7ofY.roa
Signing time: Tue 25 Apr 2023 17:09:41 +0000
ROA not before: Tue 25 Apr 2023 17:09:41 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:187:4695:a68a/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:187:b2b8:a7dd/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:b9:64:76:c4:14:49:ee:8e:b6:cb:ee:5b:c6:a3:c7:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Apr 25 17:09:41 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=642fedd01d1cea3fbc378800095b8786b8bba1f6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:17:b5:d0:ad:b8:29:d1:a4:fb:a9:f3:6a:7d:
2a:e0:74:dc:82:1c:b5:f3:d0:93:00:65:f6:70:57:
5e:e3:aa:a8:f0:77:22:00:a4:f7:b4:aa:b5:54:00:
0a:26:47:b5:c4:89:6d:1e:49:c9:c4:4c:f9:c1:dd:
0d:1e:fd:2d:c1:9a:81:65:01:99:ae:c8:a4:28:54:
03:4a:e8:52:ac:4c:69:2e:60:1a:28:5b:43:74:12:
e1:22:5b:87:09:bc:fd:36:d5:db:3f:a4:86:49:f5:
9f:2b:8a:69:54:d6:32:3d:f5:03:9e:ad:66:f7:6f:
68:02:d3:55:7b:a7:dd:5a:c7:93:2e:33:7c:8a:2f:
a9:77:24:0e:04:f0:c4:dd:58:42:ed:d2:c9:ae:12:
37:af:e4:b5:94:00:57:0d:17:02:be:10:c3:cf:e2:
ee:9d:ba:3b:2b:6c:c9:3b:53:13:f9:64:b1:b9:ed:
d1:12:cb:52:d2:d6:e6:67:72:e3:54:4a:b6:e1:c0:
61:6c:e9:92:6c:64:3a:34:44:a0:df:c9:de:33:a8:
91:70:9d:9c:ff:5a:6e:bb:17:1c:62:17:ce:52:05:
2a:8e:f6:65:7f:9b:d6:88:85:9d:b0:02:a9:a3:1a:
f0:7c:f2:f9:6d:02:68:a9:07:d6:7e:6e:d4:f9:27:
7e:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:2F:ED:D0:1D:1C:EA:3F:BC:37:88:00:09:5B:87:86:B8:BB:A1:F6
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/ZC_t0B0c6j-8N4gACVuHhri7ofY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
10:66:1d:2a:6e:96:a1:84:5a:98:f0:71:3a:17:db:25:75:3c:
93:91:67:b1:d3:48:13:ae:28:c9:9c:f6:2e:f1:e4:56:09:8e:
17:86:08:fe:2c:69:2e:8a:3e:1e:16:b3:51:62:cf:dd:14:f8:
36:97:0e:bb:c5:11:4b:d5:e1:17:81:19:a5:ef:5f:41:b9:8b:
17:5d:c6:b2:b7:d1:e3:c1:1c:73:ef:26:2e:08:08:33:f1:66:
ce:91:ef:10:c1:c2:d5:5a:f4:98:c1:6a:a3:42:9c:ed:f1:d3:
07:35:a2:1c:fd:53:ad:a7:a3:fb:b6:ef:df:ba:8b:5b:ca:c5:
c6:bc:3e:82:f4:e1:30:0c:e5:0d:c3:b5:56:89:44:ab:0b:0b:
f9:bf:20:c2:b5:35:69:4f:6c:9d:18:5c:c6:52:dc:64:45:1d:
7c:21:0b:be:8e:b2:b7:71:14:5c:cf:3a:60:8d:e0:cc:eb:47:
ae:94:0f:b7:75:50:07:9d:2a:59:5c:5b:79:5c:18:66:7e:51:
0c:b3:29:93:c5:70:28:41:4c:e0:1e:a0:4d:e6:b8:2f:ec:1f:
c1:f2:79:d2:7e:19:31:96:ae:36:05:3b:88:7a:f9:25:67:cd:
8b:51:60:62:6b:a7:1e:2e:23:51:67:04:33:01:cf:27:9b:37:
1c:22:cb:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 2 22:10:34 2025 by rpki-client