Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/ZlfDj9f1ikXPG_Lr1XXuebXe9eQ.roa
File: ZlfDj9f1ikXPG_Lr1XXuebXe9eQ.roa (raw, json)
Hash identifier: IL7i9lPPCeiQkE5dto57FkgHsvEhpkYqVGBsN7XNET0=
Subject key identifier: 66:57:C3:8F:D7:F5:8A:45:CF:1B:F2:EB:D5:75:EE:79:B5:DE:F5:E4
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0186F019C9E51C36C6A543E4D06032B2710B
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/ZlfDj9f1ikXPG_Lr1XXuebXe9eQ.roa
Signing time: Fri 17 Mar 2023 15:04:27 +0000
ROA not before: Fri 17 Mar 2023 15:04:27 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:f019:9174/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:f0:19:c9:e5:1c:36:c6:a5:43:e4:d0:60:32:b2:71:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Mar 17 15:04:27 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=6657c38fd7f58a45cf1bf2ebd575ee79b5def5e4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:b6:38:2f:64:f4:af:08:67:fe:3d:53:5e:1a:
9d:7e:04:e1:9d:d9:c6:4e:79:3d:70:2b:c3:4e:04:
55:b3:73:7e:02:07:e1:68:0f:50:ee:e7:7e:82:da:
42:65:61:8f:e8:c2:ed:8b:83:6b:66:7e:82:b3:9a:
0f:f6:56:cc:59:2a:8a:1d:2c:7a:4a:08:d8:62:7e:
d5:92:d3:1a:29:ae:50:1e:9a:a1:c9:f3:9b:cc:cc:
39:f2:30:12:b1:88:0a:e0:4c:4e:5c:e9:97:0f:ea:
17:c5:11:2c:71:71:fb:54:65:be:02:f4:d8:0f:aa:
0e:9b:95:56:91:17:76:70:58:a6:8b:af:9c:11:7a:
5f:2c:99:8b:ae:68:c1:96:91:fb:9e:be:c9:1c:56:
5e:a3:b9:90:9c:67:51:44:7a:da:64:37:f9:38:d5:
23:26:37:a0:66:35:bf:88:13:00:70:9d:df:a9:69:
ba:68:1c:82:25:b5:92:f3:6c:ee:01:d6:51:71:b8:
72:93:d5:ce:51:89:99:83:08:ea:9a:3b:5c:aa:62:
76:13:72:f2:6a:33:e6:48:90:f4:dc:d6:17:05:84:
17:a8:9d:d9:13:c0:9f:2c:35:87:db:38:fc:23:18:
2b:45:d6:e6:4a:67:14:51:a7:e9:f5:d5:a1:b6:c3:
2b:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:57:C3:8F:D7:F5:8A:45:CF:1B:F2:EB:D5:75:EE:79:B5:DE:F5:E4
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/ZlfDj9f1ikXPG_Lr1XXuebXe9eQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
00:6d:da:2c:31:ca:3a:16:45:8d:db:e2:3d:f7:2e:9c:ea:9e:
fb:43:fc:32:f5:20:ae:b9:e0:5f:0e:b5:24:36:39:a6:04:7a:
aa:0c:85:da:40:f0:25:b8:b5:49:f4:75:a3:06:80:41:7c:2d:
f5:93:9f:ae:c7:f7:7f:a4:e8:d8:52:85:3d:e6:c9:0f:af:58:
ba:dc:55:c3:3b:87:7d:08:90:fa:05:56:76:fb:78:64:a4:9d:
11:3c:63:76:47:6f:70:67:7b:c5:8b:fd:b6:5f:5e:1a:fa:8e:
2e:73:08:29:5b:81:01:3b:9f:34:f6:63:74:7a:c5:75:4e:ab:
6b:5a:17:dd:4a:79:cd:03:7d:33:0e:fa:65:10:79:a1:d5:2b:
f5:87:46:7e:52:8e:bc:d4:1a:60:61:13:04:f2:e4:14:9c:3c:
67:5d:1d:95:75:2f:34:80:f2:a1:14:e7:40:b6:dc:ca:e3:20:
fe:10:ef:fc:e1:0e:1d:c3:63:8e:d6:c2:6b:c2:9d:99:ae:35:
19:4c:e2:35:b5:bb:30:1d:fe:50:17:a6:1b:92:88:3f:71:ab:
0e:d0:58:03:da:00:72:8c:e7:5a:e4:44:0a:95:40:43:7e:dc:
f9:6f:36:71:77:af:21:57:25:6b:6d:5f:d5:b5:d9:2c:9e:49:
5c:47:47:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 17:32:09 2025 by rpki-client