Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/ZF4o2b_Rrnivbp-WhyM7jsqSOH0.roa
File: ZF4o2b_Rrnivbp-WhyM7jsqSOH0.roa (raw, json)
Hash identifier: yZeYdIBsPWLJrccQUwb7PNTnO69ULU2ZLg6Bftjga7o=
Subject key identifier: 64:5E:28:D9:BF:D1:AE:78:AF:6E:9F:96:87:23:3B:8E:CA:92:38:7D
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0186BD46D5858669BF6E3656317717208F2F
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/ZF4o2b_Rrnivbp-WhyM7jsqSOH0.roa
Signing time: Tue 07 Mar 2023 18:13:00 +0000
ROA not before: Tue 07 Mar 2023 18:13:00 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:bd:46:d5:85:86:69:bf:6e:36:56:31:77:17:20:8f:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Mar 7 18:13:00 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=645e28d9bfd1ae78af6e9f9687233b8eca92387d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:b3:ab:da:a5:46:66:a2:31:cf:36:0b:01:9b:
e3:0d:df:e9:b2:87:ae:d3:02:ce:f8:33:6e:68:d1:
85:ca:1c:4c:8a:8c:76:91:da:37:10:7c:5e:0f:6d:
40:e6:0f:ca:78:5e:9b:a1:8c:b5:97:40:19:58:77:
3e:9b:3f:97:50:6a:55:37:e7:32:da:a5:cc:16:09:
8d:dc:1b:cc:32:06:7c:8b:f5:b8:a0:03:35:1e:de:
80:b9:a5:83:2b:7a:51:18:2f:d6:8f:14:18:d1:e4:
32:03:9d:cc:72:59:e2:b3:de:52:2d:a5:3d:5c:0d:
04:17:c7:be:f3:cd:ba:4e:ef:3e:dc:af:23:0d:06:
d4:4b:fe:2c:4f:9d:01:89:f1:8d:77:fa:6b:34:5f:
a3:04:aa:32:9a:1b:9b:3d:c7:97:bd:1e:9e:e0:3a:
c7:43:ac:98:e0:c9:d8:09:4f:1a:81:d7:4f:03:cd:
50:fb:74:99:1f:e5:f2:cd:8c:ed:aa:2d:5c:fa:d1:
8d:79:90:7f:aa:20:17:bb:d8:11:f2:99:7c:03:0d:
21:2a:8c:2b:e8:ea:5d:a4:45:68:49:12:28:a0:50:
55:9b:9a:b3:d9:f6:3b:07:2f:f7:59:3c:83:45:1e:
ab:ee:a8:d8:92:80:4c:e9:e4:aa:05:0f:40:20:c1:
98:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:5E:28:D9:BF:D1:AE:78:AF:6E:9F:96:87:23:3B:8E:CA:92:38:7D
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/ZF4o2b_Rrnivbp-WhyM7jsqSOH0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
af:bc:f6:5c:01:8e:7c:91:84:ec:21:a0:e5:08:1a:1c:a7:66:
56:3c:ac:c0:c4:5e:78:28:0d:d9:43:8c:52:27:cf:b8:f9:a3:
bc:75:a1:a3:cd:d3:ec:15:9a:76:c0:8f:31:15:43:4d:12:5b:
b3:25:00:51:50:a0:db:cc:76:60:8b:1e:c6:3b:8e:d2:4f:7a:
11:21:6e:25:71:2c:9f:19:52:7f:64:58:0b:45:47:bd:aa:f0:
39:6e:7d:bc:6d:c5:00:77:fc:f0:c0:38:86:98:63:b2:df:e8:
82:91:26:df:19:ff:af:18:66:a1:ce:1c:ed:20:17:5f:34:01:
7f:4d:67:28:91:11:f3:3b:93:45:bc:5f:5b:2f:58:58:35:e5:
52:79:d6:10:f9:58:00:de:0a:48:a7:c4:d6:75:da:f5:70:03:
46:5b:35:f5:9b:6f:34:cb:4b:1c:2e:ed:16:ae:10:51:73:74:
63:70:66:d7:ab:ba:3c:eb:f5:b6:2a:13:a8:21:ee:38:a4:eb:
57:50:d4:b2:39:05:c9:bb:55:26:e1:3b:bb:70:6e:63:b5:90:
7b:f7:3f:eb:bc:74:4b:af:2d:65:25:dd:a2:3a:b7:6e:b6:0b:
d5:b4:93:fe:2b:08:2c:67:84:ec:ad:00:4d:95:12:34:e4:ed:
4e:d2:4e:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 15:26:24 2025 by rpki-client