Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/ZRVVUxmGGsUCAF9Ci14cbMmurGk.roa
File: ZRVVUxmGGsUCAF9Ci14cbMmurGk.roa (raw, json)
Hash identifier: i1GwTZmQR9tPx8kZ+qeUd960ifr6etFMKPwTMvAkQTA=
Subject key identifier: 65:15:55:53:19:86:1A:C5:02:00:5F:42:8B:5E:1C:6C:C9:AE:AC:69
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0189804FE50C4DA99C4D6EA0DA7551356C2C
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/ZRVVUxmGGsUCAF9Ci14cbMmurGk.roa
Signing time: Sun 23 Jul 2023 01:14:26 +0000
ROA not before: Sun 23 Jul 2023 01:14:26 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:188:5fe2:b396/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:187:4695:a68a/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:188:7858:a003/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64:ffff:0:187:fa9a:b088/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:187:b2b8:a7dd/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:80:4f:e5:0c:4d:a9:9c:4d:6e:a0:da:75:51:35:6c:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Jul 23 01:14:26 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=6515555319861ac502005f428b5e1c6cc9aeac69
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:f5:de:d6:9b:72:04:2b:0b:03:c3:fb:0a:78:
87:29:fc:21:69:88:43:9d:a8:2d:9a:0a:2c:71:dd:
e8:9d:c9:bf:0f:0b:1f:ee:07:5a:db:91:8e:13:05:
20:2b:31:68:2f:c7:ae:27:00:ee:65:0b:b0:b5:87:
0c:94:1a:c6:64:92:32:45:c8:16:ab:55:61:fb:f9:
4c:95:84:22:1b:16:b6:74:34:16:e3:60:33:41:42:
39:97:7e:d1:eb:e1:60:da:5e:84:a6:46:41:4b:85:
1a:ce:aa:9c:7f:10:69:ff:90:b7:e9:5b:02:8f:93:
17:c1:a9:45:01:b7:dd:94:b9:5e:08:78:a2:df:c1:
b2:d3:bf:93:11:f1:12:19:cb:db:39:0c:85:c0:c0:
41:e9:30:cf:4e:a0:42:b5:f7:90:12:f8:64:f4:91:
5d:53:85:d7:01:7f:15:bc:52:7d:39:2f:1b:11:73:
a5:96:06:33:6d:7b:a0:ff:17:8f:c5:6d:93:46:06:
e0:dd:26:82:54:a3:55:98:b7:28:cd:6f:75:c0:e1:
95:27:10:07:3e:23:6a:4c:fe:52:98:12:d4:08:44:
37:bc:86:f9:7f:83:b4:fb:0e:1c:9b:92:4e:b5:67:
6c:33:e1:8b:f2:d0:ff:74:12:e6:d7:01:fe:b9:04:
51:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:15:55:53:19:86:1A:C5:02:00:5F:42:8B:5E:1C:6C:C9:AE:AC:69
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/ZRVVUxmGGsUCAF9Ci14cbMmurGk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
9d:b9:98:fd:76:b6:96:e7:eb:67:fc:af:e4:33:0d:04:b9:f3:
2b:e9:9f:2e:65:5e:d8:96:47:36:6d:ee:a9:cb:eb:be:c8:c3:
11:53:2b:57:34:85:98:b6:3f:dc:db:0e:28:8f:7d:95:6f:ee:
33:57:9f:74:24:0a:38:bf:d7:55:44:ee:cd:ad:5d:f0:c5:5b:
30:04:d8:6d:b1:dc:43:d0:88:be:01:48:90:c9:78:6c:b4:a2:
58:11:de:5c:33:1d:31:29:65:ba:a4:41:9d:37:d4:5c:92:61:
59:f2:48:0a:dc:b5:41:65:96:c1:1a:58:0e:f1:5e:a7:cc:38:
f5:fb:63:01:9a:ea:f9:27:8e:67:be:9f:72:ee:32:dc:73:4d:
d5:6e:8d:9c:8a:55:f7:6c:d6:30:f7:c7:fd:99:9c:1b:ac:e3:
13:9b:53:7b:7b:fc:61:41:1d:fc:7f:1c:c9:18:9b:65:7b:bd:
4b:e8:4e:e1:92:64:5f:de:c2:71:fe:ec:1e:93:d8:9a:2b:65:
6d:4b:5a:f3:10:9c:49:f0:ab:21:e9:aa:60:11:15:72:da:ae:
0f:e8:16:6d:c6:d4:58:e1:af:ac:4f:dd:ea:61:72:19:5a:b6:
5c:a7:53:9d:76:47:70:f9:01:4d:24:b8:31:b7:31:c9:eb:33:
5a:fb:7d:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 17:34:05 2025 by rpki-client