Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/ZegBcPbKhsWWGB3o3tAu6ZgMvGk.roa
File: ZegBcPbKhsWWGB3o3tAu6ZgMvGk.roa (raw, json)
Hash identifier: 8oUTLmN+H+1ymB997ITjYqczE9J/6j0C6EjXTW9wnpc=
Subject key identifier: 65:E8:01:70:F6:CA:86:C5:96:18:1D:E8:DE:D0:2E:E9:98:0C:BC:69
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 018822887A0E77CFC0F667A19602EC19B556
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/ZegBcPbKhsWWGB3o3tAu6ZgMvGk.roa
Signing time: Tue 16 May 2023 03:09:09 +0000
ROA not before: Tue 16 May 2023 03:09:09 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:187:4695:a68a/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64:ffff:0:187:fa9a:b088/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:187:b2b8:a7dd/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:22:88:7a:0e:77:cf:c0:f6:67:a1:96:02:ec:19:b5:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: May 16 03:09:09 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=65e80170f6ca86c596181de8ded02ee9980cbc69
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:99:80:54:2d:3b:59:49:9a:67:8a:be:10:7b:
b1:62:fc:ce:02:af:60:2f:5b:e6:be:b6:5f:79:b6:
43:00:65:07:7e:f8:d3:50:6f:90:b9:dc:c8:bc:78:
56:b8:05:b0:d3:5e:be:cf:7a:6e:fe:bb:ff:c0:e0:
f4:ca:3e:11:b4:00:96:e1:e0:46:1e:d2:7c:df:82:
81:fd:10:b7:b6:9a:fc:5a:53:73:84:22:57:d7:f3:
d1:74:15:67:a0:96:43:e0:6f:b1:0e:c8:6d:d2:c6:
b2:9b:9a:01:4b:f6:ce:fe:6f:38:b1:43:c8:52:45:
a6:15:db:f4:42:73:ba:06:ae:ca:29:97:59:88:24:
f1:62:19:a7:7e:89:78:c3:ee:79:11:59:15:1e:7d:
50:42:06:54:3b:3f:dd:68:2f:31:85:6d:d6:4b:94:
30:2c:0f:81:bb:de:93:52:34:fc:de:69:3a:6d:77:
c3:d4:c4:e2:25:b8:8c:29:50:36:16:53:b3:11:61:
d0:ca:70:ee:0a:34:f1:77:27:87:8d:a0:74:9f:92:
f6:81:48:42:50:0b:6a:2a:26:5d:5f:0b:9e:8a:42:
35:66:7f:d7:b1:d7:d4:08:24:13:b3:b2:c7:a1:e0:
c2:78:13:d2:22:9a:a5:7c:0b:cf:6c:0b:be:2c:0e:
d5:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:E8:01:70:F6:CA:86:C5:96:18:1D:E8:DE:D0:2E:E9:98:0C:BC:69
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/ZegBcPbKhsWWGB3o3tAu6ZgMvGk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
5e:94:82:83:36:b6:cc:db:8e:3d:bf:35:6e:c9:d4:bc:56:65:
01:1d:08:41:28:e9:8b:b1:d3:6a:05:0c:0f:66:0d:b0:3d:7c:
6f:87:0a:7b:77:7a:80:31:ab:62:56:12:54:56:b2:52:ce:2e:
33:ad:e7:7f:36:f7:bc:13:e9:c0:25:b4:56:b5:9d:e1:af:68:
72:6f:1b:a1:d0:0f:14:13:c8:35:3b:a8:87:d1:25:bb:da:82:
82:93:fd:f2:f2:52:55:c3:d3:b0:66:b1:41:20:0f:d4:40:6f:
96:25:f3:39:4c:d5:81:bd:9e:06:45:f7:07:7a:7f:9f:fc:e7:
db:da:cf:35:1c:7d:6e:f5:d7:8c:00:cf:99:6b:e8:25:81:2e:
79:fe:88:f4:71:1c:90:b6:2b:2c:1b:5f:65:92:ad:ce:12:02:
65:49:a8:88:08:3a:6a:32:59:5b:cb:a7:fc:f0:7e:ee:02:02:
2c:77:70:3e:b6:cd:8a:3c:4b:43:80:c8:ee:09:85:db:b1:f1:
44:14:0f:8a:1b:8e:50:14:66:85:da:00:65:37:17:77:9a:07:
5a:7e:5d:c5:9a:e0:fd:a7:9a:bd:d5:54:32:e8:16:04:ac:8c:
c7:ed:26:c2:59:de:06:a7:05:71:ad:4a:c7:c2:13:f7:f0:07:
a3:9a:43:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 4 15:58:43 2025 by rpki-client