Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/ZEwIw3TdVq9UsfPOgIfptH85u0k.roa
File: ZEwIw3TdVq9UsfPOgIfptH85u0k.roa (raw, json)
Hash identifier: rxDX0EfloThftW2H8Uoob3/Wkdc0H3lYW/OGFInLkHU=
Subject key identifier: 64:4C:08:C3:74:DD:56:AF:54:B1:F3:CE:80:87:E9:B4:7F:39:BB:49
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 6A8A9ADD
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/ZEwIw3TdVq9UsfPOgIfptH85u0k.roa
Signing time: Mon 14 Feb 2022 14:04:24 +0000
ROA not before: Mon 14 Feb 2022 14:04:24 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:17e:f88c:7f04/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1787468509 (0x6a8a9add)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Feb 14 14:04:24 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=644c08c374dd56af54b1f3ce8087e9b47f39bb49
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:8a:6d:00:80:e7:05:08:29:7c:47:d0:e3:7c:
27:c3:11:a3:b1:f3:58:fa:19:8e:74:db:c1:1c:16:
8f:88:3c:ec:e7:d8:b7:ba:84:0b:b7:2d:c5:9a:7d:
bb:d6:ee:39:cd:10:38:6b:98:00:20:1d:14:78:03:
ce:f5:16:21:4e:51:5e:e9:c1:84:bc:43:4f:c8:ec:
86:ee:eb:27:15:a4:91:af:3f:85:e6:1b:62:3e:88:
f2:12:85:88:34:98:3b:68:a5:3a:c4:11:33:6d:8f:
07:94:2a:15:cc:cc:fb:e9:72:3d:a5:bd:8c:12:a5:
db:aa:c9:05:ea:ad:2c:f5:32:2b:cf:bf:99:af:be:
85:03:c0:b4:87:5c:1c:72:e4:2e:59:d1:a6:89:32:
07:66:72:f0:d3:c3:a4:06:25:a2:18:4c:f5:38:fd:
81:b8:9c:b8:14:a7:85:65:6c:57:cd:84:d0:4e:10:
74:fa:fe:0d:e2:e4:b9:42:aa:f7:1b:93:dd:dd:4a:
22:dd:2e:68:32:d9:b9:59:90:38:8c:5d:bc:fc:17:
82:74:b4:7d:ec:3a:58:32:b2:77:2e:35:49:75:83:
f1:d9:65:82:c5:9e:42:4d:75:36:7b:ad:0b:5d:a6:
fe:7e:62:02:e5:0c:67:45:61:00:ef:56:40:b3:4e:
3f:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:4C:08:C3:74:DD:56:AF:54:B1:F3:CE:80:87:E9:B4:7F:39:BB:49
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/ZEwIw3TdVq9UsfPOgIfptH85u0k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
00:17:a3:4e:70:e9:d6:f3:8b:4a:66:98:46:d4:b0:f2:4c:39:
17:4f:91:61:f7:34:9b:a3:52:34:f8:29:60:92:7d:45:18:88:
cf:23:6e:b8:9c:d2:f7:c1:0c:a2:a5:26:3b:f7:81:16:75:3a:
26:21:ff:c0:da:e3:bc:30:d7:9c:bc:1d:e3:0d:6c:1c:90:77:
4c:ed:b9:ee:39:2f:4c:a8:e3:98:69:6a:be:5a:8c:df:a2:7e:
59:60:6b:87:fd:71:3c:e9:86:31:4a:25:06:0b:8f:71:b1:82:
b5:e0:60:6b:88:96:89:f5:60:e4:a7:32:e2:fb:24:3d:d0:8c:
45:78:b3:fa:c6:0b:8d:2e:ee:76:77:85:0f:74:36:2d:51:47:
08:2f:65:c7:5e:7e:8b:c4:6b:e4:98:8e:87:b5:f5:06:c0:5f:
ff:d6:f5:76:8d:8b:19:1d:39:bb:78:08:06:f6:84:f0:c3:13:
63:cf:d2:3f:0d:86:4d:47:52:a5:71:57:f9:db:1c:50:05:9c:
7d:1d:9f:df:7c:13:4f:c7:40:03:65:8a:40:fc:89:30:2c:c5:
17:e6:66:07:0e:4d:62:c4:b2:70:18:91:22:a6:21:1d:1f:8b:
a7:53:45:00:64:fe:08:3b:4d:a7:ee:40:51:05:80:84:ff:45:
56:8a:3f:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 17:57:37 2025 by rpki-client