Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/ZFKd1jpcqvm2Me18BZQ3xBTEHnc.roa
File: ZFKd1jpcqvm2Me18BZQ3xBTEHnc.roa (raw, json)
Hash identifier: YtmUnmSX0TCG3mPLawke6CV9uYXFrrSRTMondXkc0nk=
Subject key identifier: 64:52:9D:D6:3A:5C:AA:F9:B6:31:ED:7C:05:94:37:C4:14:C4:1E:77
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0189F426C1FA5C09809D37391770AAF632F1
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/ZFKd1jpcqvm2Me18BZQ3xBTEHnc.roa
Signing time: Mon 14 Aug 2023 13:05:27 +0000
ROA not before: Mon 14 Aug 2023 13:05:27 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:188:7858:a003/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:189:a0e4:5c7d/128 maxlen: 128
2001:67c:64:ffff:0:189:f425:d787/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:f4:26:c1:fa:5c:09:80:9d:37:39:17:70:aa:f6:32:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Aug 14 13:05:27 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=64529dd63a5caaf9b631ed7c059437c414c41e77
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:2b:97:d1:7b:54:1d:4a:6a:9e:e1:58:fa:c5:
9c:45:7d:77:2b:bc:18:3d:03:f4:ea:8a:4a:49:df:
f7:6a:79:82:e4:08:92:4e:8e:cc:d1:64:5e:e5:ff:
d6:dc:95:2d:04:d0:17:bc:b8:ba:78:8d:3f:53:c2:
46:bc:11:06:5a:8c:3e:fe:48:ed:71:8f:a5:53:f6:
34:11:8a:43:31:e7:0f:ba:cb:98:ac:98:c1:2c:f5:
95:cf:8e:36:c5:6d:e3:f5:cc:22:95:5b:c7:bc:2b:
21:d6:5e:53:0a:bb:7c:69:3f:55:93:7f:ea:39:ab:
50:73:de:0a:a5:86:59:1d:6e:1e:bb:9c:db:c5:6b:
fc:17:6b:da:88:e4:b3:b2:8f:fc:12:0b:4e:9f:7c:
2c:af:17:fd:cb:97:33:ad:6f:36:88:f3:1c:89:6c:
6c:aa:19:b2:a7:52:c3:50:bd:c9:f6:30:71:f7:38:
de:51:8f:17:57:54:70:d8:25:3b:d5:59:70:07:76:
47:9f:8b:5b:70:bf:3c:e3:e7:c7:41:94:c6:63:e5:
80:34:56:e2:ca:19:3e:a2:01:63:4d:37:26:2b:43:
6a:d4:b0:0a:3b:37:6d:1e:c0:98:af:30:28:51:24:
ae:5f:bd:a4:67:b4:b9:bb:9b:7a:ae:82:54:77:06:
d3:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:52:9D:D6:3A:5C:AA:F9:B6:31:ED:7C:05:94:37:C4:14:C4:1E:77
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/ZFKd1jpcqvm2Me18BZQ3xBTEHnc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
10:a4:60:26:c5:19:33:61:8a:95:01:02:aa:5f:60:88:c9:5d:
e1:4a:87:bd:55:d8:c7:34:c5:d2:68:34:20:a7:d4:9e:14:16:
d0:25:8d:b3:cb:e7:45:94:43:a0:73:a2:02:1a:d7:d5:54:ea:
54:20:d1:1b:f0:b6:d6:81:78:72:73:0a:8e:2e:a3:be:cf:4c:
4e:65:0a:11:50:8c:04:a8:d3:04:06:bf:ca:92:e1:6c:6f:b6:
a4:64:4b:b9:5e:11:b8:85:f5:39:f3:a2:8c:9d:ac:ed:fb:07:
6d:4b:68:1b:06:b5:84:8f:b3:dc:6b:1c:d9:26:14:69:2c:ab:
c6:89:00:84:51:fa:fc:1d:63:f3:56:f0:71:9b:3a:89:84:b5:
ad:4f:ce:78:36:95:12:9c:b2:06:60:33:4a:45:64:af:61:0a:
b3:ca:80:2e:33:1f:74:e2:67:26:2f:bc:5d:d3:0e:95:93:68:
f2:a3:73:70:29:71:23:e7:bc:97:90:2e:55:42:a7:c1:7c:9f:
5d:b2:a6:59:ae:0c:5e:35:3f:84:c0:6d:63:a8:1d:bf:5a:46:
38:d9:e6:de:60:13:42:18:89:0f:1e:d9:fc:94:65:c4:16:87:
6a:35:1a:5f:c6:e2:72:38:d5:95:bf:42:dd:5e:49:5b:d1:47:
39:50:52:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 02:35:10 2025 by rpki-client