Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/Zg80nFRxxk2Kgn-5D7Mh7JqmxMw.roa
File: Zg80nFRxxk2Kgn-5D7Mh7JqmxMw.roa (raw, json)
Hash identifier: gED57aM4qeXnN0abBq5+LvcXHkenj/6WmktZHOdmAWs=
Subject key identifier: 66:0F:34:9C:54:71:C6:4D:8A:82:7F:B9:0F:B3:21:EC:9A:A6:C4:CC
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0189C6DFB9FF7E3FE3435C9314B085C720E2
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/Zg80nFRxxk2Kgn-5D7Mh7JqmxMw.roa
Signing time: Sat 05 Aug 2023 18:04:58 +0000
ROA not before: Sat 05 Aug 2023 18:04:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:188:7858:a003/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:189:c6df:3265/128 maxlen: 128
2001:67c:64:ffff:0:189:a0e4:5c7d/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:c6:df:b9:ff:7e:3f:e3:43:5c:93:14:b0:85:c7:20:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Aug 5 18:04:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=660f349c5471c64d8a827fb90fb321ec9aa6c4cc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:ce:e7:8d:3d:6c:21:4b:cd:f2:3d:10:84:13:
fc:d8:60:47:56:31:7f:ac:63:ee:66:2e:4b:7d:f7:
83:8f:43:64:7a:c0:05:ce:92:56:5e:35:2e:ef:fd:
01:d5:48:bc:ae:24:e5:e5:0c:42:28:3e:45:89:44:
7e:68:bf:91:da:f2:fc:bb:90:4c:5a:1e:54:30:c1:
ec:1f:57:68:ba:9a:ba:99:b6:ca:ff:60:d6:3f:b3:
d2:89:d4:6e:44:8d:cd:49:33:fa:f9:39:97:3f:ea:
a2:8a:46:29:1c:81:e6:49:58:84:9e:9f:fd:40:76:
93:da:37:6b:94:05:2c:1c:e8:1e:31:d7:4b:43:ee:
b6:d9:c8:59:74:23:9c:d0:16:87:bf:90:a6:cb:4d:
e4:f6:ec:d7:c4:04:2e:16:74:2b:c9:38:1c:c2:76:
39:18:c9:c3:c9:04:52:3e:33:ef:ae:48:bb:2c:c1:
23:6e:a9:96:e3:82:eb:bf:96:5b:38:a6:13:47:d6:
7d:78:e1:99:84:65:e5:a0:17:51:cf:1c:0b:3b:1d:
01:7e:26:24:c8:a3:63:1c:13:7c:5b:b6:ff:85:2b:
81:68:17:19:82:b1:86:b8:35:17:34:f2:a8:7b:17:
b7:18:f1:1c:3e:82:40:5d:30:1e:ba:04:4c:35:b3:
73:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:0F:34:9C:54:71:C6:4D:8A:82:7F:B9:0F:B3:21:EC:9A:A6:C4:CC
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/Zg80nFRxxk2Kgn-5D7Mh7JqmxMw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
6f:ea:9f:53:2c:e2:60:53:b0:43:27:9b:5e:de:58:a4:cb:bc:
a5:8f:e1:d7:87:be:8c:17:7f:f9:21:83:74:d3:08:51:39:32:
b5:1d:06:75:28:bb:1a:ff:a2:e2:5c:95:d9:a1:3d:32:4c:5d:
a9:eb:0e:b4:79:6e:58:e3:62:04:7f:b2:4b:7c:b0:37:1c:c6:
6a:a6:d7:cf:91:20:ef:c4:ed:2f:98:fc:85:4c:78:74:ee:90:
4c:a9:4d:ea:8d:dd:72:27:ff:67:87:99:57:d9:9b:46:c0:d9:
c8:f1:98:3f:e4:fd:41:54:5b:96:d1:13:1f:bd:e3:d5:f0:de:
93:21:38:79:5b:b1:73:75:a5:6d:83:67:96:c4:57:2c:12:53:
fc:76:9c:2c:36:d3:b1:c4:de:53:ee:25:6d:e4:a1:7c:4f:68:
44:8b:0d:31:0a:07:30:b2:fa:00:75:de:90:54:ed:cb:64:69:
4a:71:0c:b7:c6:df:5f:b8:27:d8:29:b6:dd:ae:2b:1c:81:11:
a8:bb:ab:ab:88:eb:e3:72:a3:e2:bc:38:a3:7c:b9:66:b5:54:
43:02:05:79:f1:3a:48:5b:1e:9f:77:a7:7b:c3:df:bd:20:7a:
d1:95:9d:69:3c:1e:b7:95:5d:27:81:7a:37:c1:15:d2:45:e6:
79:22:90:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 5 11:54:29 2025 by rpki-client