Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/ZQZsfFzMjd3kaadGn_E0la9NzqQ.roa
File: ZQZsfFzMjd3kaadGn_E0la9NzqQ.roa (raw, json)
Hash identifier: PmORrFdKjQ7NoV2yPMnImYybD9rJn11r1Te1qupHXGA=
Subject key identifier: 65:06:6C:7C:5C:CC:8D:DD:E4:69:A7:46:9F:F1:34:95:AF:4D:CE:A4
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 018804ECD3248E0B4C793B57C442B7AB48B1
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/ZQZsfFzMjd3kaadGn_E0la9NzqQ.roa
Signing time: Wed 10 May 2023 09:10:09 +0000
ROA not before: Wed 10 May 2023 09:10:09 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:187:4695:a68a/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64:ffff:0:187:fa9a:b088/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:187:b2b8:a7dd/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:04:ec:d3:24:8e:0b:4c:79:3b:57:c4:42:b7:ab:48:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: May 10 09:10:09 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=65066c7c5ccc8ddde469a7469ff13495af4dcea4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:db:68:fa:05:4c:43:0f:4b:a0:44:23:a7:08:
af:f5:21:59:bd:92:bb:77:3d:4f:f5:96:d5:1e:97:
1e:fd:3d:57:00:34:60:86:b0:47:35:ec:a6:18:39:
27:50:46:7d:86:24:3d:ab:47:43:ad:16:f0:69:31:
7e:5d:d2:7f:ab:25:83:24:13:d7:9c:fa:c2:96:b7:
a6:66:8d:a2:e6:cd:3b:9f:6f:b6:86:6d:99:00:39:
87:72:68:73:7f:b3:48:af:1d:0a:65:1c:84:f3:fe:
1f:91:8d:cb:33:83:5a:95:d6:00:af:67:d8:c5:5c:
70:26:be:9c:8a:84:ac:e6:23:d0:d2:65:e2:c0:a2:
82:1b:87:52:3a:56:55:39:d6:6f:e9:1e:2b:2d:04:
7a:da:c5:5c:a2:65:b5:4d:6a:91:2e:df:ff:66:57:
bf:b8:f1:74:f5:35:1c:41:e0:7b:64:55:23:12:59:
14:80:1d:de:35:09:cd:59:d0:f9:c6:24:ca:97:d5:
08:9b:da:c2:26:5d:b8:de:97:cb:b2:44:4f:cc:e3:
bd:6d:08:4e:4e:18:61:82:19:9a:41:b4:ad:0f:b8:
a9:ef:07:d3:28:91:a9:20:d6:a9:45:7d:ea:34:41:
0f:37:20:6a:89:e9:63:46:4f:88:b5:d3:67:72:b1:
4b:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:06:6C:7C:5C:CC:8D:DD:E4:69:A7:46:9F:F1:34:95:AF:4D:CE:A4
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/ZQZsfFzMjd3kaadGn_E0la9NzqQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
58:7c:34:d8:3f:4e:cd:a6:38:a7:45:f0:21:c9:5f:52:aa:d1:
20:33:62:d5:d8:7b:44:99:dd:24:54:c9:62:a8:47:0f:e8:b3:
db:92:7b:16:91:1a:3e:94:97:03:8b:69:5b:33:0f:84:f5:32:
69:3a:89:d2:ae:a4:8a:37:9b:70:9b:1e:4e:00:fc:87:17:f2:
b1:7b:09:91:01:1e:8b:c9:04:5c:d7:12:69:e1:47:81:30:b2:
15:9f:3e:ec:0a:1f:e6:58:70:43:b4:f8:5f:44:64:3f:fb:8a:
05:c3:16:26:e2:4f:c7:58:57:3f:9d:9b:e3:08:7b:51:8f:4b:
40:d7:63:4d:a2:41:e8:1e:37:92:d3:6e:3b:93:a6:c8:18:da:
17:25:c4:8e:05:96:65:c3:cb:57:96:2f:46:54:86:af:4e:35:
fd:7f:aa:42:59:10:8d:22:8e:e8:63:70:c3:20:38:e5:2c:7d:
1b:4a:37:0f:d1:57:d8:67:28:43:94:bd:b8:dc:f6:27:60:ee:
09:80:a4:91:36:db:78:36:d1:59:b9:a3:1e:72:55:78:ea:a1:
fc:fc:d0:fd:c3:f5:94:9b:f2:54:90:77:73:9b:da:d4:c2:27:
63:e7:ca:47:8c:92:ca:88:4a:f3:df:53:bb:b8:97:41:58:7d:
85:11:55:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 3 02:25:28 2025 by rpki-client