Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/ZiQa9dYbgY6MeSMGVBGmAgXukFM.roa
File: ZiQa9dYbgY6MeSMGVBGmAgXukFM.roa (raw, json)
Hash identifier: hlrLt7bg/U3svUM5K0j2z+A06x4yMW+89pxq8CwHgmY=
Subject key identifier: 66:24:1A:F5:D6:1B:81:8E:8C:79:23:06:54:11:A6:02:05:EE:90:53
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0186ADDA285533162C36D33B3BAA65A21F48
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/ZiQa9dYbgY6MeSMGVBGmAgXukFM.roa
Signing time: Sat 04 Mar 2023 18:20:00 +0000
ROA not before: Sat 04 Mar 2023 18:20:00 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:ad:da:28:55:33:16:2c:36:d3:3b:3b:aa:65:a2:1f:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Mar 4 18:20:00 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=66241af5d61b818e8c7923065411a60205ee9053
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:e3:d0:fe:31:95:69:40:52:4f:f2:28:75:79:
97:d4:c4:05:30:26:3d:8b:16:13:9f:3a:be:48:12:
3c:96:72:88:5e:a7:b6:e6:89:69:c4:cb:34:2b:f2:
90:e7:0f:d4:1b:59:d7:98:f0:ec:85:0e:71:63:1c:
b7:50:37:08:a9:27:d8:a5:80:67:33:93:28:c3:06:
50:14:5d:30:cb:6f:9d:e1:87:d2:a2:1b:32:c2:9e:
7b:c2:04:51:70:42:cd:f7:fd:59:4a:fc:8c:20:26:
66:7f:17:6d:65:18:2e:07:58:cb:d7:7c:64:30:9b:
6e:c0:70:ca:b0:25:10:36:33:a8:67:85:4c:98:32:
3d:3b:74:97:93:e9:40:8e:9f:d1:74:7c:0b:12:5e:
46:d2:cf:2f:b6:eb:d3:84:a7:41:35:c3:df:9d:8f:
0b:6a:c3:ab:c8:7c:c1:7e:f9:0f:a2:17:87:6f:dd:
71:72:70:70:dc:9e:04:34:79:71:eb:a7:2f:ba:4d:
07:2f:a2:1a:64:2f:4e:bc:ae:dc:84:2b:f7:39:f9:
6e:d3:63:ea:15:85:65:80:b0:08:45:b1:32:3d:c7:
42:8d:20:28:72:d2:90:2a:1a:5d:6e:83:69:ae:d9:
6a:db:b5:49:fb:c6:18:59:34:6d:1b:6e:45:a6:4b:
a2:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:24:1A:F5:D6:1B:81:8E:8C:79:23:06:54:11:A6:02:05:EE:90:53
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/ZiQa9dYbgY6MeSMGVBGmAgXukFM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
90:56:cf:09:45:82:88:a3:de:8e:ac:bc:76:e3:a1:23:2b:48:
a7:01:04:fa:fb:96:1e:77:d0:a1:06:62:fc:54:1e:9f:f5:53:
b5:6d:2b:c7:2b:7f:cc:20:60:dc:bc:86:f0:75:3e:b1:fd:08:
2a:14:2c:c6:f5:8d:64:90:8b:ad:48:b6:02:f1:61:ae:9f:2d:
de:ab:4f:c4:06:75:ef:c5:b6:db:be:80:29:9f:44:ac:ce:fb:
0e:f1:55:9a:86:1f:0e:f1:85:39:e5:f7:f0:bc:cc:b9:5e:28:
c0:9f:78:b2:de:9b:98:7d:81:0b:30:e2:2b:f6:55:9a:18:0c:
33:e1:d9:63:7a:63:29:18:77:a3:d4:2d:e4:73:0e:96:eb:90:
f1:80:b7:5c:1f:d5:9f:87:d9:66:66:81:c1:69:08:df:00:45:
ba:3a:9c:c6:b1:dd:0f:a0:a1:3f:ba:64:b7:1c:c6:0a:12:c4:
44:b2:9b:bd:4d:d6:07:a3:6c:a1:3a:6e:41:67:b2:97:49:2e:
e9:e6:21:b2:23:92:f0:35:c9:6a:bc:aa:02:66:bb:88:ff:ed:
59:75:b6:0e:89:90:d5:76:83:74:10:59:4b:87:65:c9:97:bc:
24:87:cd:fa:f6:0e:c9:a2:dd:73:78:a4:81:74:44:00:07:bb:
1c:55:d4:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 20:05:58 2025 by rpki-client