Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/ZWInWcYNlJHIB-JKITi731RA3qg.roa
File: ZWInWcYNlJHIB-JKITi731RA3qg.roa (raw, json)
Hash identifier: XGnWavCzqQDH5VvnVhboAJ6/+AC6MCD7xqZi61sYn0g=
Subject key identifier: 65:62:27:59:C6:0D:94:91:C8:07:E2:4A:21:38:BB:DF:54:40:DE:A8
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0187748C7515BA4546E38EDF12A0F37E7456
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/ZWInWcYNlJHIB-JKITi731RA3qg.roa
Signing time: Wed 12 Apr 2023 08:19:34 +0000
ROA not before: Wed 12 Apr 2023 08:19:34 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:187:4695:a68a/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:74:8c:75:15:ba:45:46:e3:8e:df:12:a0:f3:7e:74:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Apr 12 08:19:34 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=65622759c60d9491c807e24a2138bbdf5440dea8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:48:f1:0c:f0:09:c5:da:79:fc:c2:28:64:0f:
c2:bf:e9:71:ab:ea:cb:9d:6e:bf:96:07:a5:12:44:
34:25:f1:d7:ec:db:35:91:40:fc:0f:54:80:19:c3:
25:50:02:75:49:5d:09:db:7e:37:bf:8a:5c:e9:56:
ee:db:71:bb:ab:1e:99:e7:96:b4:60:51:67:31:7f:
10:90:07:4f:d8:c3:1f:87:35:08:6a:32:0e:e5:3d:
b0:74:1e:85:af:bf:57:0b:04:a7:9b:f0:49:36:db:
e1:40:27:23:89:4c:b8:0b:94:cd:51:3d:b0:05:47:
72:06:55:c5:ff:3d:fe:8f:8d:34:6a:29:48:8c:27:
c9:33:0e:19:db:38:52:07:98:a8:c2:7b:d6:fc:45:
c3:d9:75:22:57:18:5e:33:57:5f:9b:a9:05:ab:88:
7e:c6:09:15:a3:35:e3:e8:3a:b9:0f:34:e2:70:9c:
3a:a4:18:55:fa:f6:dd:43:7b:f3:b9:b3:48:a2:10:
68:b1:93:d4:c0:ae:4b:6d:68:cc:96:84:af:be:c6:
03:5c:02:12:18:8d:a6:d9:3f:d3:d4:75:7f:a0:5f:
62:65:94:00:fd:bb:be:1c:90:71:ba:6e:c0:5c:4b:
40:5b:85:d0:7d:3d:70:38:de:59:87:3f:2c:f1:9d:
f0:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:62:27:59:C6:0D:94:91:C8:07:E2:4A:21:38:BB:DF:54:40:DE:A8
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/ZWInWcYNlJHIB-JKITi731RA3qg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
5e:df:d3:b9:e6:94:f7:ac:a3:55:c5:37:77:1b:88:1e:6b:0f:
66:4c:84:1d:28:47:10:52:c7:05:b4:43:0f:ed:cd:c6:b6:fd:
97:95:8f:b0:c5:23:0f:52:e9:63:58:c4:72:7e:30:52:c1:29:
a0:10:1d:df:c6:61:b2:80:cd:a0:6c:50:b7:e5:86:3e:db:31:
82:fb:e4:a3:1b:4c:34:b1:e5:ce:99:62:30:3b:57:9d:dc:fb:
8d:94:c4:41:d8:4e:1b:89:78:55:78:80:1d:54:97:fb:c0:e8:
ac:22:f2:b4:d1:d7:bb:21:eb:e3:34:d7:47:3d:06:ae:88:3b:
2e:e8:05:e1:68:7e:f2:13:8f:57:3f:5a:6c:f2:e4:d6:63:9d:
17:f7:f2:6e:7e:cc:7c:7a:3f:c5:f0:b6:43:44:14:0d:83:6c:
30:6d:6d:b8:67:3b:57:60:ae:87:9d:5b:bc:db:63:16:de:93:
4f:7a:84:93:c2:95:05:8c:97:cf:1c:18:40:8e:ec:9f:87:49:
1a:fd:c6:e3:a5:46:4c:c9:4d:10:07:aa:c4:f8:82:2c:53:a6:
2e:d7:51:37:32:dd:b7:f1:53:2a:01:a7:f8:fa:90:14:3c:ff:
bb:ca:83:f7:c6:65:4e:55:26:54:09:2b:d9:bf:37:bc:0a:9b:
e5:6a:a3:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 2 13:24:23 2025 by rpki-client