Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/ZUXWCfjhsm5P27bDypg3oAI1j6Q.roa
File: ZUXWCfjhsm5P27bDypg3oAI1j6Q.roa (raw, json)
Hash identifier: bIYOs94tcsvTnArK9GqKKoorzu6C2pRbtoe36XPa0G8=
Subject key identifier: 65:45:D6:09:F8:E1:B2:6E:4F:DB:B6:C3:CA:98:37:A0:02:35:8F:A4
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0183A4334036212E5675CCFFBE89B7E62DBF
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/ZUXWCfjhsm5P27bDypg3oAI1j6Q.roa
Signing time: Tue 04 Oct 2022 18:12:45 +0000
ROA not before: Tue 04 Oct 2022 18:12:45 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:182:3f1d:a803/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:183:50b3:5643/128 maxlen: 128
2001:67c:64:ffff:0:183:5f81:ab13/128 maxlen: 128
2001:67c:64:ffff:0:182:7cb2:99d4/128 maxlen: 128
2001:67c:64:ffff:0:183:1279:659d/128 maxlen: 128
2001:67c:64:ffff:0:182:383f:6b78/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:a4:33:40:36:21:2e:56:75:cc:ff:be:89:b7:e6:2d:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Oct 4 18:12:45 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=6545d609f8e1b26e4fdbb6c3ca9837a002358fa4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:78:9f:48:a8:99:77:aa:28:2b:b3:d6:f0:cc:
08:3d:5e:47:ec:eb:3e:ba:6e:f4:24:b7:fd:b0:16:
95:39:9c:b8:55:fa:15:6a:63:9d:a5:42:77:c1:2e:
e5:37:cc:4c:db:62:e6:23:ba:46:44:12:fb:f7:df:
77:de:27:a6:f7:6e:8f:dd:49:12:79:c6:d9:13:0a:
0b:b1:78:a4:4d:e8:48:fa:55:72:03:1b:c3:dd:c9:
51:08:30:81:16:d8:4e:c5:cf:48:aa:99:65:ed:3b:
e8:33:c3:2e:63:85:5e:fd:5c:12:ca:1d:c4:ba:e6:
30:ec:c8:60:5d:c5:d8:55:7c:58:1f:3c:b7:9d:23:
d9:b7:37:eb:27:fb:db:a9:7b:c9:0a:a7:b4:af:e9:
e5:5f:40:77:35:55:2f:69:f4:13:24:8c:86:52:bf:
61:63:e3:a3:94:e8:15:a6:1a:6a:f0:36:4f:78:24:
58:16:94:44:30:ea:36:f2:29:94:2c:1d:2e:a6:c8:
44:d1:03:f8:a3:5e:00:1f:4d:69:9c:cc:79:57:16:
e4:7e:f3:d2:c4:62:5d:65:17:f0:73:ab:d3:f2:d5:
b3:a4:02:10:9b:ce:2f:0a:78:a3:03:d7:6c:d1:d7:
45:b8:29:e1:d1:51:19:99:d9:bb:b2:0c:20:86:08:
ae:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:45:D6:09:F8:E1:B2:6E:4F:DB:B6:C3:CA:98:37:A0:02:35:8F:A4
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/ZUXWCfjhsm5P27bDypg3oAI1j6Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
6a:e0:c8:9e:cb:99:65:f7:68:de:dd:c9:11:eb:34:8d:6c:8d:
0d:bb:a3:21:ce:9a:dc:be:a2:c2:ce:6b:14:a9:da:51:b2:26:
59:5b:0a:37:56:2b:22:41:03:14:ec:b6:30:4d:06:0d:e4:6a:
52:f4:21:2c:30:4b:70:fe:3f:2b:bc:58:70:58:1d:e7:63:12:
20:af:0c:80:52:08:2c:fa:03:ea:86:1c:42:25:73:d0:3d:06:
ec:90:da:b9:0f:96:6b:e8:78:9a:b3:ef:61:0a:b4:f7:a6:df:
2a:81:22:67:02:80:e6:ea:0e:20:ec:78:9c:10:e3:4e:12:c8:
d3:83:b4:43:42:16:8f:10:3c:e6:2b:1f:94:2b:87:d3:80:1d:
27:38:f5:43:82:06:a4:84:93:f2:bc:5a:57:f6:1b:07:6b:2c:
a7:24:fa:64:b4:00:1e:8d:72:fb:a6:e6:fb:53:cf:77:f0:c3:
b4:02:3f:f5:cd:bf:04:0a:3e:9c:aa:c3:83:ea:c7:79:cf:56:
02:06:39:d9:ac:79:cd:90:3b:40:a1:10:40:97:02:42:d9:52:
e4:93:d6:50:5e:37:a6:60:cd:c2:e3:05:f4:aa:a1:34:b1:be:
7b:95:58:76:bb:57:d0:d9:eb:58:c2:80:55:f2:29:96:5b:bb:
19:37:4a:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 17:39:07 2025 by rpki-client