Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/ZcPFpbZXBJIOeVEDmRLrlcLdCbQ.roa
File: ZcPFpbZXBJIOeVEDmRLrlcLdCbQ.roa (raw, json)
Hash identifier: woU5L1i2PKGReAUylPtNt/3LXGEp0SECwJj5tLgIjac=
Subject key identifier: 65:C3:C5:A5:B6:57:04:92:0E:79:51:03:99:12:EB:95:C2:DD:09:B4
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 01865E008344C8D4021D59EB4E39CD7B2527
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/ZcPFpbZXBJIOeVEDmRLrlcLdCbQ.roa
Signing time: Fri 17 Feb 2023 06:12:17 +0000
ROA not before: Fri 17 Feb 2023 06:12:17 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:5e:00:83:44:c8:d4:02:1d:59:eb:4e:39:cd:7b:25:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Feb 17 06:12:17 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=65c3c5a5b65704920e7951039912eb95c2dd09b4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:7e:c3:b3:b6:e5:55:f5:4f:6f:94:9a:15:76:
09:3e:14:6b:07:eb:20:28:d9:f1:07:ab:36:ef:63:
df:9c:0c:e1:fd:14:e2:64:c7:c6:5f:84:34:5f:3a:
21:81:c6:49:26:5d:51:e2:42:f1:fa:c9:ed:9e:f9:
61:b9:c9:ab:fd:6d:b9:59:0a:f9:ab:11:33:e1:17:
6a:db:a8:88:f7:f7:f4:6a:e2:4a:a7:ac:8c:53:a5:
63:f0:b4:f2:88:bb:b2:69:87:eb:3a:03:42:17:89:
58:f7:08:d1:d1:65:51:58:0f:dc:74:47:eb:48:d8:
23:d5:4f:52:51:b5:2d:7f:36:e9:f5:da:b1:67:a7:
bf:4e:fa:cb:87:49:89:b8:d5:e0:2d:e8:83:f6:8a:
b4:29:55:00:6b:00:1b:28:9f:d4:2b:a5:ff:5e:26:
ed:fa:b5:1d:7e:9e:b3:92:66:1e:7c:86:5e:47:94:
37:e5:87:7e:fb:e6:b2:ab:bd:e4:b4:8e:ef:98:37:
67:eb:12:09:15:94:5a:0c:43:cd:bd:07:4e:9a:cb:
1d:41:6f:fb:2e:0a:12:54:ad:dd:0c:94:48:c7:78:
e5:32:2f:c5:e9:ce:2f:0d:02:39:39:0f:61:11:86:
f4:23:06:ac:e7:16:70:d7:f4:66:ee:1d:a5:a5:b8:
a5:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:C3:C5:A5:B6:57:04:92:0E:79:51:03:99:12:EB:95:C2:DD:09:B4
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/ZcPFpbZXBJIOeVEDmRLrlcLdCbQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
6c:ee:7b:03:eb:22:2c:bd:ca:1c:c3:b3:a0:b1:4f:c1:54:43:
54:05:0f:32:29:7f:96:36:05:5e:38:01:50:df:29:18:7a:5f:
61:fd:58:24:d2:8a:1f:dd:2c:ad:bc:cc:aa:2b:26:c1:52:00:
61:91:af:c5:02:0c:e2:9c:0b:08:36:4d:10:66:80:b0:82:b8:
5b:15:3e:b9:99:f6:d1:f9:10:54:d0:dd:cc:6e:d8:82:97:f7:
40:c8:f3:08:46:c8:cc:6a:e2:51:e6:a8:df:08:5d:52:05:f0:
0b:70:9e:45:2f:0c:a2:9e:9e:42:ad:5e:2d:69:ee:9c:27:23:
39:e6:54:9d:60:a1:2a:b2:a1:cd:1e:fa:75:50:08:6e:5d:69:
ef:e1:8d:11:b3:24:97:f0:ad:c1:c5:8e:e0:88:9f:6b:65:6a:
a7:10:47:3d:4e:d0:ff:6a:4b:82:65:27:4f:66:68:e5:88:c5:
85:bd:de:d5:9e:dc:b6:09:82:76:1d:e4:96:8b:cb:ec:ce:59:
15:75:0f:98:31:1b:7c:c0:79:34:80:d1:e7:34:5d:94:2c:c2:
4e:16:61:32:3c:9f:02:6e:bf:e2:e6:19:ca:67:ec:c8:a6:e6:
76:10:ee:35:8c:6c:d5:f5:ac:ee:50:0a:19:a2:0e:61:bf:2a:
fa:86:9a:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 18:51:54 2025 by rpki-client