Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/ZOvfENPlDddrMG3Qiqx5el-P_Is.roa
File: ZOvfENPlDddrMG3Qiqx5el-P_Is.roa (raw, json)
Hash identifier: kppIqBsuGwzOs3OeH7mmy3l2eg+qiHROywoY0LlmI+k=
Subject key identifier: 64:EB:DF:10:D3:E5:0D:D7:6B:30:6D:D0:8A:AC:79:7A:5F:8F:FC:8B
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 01856101BB9F414589A2B55DBC1320B8FBF3
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/ZOvfENPlDddrMG3Qiqx5el-P_Is.roa
Signing time: Fri 30 Dec 2022 03:09:41 +0000
ROA not before: Fri 30 Dec 2022 03:09:41 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:185:3dcc:d8f/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:61:01:bb:9f:41:45:89:a2:b5:5d:bc:13:20:b8:fb:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Dec 30 03:09:41 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=64ebdf10d3e50dd76b306dd08aac797a5f8ffc8b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:1d:20:4a:28:d5:31:ef:aa:54:b1:b2:2e:c7:
fc:d3:45:e3:a3:28:3c:55:1b:de:1c:84:13:de:8b:
31:53:45:66:2f:41:b5:8a:08:38:86:37:52:a8:fe:
3c:2d:c4:d6:a9:be:0f:f7:24:7e:54:9d:0e:ec:b9:
3f:03:58:59:fd:89:7e:cf:ce:0e:69:83:bc:04:f2:
2c:23:2d:aa:1b:77:6d:80:b1:33:65:e5:c6:8e:7c:
cd:9b:bb:27:bc:e1:e1:a3:b2:3c:54:4e:b3:bb:32:
c4:74:ac:9e:8f:a6:ce:11:50:a6:ad:06:d4:d0:ee:
85:2f:67:ff:c2:4a:d7:34:3f:98:8f:b8:7e:2c:39:
31:27:0d:61:42:eb:80:3d:4d:3a:d3:07:4c:9a:d4:
27:bf:f3:07:1e:ab:99:80:9a:1f:a2:90:99:82:61:
11:72:a6:f5:44:f0:56:25:bc:13:1e:1e:23:ea:c5:
68:64:e7:b1:7b:d0:2b:47:ee:2c:24:6c:88:eb:4c:
2c:47:99:35:42:b6:22:27:fb:88:98:8d:b7:fd:79:
12:b1:d5:95:95:40:bd:3a:cf:76:3e:f1:f2:39:4b:
52:ef:36:7f:8b:f3:ac:5f:bc:dd:ed:28:42:33:6d:
9f:b9:6a:92:45:7c:32:6b:7b:7d:c9:59:c5:d6:db:
9d:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:EB:DF:10:D3:E5:0D:D7:6B:30:6D:D0:8A:AC:79:7A:5F:8F:FC:8B
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/ZOvfENPlDddrMG3Qiqx5el-P_Is.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
a6:49:b9:6a:0e:81:73:1e:bf:17:0b:8e:26:a9:e4:34:f3:30:
b2:c8:b3:19:4b:56:dc:fe:28:ce:a1:44:0b:80:b7:c3:19:a1:
4e:8d:bd:2e:7f:af:e1:77:3f:81:2b:c6:97:87:5a:29:d4:d1:
2f:51:74:d7:41:27:33:ea:e6:1d:45:2b:48:3a:b8:91:b0:9f:
fb:e0:1b:91:58:13:cf:b6:64:b5:9a:6a:c2:7b:67:e5:7c:9c:
b0:22:b5:f7:76:27:75:28:65:8b:87:5c:7e:2b:51:f5:a8:5b:
95:39:d6:7b:48:11:6e:7e:9a:8d:10:4e:ba:36:3a:18:f8:fb:
45:2f:9a:71:58:a7:da:83:15:94:01:ca:45:68:a1:b5:a3:33:
ff:ac:87:3c:58:0d:db:c9:c8:be:6c:ad:29:2f:0a:c6:14:96:
8c:e6:ed:26:18:7c:6d:f1:a7:58:2f:10:6d:f4:a0:7d:b7:25:
9a:4f:74:d1:66:36:92:0d:2a:97:39:db:6f:e9:fb:aa:39:d1:
1a:bf:c9:3d:c8:b6:52:ea:82:e4:89:d8:7e:52:9c:71:f2:2f:
09:f9:b3:32:2c:62:6e:e1:cf:e0:39:44:d5:0f:6d:d6:6d:14:
a6:43:c9:8a:07:70:27:82:37:9f:ac:84:83:a9:90:6d:1c:9b:
f0:d3:09:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 21:26:47 2025 by rpki-client