Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/ZcdH3JRKsNwwPPrgElXcflEWMRo.roa
File: ZcdH3JRKsNwwPPrgElXcflEWMRo.roa (raw, json)
Hash identifier: MII/MUr6vrTghEjb1mvk6r4r6Rcjsi8PoDKCksLKo2o=
Subject key identifier: 65:C7:47:DC:94:4A:B0:DC:30:3C:FA:E0:12:55:DC:7E:51:16:31:1A
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0183BBFDE307EDD292756CC9A280DB9FCF39
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/ZcdH3JRKsNwwPPrgElXcflEWMRo.roa
Signing time: Sun 09 Oct 2022 09:05:21 +0000
ROA not before: Sun 09 Oct 2022 09:05:21 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:183:bbfd:69c1/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:bb:fd:e3:07:ed:d2:92:75:6c:c9:a2:80:db:9f:cf:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Oct 9 09:05:21 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=65c747dc944ab0dc303cfae01255dc7e5116311a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:14:2c:d1:56:b0:5d:23:3b:5d:76:93:32:12:
87:a4:c0:50:c3:5f:13:50:73:1f:e1:d1:10:ed:a8:
dc:70:67:27:ed:fb:9a:3c:95:d4:4b:05:20:e9:bd:
f3:f6:69:02:10:fe:84:7e:4c:20:10:66:5d:9f:a3:
cd:dd:8f:cb:d0:6d:97:77:bb:a9:05:6f:80:2c:81:
8c:57:f6:92:ab:6b:1e:7c:4d:15:f4:7c:77:ce:bc:
cd:8f:40:92:85:09:36:64:77:21:a2:60:8b:1c:a0:
78:1c:ed:86:c1:99:67:4e:e3:fd:8b:ab:2d:37:0a:
79:73:8b:9c:5c:3c:f5:c3:5e:b5:3b:2b:fe:06:f5:
51:d3:07:92:19:a0:f2:62:5d:14:8c:84:08:4d:fc:
23:92:af:d3:1b:ec:68:1d:1f:a9:d5:7f:38:46:8b:
34:bd:c3:a8:fe:21:aa:f4:28:81:b3:14:f3:ea:63:
a3:18:7d:28:5a:bf:dc:09:61:c1:ab:a2:99:08:1b:
98:76:2c:39:c1:a8:7d:d0:bd:a7:13:11:bd:90:0f:
2e:79:5f:7c:60:67:3f:bb:44:79:e1:03:7b:d2:ba:
4b:d8:7a:e7:20:0f:57:5f:c2:4d:90:70:8c:72:75:
03:5b:74:b2:32:ac:e6:60:9b:4c:06:ba:83:79:0d:
ed:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:C7:47:DC:94:4A:B0:DC:30:3C:FA:E0:12:55:DC:7E:51:16:31:1A
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/ZcdH3JRKsNwwPPrgElXcflEWMRo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
02:1e:6d:75:15:c7:1e:6e:e0:0a:28:b6:a3:19:14:47:28:bc:
0c:f5:09:ed:77:48:76:5a:e9:bb:0e:39:9b:9a:22:ba:1e:74:
08:97:7a:62:10:e5:59:72:05:8c:6c:f2:30:35:cc:1d:fa:74:
69:95:ea:7c:a2:d5:cd:ce:0f:07:e7:b3:c7:20:7a:1b:fa:72:
79:17:72:ca:7f:52:a4:f3:2e:6c:a6:9c:55:e3:fe:c7:df:af:
96:4c:ac:57:20:7f:0b:3b:25:e2:c0:a0:01:c4:23:80:cd:6b:
fe:2c:af:3e:2d:de:1c:d4:e5:c0:1a:34:70:0b:98:41:b8:e9:
9e:21:40:8c:e1:72:4e:be:9e:81:9f:cb:ee:6a:4d:aa:45:26:
90:02:1b:38:a1:a5:c1:b9:de:e6:28:3e:8f:f1:be:fb:15:d5:
38:14:55:b3:3e:2c:a9:b9:95:02:50:49:9b:04:97:e3:b8:8d:
82:cb:c3:97:bb:67:f2:10:01:d5:7c:77:d7:57:36:22:1d:96:
ed:e3:16:d5:c2:4a:38:39:3d:9c:49:76:05:a2:3b:33:6f:a0:
5a:48:b9:0b:5f:88:81:8b:f9:7f:0b:45:8d:5b:23:58:bb:48:
29:5c:6e:77:3f:0b:9b:da:71:f3:51:0d:0c:64:88:d3:6b:cd:
07:a5:fc:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 17:39:34 2025 by rpki-client