Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/ZWfnwmnCWgZt7s4MXBGOWy0Kf60.roa
File: ZWfnwmnCWgZt7s4MXBGOWy0Kf60.roa (raw, json)
Hash identifier: fYGezpGa05pRQhiyBnkPNneIQG0mtIM5CpGxCLhGFbc=
Subject key identifier: 65:67:E7:C2:69:C2:5A:06:6D:EE:CE:0C:5C:11:8E:5B:2D:0A:7F:AD
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 8D5CEC17
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/ZWfnwmnCWgZt7s4MXBGOWy0Kf60.roa
Signing time: Thu 16 Jun 2022 23:17:37 +0000
ROA not before: Thu 16 Jun 2022 23:17:37 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:181:56ba:5b78/128 maxlen: 128
2001:67c:64:ffff:0:181:22f:7a99/128 maxlen: 128
2001:67c:64:ffff:0:181:477e:58d8/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2371677207 (0x8d5cec17)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Jun 16 23:17:37 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=6567e7c269c25a066deece0c5c118e5b2d0a7fad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:29:c1:07:6d:02:b2:be:3b:8e:8e:c2:4e:5f:
85:73:11:bf:4d:19:6c:2d:0d:70:6b:44:c3:26:f2:
3f:22:af:59:6d:02:8f:53:fc:7f:f4:3b:b5:60:38:
3e:93:ca:7f:f9:a1:fe:52:1c:2a:20:b4:6b:24:3a:
34:3b:ce:2a:25:2a:2d:c1:d1:e6:4e:f0:b8:66:9c:
49:91:12:92:2a:e3:d8:f4:fb:4f:69:08:81:6a:d9:
00:38:c2:3e:cc:a9:c8:f7:53:72:28:49:80:02:fc:
9a:3d:8d:9b:a7:63:a3:ee:e7:34:06:f5:c0:de:80:
20:d8:06:58:8c:a6:8f:55:5a:64:3c:fa:ad:85:f6:
6c:27:29:08:8a:a9:ef:f7:30:bc:26:af:8c:b9:f0:
22:db:b1:c9:60:42:60:4c:69:f5:1c:3d:ed:13:96:
74:97:32:c6:cc:8b:1b:56:47:b2:a4:a9:7f:7b:90:
00:9a:5c:25:da:e0:62:c5:2b:34:f2:3b:48:eb:7f:
d6:82:df:97:52:0a:13:31:93:a8:4a:25:86:b5:18:
7c:d5:ff:5d:e2:91:29:54:e8:bc:2e:ae:2b:17:57:
db:91:b1:be:bc:57:0a:9f:53:49:af:5e:77:fe:13:
47:a1:7f:49:8f:ed:3f:92:9f:75:81:ac:44:a0:fc:
1f:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:67:E7:C2:69:C2:5A:06:6D:EE:CE:0C:5C:11:8E:5B:2D:0A:7F:AD
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/ZWfnwmnCWgZt7s4MXBGOWy0Kf60.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
81:d2:7a:57:e4:62:44:a3:64:7a:a2:50:79:ef:ed:bb:2f:a0:
aa:35:e2:71:34:c1:e5:83:eb:57:d3:a7:f6:32:ef:2d:fa:3e:
32:db:97:40:ca:8c:2e:97:96:3d:73:a1:e5:73:ba:59:ce:cc:
55:74:e7:9c:8b:52:72:e3:56:76:ee:71:95:f8:49:ce:f1:dd:
e4:4f:38:f4:90:0b:dc:ab:e6:e8:f4:40:ca:01:c6:55:80:b5:
28:a4:ac:7b:e5:14:ce:43:c5:4e:58:77:dc:26:7d:ab:ed:05:
4a:f6:02:6c:ab:a8:1c:68:fc:d3:ed:6e:77:ea:16:7b:19:d7:
f3:9c:23:68:6c:dd:fd:45:4a:78:ea:da:84:d5:e9:aa:53:6b:
47:c2:86:70:76:5f:2e:f3:c0:bb:3a:5b:9c:f0:87:51:82:d7:
0c:b2:46:35:26:3b:c3:59:92:e4:00:98:4d:cb:38:63:c6:93:
64:2f:95:e2:76:90:f6:c5:f6:84:c8:10:da:eb:69:56:16:a6:
1d:81:df:29:07:16:43:7d:39:d2:e7:4c:6b:ce:6c:9f:4c:b7:
96:fd:0b:0c:e0:46:71:b9:0b:ee:45:a8:df:f1:61:cb:dd:d4:
08:3b:04:29:ea:5f:0f:29:0b:d4:0b:8e:27:f3:14:56:ad:0a:
0d:da:73:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 3 07:35:05 2025 by rpki-client