Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/ZEvDlIYi1FA9B_LLfMud50d1Xoo.roa
File: ZEvDlIYi1FA9B_LLfMud50d1Xoo.roa (raw, json)
Hash identifier: DZtr6aEPoicFUjtM9tlvLj3SWYRYRZLdAo7Vsn97acI=
Subject key identifier: 64:4B:C3:94:86:22:D4:50:3D:07:F2:CB:7C:CB:9D:E7:47:75:5E:8A
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 018668EB9FD5C89A364EB0206C6B85271089
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/ZEvDlIYi1FA9B_LLfMud50d1Xoo.roa
Signing time: Sun 19 Feb 2023 09:05:17 +0000
ROA not before: Sun 19 Feb 2023 09:05:17 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:68ea:f33b/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:68:eb:9f:d5:c8:9a:36:4e:b0:20:6c:6b:85:27:10:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Feb 19 09:05:17 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=644bc3948622d4503d07f2cb7ccb9de747755e8a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:39:3c:45:f1:62:d8:91:07:8b:5a:eb:7d:a6:
68:c8:6a:5d:7b:03:bf:81:d7:bd:68:23:e7:4f:87:
22:2a:f1:e9:c2:65:d5:c2:73:75:b5:4e:c5:c5:99:
ae:8d:7b:ed:ed:f5:3d:ea:4c:5b:40:3a:2a:0c:9c:
9e:3e:9d:29:e8:56:04:de:e0:12:19:5a:c6:53:d9:
a5:34:7d:10:f9:78:a6:e2:90:5e:fc:c8:7a:51:32:
4d:67:12:6c:48:0a:5a:07:e4:04:27:a8:1f:7a:2a:
57:37:fb:a4:86:9c:5b:ef:ad:f0:05:ae:ff:e0:59:
35:73:ed:56:d9:5c:47:31:8e:22:08:82:57:5f:b5:
16:ef:98:0e:54:ab:62:36:8b:2f:4e:af:d1:4e:06:
c9:27:15:d7:6e:f7:1c:67:dd:0e:8d:fa:38:66:35:
4a:71:cd:30:9e:92:f4:3e:7f:3f:93:20:41:90:10:
45:35:35:5d:41:f3:13:ee:1a:70:6b:01:63:9a:52:
69:d2:2d:07:ec:83:71:5d:fe:92:fc:4b:3d:79:d2:
7c:5d:78:4d:db:f1:4e:e2:3d:fb:52:2b:88:15:06:
a0:5d:20:2c:72:26:eb:8a:e7:73:bc:94:ef:36:f5:
7f:35:12:4f:90:14:82:05:0b:62:3f:54:59:08:19:
8f:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:4B:C3:94:86:22:D4:50:3D:07:F2:CB:7C:CB:9D:E7:47:75:5E:8A
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/ZEvDlIYi1FA9B_LLfMud50d1Xoo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
21:ec:0a:6d:b5:69:6c:40:ba:77:9b:95:7c:9c:32:3a:cb:5a:
bb:a0:c7:ae:c0:a2:80:f4:0a:b4:1c:58:14:89:6e:11:fc:1c:
c5:29:d1:67:a0:49:42:fd:25:62:e4:87:87:cc:20:19:ae:ab:
96:a9:a7:f3:11:7b:d9:b6:64:68:cd:53:97:c7:57:62:cb:dd:
0e:98:eb:12:57:0a:24:63:68:93:5c:59:03:38:6f:3a:0c:89:
6f:68:37:18:55:d8:df:87:24:b8:62:a8:87:5a:0d:9f:a0:2f:
96:f9:a4:81:1a:33:43:5d:3f:70:2f:fb:07:57:5c:a7:96:24:
ae:6c:f3:94:1f:1d:87:73:76:3f:b4:52:7f:8c:34:36:5a:03:
7d:4b:11:0e:4d:b6:c3:4f:5b:45:13:6c:67:cb:90:f3:9a:7d:
01:00:36:38:cf:e6:70:6f:8a:c1:51:cb:db:70:32:d3:be:07:
27:66:9a:86:53:61:cb:f2:ae:aa:b9:61:8d:77:82:a0:e3:0f:
45:13:bc:e6:db:bc:0a:8c:59:d7:84:c4:1c:da:54:3d:0f:60:
0d:a6:b2:78:da:74:0d:4a:c5:37:c6:4b:75:cc:49:dc:d3:ac:
c8:84:5c:5a:64:27:c1:63:03:73:82:cb:7b:06:25:05:c5:ab:
c7:75:b0:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 14:02:39 2025 by rpki-client