Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/ZjXueZgnrTBDze0cRjVu2eJfUS8.roa
File: ZjXueZgnrTBDze0cRjVu2eJfUS8.roa (raw, json)
Hash identifier: e9GnNeD6pzr6s7DWUNON9UBMQ7blx7N8ndK45uAGez4=
Subject key identifier: 66:35:EE:79:98:27:AD:30:43:CD:ED:1C:46:35:6E:D9:E2:5F:51:2F
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0187003AD101C8C1AD088AC549DB316675B2
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/ZjXueZgnrTBDze0cRjVu2eJfUS8.roa
Signing time: Mon 20 Mar 2023 18:14:27 +0000
ROA not before: Mon 20 Mar 2023 18:14:27 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:00:3a:d1:01:c8:c1:ad:08:8a:c5:49:db:31:66:75:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Mar 20 18:14:27 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=6635ee799827ad3043cded1c46356ed9e25f512f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:2d:90:be:56:06:fa:b1:df:c1:93:cd:e8:d8:
1f:e7:42:6f:64:02:90:f6:f2:ce:b8:50:c9:a9:24:
e5:c5:9b:57:aa:df:75:b9:68:61:4d:b5:0c:85:80:
71:ce:6d:d8:07:33:8a:b2:f8:2b:81:a0:70:00:f8:
5d:b7:b2:3d:18:4d:da:44:d5:ad:d3:24:94:bf:da:
d3:4e:c4:8a:38:68:87:44:3a:0c:ad:12:ea:46:5a:
25:df:dc:9f:4a:66:a4:33:d9:bf:d2:77:0a:c2:ec:
ad:41:34:0c:d4:f5:6d:91:41:5e:f8:10:aa:34:4a:
95:0c:3b:64:f3:5a:88:32:29:9c:90:d9:70:ff:3c:
12:2c:9d:6c:9b:25:cb:f5:bd:60:35:46:37:cb:c2:
3a:aa:cd:57:dc:14:f0:ae:2e:96:b4:da:c5:88:08:
2f:f7:66:2a:61:c3:04:85:5d:23:ae:bb:19:60:e6:
6f:e7:10:52:aa:46:b4:ba:b4:39:be:6f:53:92:f0:
79:8c:db:34:43:94:dd:c6:fb:4d:93:1a:cd:20:b0:
1c:b4:a5:c8:60:28:2f:55:db:9c:da:50:30:19:f7:
12:6a:ea:f3:bc:83:44:6b:e9:c6:d7:54:19:11:95:
53:ef:e6:53:0f:71:0a:70:cf:b7:73:eb:6a:13:ac:
12:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:35:EE:79:98:27:AD:30:43:CD:ED:1C:46:35:6E:D9:E2:5F:51:2F
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/ZjXueZgnrTBDze0cRjVu2eJfUS8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
7e:2a:85:90:46:2c:c1:34:b5:90:02:59:cd:ea:e0:e7:d0:28:
33:8c:1c:e4:ae:f4:a9:71:df:a8:dd:28:d1:5b:ad:d7:a2:65:
c1:7c:cc:4c:65:de:f3:f8:7e:90:d3:db:81:e0:9a:cc:7d:1d:
6e:12:e2:0f:7f:9f:e3:6f:52:10:ca:4f:24:d6:34:15:8a:b6:
3c:89:af:c8:ac:0d:6a:42:35:2d:7c:1e:3c:cb:2f:12:45:24:
b2:ce:27:81:16:a9:86:00:da:67:ba:cd:f7:9b:b2:a7:b8:d2:
f6:63:8c:5b:8c:7d:b1:7d:b4:45:bf:89:d5:56:85:4b:5e:51:
c5:ee:4a:62:b0:45:ac:a8:85:3c:02:ab:a2:1a:d8:16:25:1f:
57:1a:8f:1f:79:16:09:0c:d3:bd:2d:7f:31:82:8e:06:8c:1f:
a6:48:ec:35:09:09:28:03:0b:fd:df:83:b1:44:fb:10:86:6e:
6e:73:5f:90:bb:57:08:8f:ee:d5:01:db:79:ca:8b:ad:b6:d5:
38:14:50:e4:a1:e6:e9:2c:f6:92:77:99:42:b4:5b:72:a0:2b:
db:1c:42:e3:19:98:1e:9e:ac:5e:ce:85:c4:82:84:22:fe:44:
19:7d:0a:cd:75:cc:5d:f9:6c:97:d5:c1:70:35:8e:44:c7:0d:
60:03:45:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 17:34:09 2025 by rpki-client