Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/ZfeK7F6KEx6f1GHFKspD4GMOM_Y.roa
File: ZfeK7F6KEx6f1GHFKspD4GMOM_Y.roa (raw, json)
Hash identifier: 9ZCm1r6oADi3i8rFQos1UGDCDsOWDVbQjK62KNcDXSY=
Subject key identifier: 65:F7:8A:EC:5E:8A:13:1E:9F:D4:61:C5:2A:CA:43:E0:63:0E:33:F6
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 8837EA50
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/ZfeK7F6KEx6f1GHFKspD4GMOM_Y.roa
Signing time: Sun 29 May 2022 16:10:13 +0000
ROA not before: Sun 29 May 2022 16:10:13 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:181:22f:7a99/128 maxlen: 128
2001:67c:64:ffff:0:180:ff9c:1e7a/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2285365840 (0x8837ea50)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: May 29 16:10:13 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=65f78aec5e8a131e9fd461c52aca43e0630e33f6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:7d:d5:6a:64:ca:9f:a8:58:03:48:fc:b5:2b:
0f:c0:45:50:13:c0:fe:c7:17:e6:61:9a:dd:13:c4:
d4:42:e8:04:f2:83:2f:0a:b4:75:c1:87:9d:60:3a:
c4:35:27:ad:60:c0:6f:e3:e6:1a:63:2f:63:0f:ce:
3a:41:80:2b:31:a3:35:54:a8:ca:89:98:b9:43:b9:
d1:99:3f:08:93:9a:ba:51:cd:30:5b:05:c2:a6:bb:
6c:5b:08:7e:85:32:90:04:36:c6:79:78:e0:ba:6e:
16:03:53:6a:ab:3d:ee:47:13:3b:6e:47:ec:5f:1b:
3d:ff:fe:5f:9d:38:25:08:45:45:eb:8e:3f:7e:a0:
1d:45:15:8b:bc:1b:cd:c1:2b:e9:05:3d:64:04:03:
1b:f8:3a:0a:2e:9c:d0:7a:a4:70:98:b8:fc:ea:4f:
12:93:23:31:89:da:bc:e7:97:50:a2:dd:5a:5f:90:
3f:05:ec:e3:e7:ce:14:d3:94:67:b7:31:81:cf:0e:
16:b7:7a:45:4f:a3:f4:46:30:66:2f:93:a7:6f:f4:
8f:e0:db:45:a0:5a:f5:71:48:9d:6a:f4:96:ef:09:
75:0a:10:6b:63:51:cc:27:cf:b4:c5:52:cc:4f:0f:
15:b1:81:ee:e2:78:d7:1a:8a:9b:ac:20:9f:f2:45:
ec:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:F7:8A:EC:5E:8A:13:1E:9F:D4:61:C5:2A:CA:43:E0:63:0E:33:F6
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/ZfeK7F6KEx6f1GHFKspD4GMOM_Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
38:35:b6:f0:c3:5a:c1:47:14:c5:62:73:f5:05:aa:bd:bc:85:
0b:61:f3:56:18:88:23:26:60:10:f5:10:b0:e2:d1:d3:81:38:
54:69:a5:ee:b8:b7:8d:4d:18:73:9b:19:9b:dd:5c:ef:2d:a5:
8e:fd:c3:53:3c:dc:72:47:9c:16:38:86:24:1c:2a:d9:f0:51:
39:29:f8:5c:a9:fa:de:d1:64:8f:e3:a5:ce:c2:a8:52:98:37:
68:a4:55:4a:55:7a:3a:e2:78:c9:63:47:9c:81:7d:12:9a:e0:
77:a4:1b:b5:48:0b:cd:02:02:3a:52:14:16:e0:0f:19:86:30:
11:02:49:e6:d2:42:da:19:3f:31:0a:5c:de:6e:88:2e:64:40:
f9:6e:b8:91:1a:19:39:89:46:76:0f:9e:85:ed:75:cd:a3:3e:
ba:5d:b1:51:68:65:d5:50:40:d8:1e:d1:cf:3e:87:6c:3d:7a:
78:78:d0:ab:35:f3:20:ab:b8:d0:ad:df:52:9c:86:04:1d:22:
f2:ca:ba:cf:00:cb:53:b3:7e:b4:64:78:eb:8a:78:16:a8:27:
c1:c4:99:ea:03:c8:92:7d:24:5c:85:d9:6f:9d:1d:f7:4f:df:
1d:05:7d:bf:b6:f3:5e:e3:ff:04:ec:f7:7e:f1:43:1e:3f:64:
90:cb:00:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 11:15:21 2025 by rpki-client