Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/ZSSBopvsC4FSxccX4eHEcv44aPU.roa
File: ZSSBopvsC4FSxccX4eHEcv44aPU.roa (raw, json)
Hash identifier: 7rBssdKnt0bS9AkONGtbf/PqBYUXYPFdt3jzFG3StNQ=
Subject key identifier: 65:24:81:A2:9B:EC:0B:81:52:C5:C7:17:E1:E1:C4:72:FE:38:68:F5
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0189511A66C1DE1FAC6BB9A4855B30D000A8
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/ZSSBopvsC4FSxccX4eHEcv44aPU.roa
Signing time: Thu 13 Jul 2023 21:13:52 +0000
ROA not before: Thu 13 Jul 2023 21:13:52 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:188:5fe2:b396/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:187:4695:a68a/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:188:7858:a003/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64:ffff:0:187:fa9a:b088/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:187:b2b8:a7dd/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:51:1a:66:c1:de:1f:ac:6b:b9:a4:85:5b:30:d0:00:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Jul 13 21:13:52 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=652481a29bec0b8152c5c717e1e1c472fe3868f5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:df:fa:63:66:57:f7:a2:b9:e3:eb:70:16:91:
d6:c5:45:06:40:2b:a6:a9:75:33:48:9a:13:e8:c9:
1e:1e:b4:74:ca:ef:62:e8:1f:75:47:6e:ea:9e:1e:
96:3f:f4:60:ff:9f:3e:2e:95:38:5c:b6:04:8d:0f:
8b:6b:f2:41:22:cb:80:71:5e:f9:43:2f:21:99:2a:
43:56:4d:eb:6e:37:47:43:3c:18:f7:33:9e:37:2d:
2a:80:4b:b4:0c:ea:57:10:fb:b1:8a:b9:1f:1f:7b:
92:d0:d6:9d:26:d2:f3:e6:33:46:07:13:38:af:ec:
78:61:ed:5d:54:83:7c:63:bb:7d:86:38:53:6b:a6:
eb:b2:be:fa:42:2e:d5:0f:87:29:79:bf:2c:98:30:
57:bc:9c:6e:b1:12:a8:85:6d:7d:b8:67:e6:37:88:
ae:2e:d6:04:f4:10:c8:ff:92:a1:2b:05:b2:f2:7d:
3a:80:00:8d:dc:a6:5b:41:3f:13:d4:43:c1:dc:1e:
54:c9:7b:d8:76:4f:04:93:8f:50:7a:54:e1:98:a9:
35:eb:d4:79:86:66:2a:8f:1d:36:fc:4f:c3:b5:ac:
36:e0:4a:41:be:03:8c:b1:43:30:30:71:d1:02:2f:
11:51:ea:15:b0:17:2b:9b:1c:30:03:91:5d:f3:13:
cf:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:24:81:A2:9B:EC:0B:81:52:C5:C7:17:E1:E1:C4:72:FE:38:68:F5
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/ZSSBopvsC4FSxccX4eHEcv44aPU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
71:dc:17:c6:e6:c0:eb:16:ef:ad:b2:22:c9:02:10:31:8f:fd:
a4:72:37:16:56:ae:0c:60:67:83:6e:f5:46:12:46:9b:79:fd:
e3:c5:78:e7:15:35:f0:34:43:cd:c7:e9:8c:f5:04:cc:b8:73:
48:86:7a:a7:8c:94:6c:93:eb:12:35:2a:35:32:bb:45:b4:16:
fc:fd:0e:7c:31:2b:77:f9:48:b9:e1:6b:ff:63:91:f6:98:7c:
05:44:4e:44:94:f7:43:56:71:3c:47:a8:45:1f:f5:ae:d4:0d:
9e:09:c0:42:18:26:b6:87:92:63:51:db:c1:49:4f:c7:12:1d:
b4:0d:99:ca:20:0d:8b:b6:06:eb:1a:fa:8d:0f:f4:05:5c:64:
d1:87:03:f5:73:76:1f:74:86:05:03:09:d4:5f:a5:8a:6b:5e:
98:7a:1c:66:83:55:b4:3f:0e:82:66:e0:71:15:8d:cb:73:48:
22:b0:a5:9c:d1:e8:03:6a:bb:8d:08:7a:4d:b6:c8:82:c7:31:
84:24:7d:78:47:69:e8:e8:1a:2e:9f:84:79:2b:29:72:b0:e9:
0f:ef:eb:02:12:b4:03:f9:b7:fa:4b:79:38:2d:6a:d6:94:3c:
6b:65:98:c1:a8:0f:4e:d2:23:05:14:41:96:1b:6a:00:95:2f:
5a:e7:9b:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 2 12:03:47 2025 by rpki-client