Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/Zq9Gq4UpSG4_xMuhuL3rNMR3SZ4.roa
File: Zq9Gq4UpSG4_xMuhuL3rNMR3SZ4.roa (raw, json)
Hash identifier: hEKhia9nh/JroiHCdqMtvx0Dyj7OsOe5+QWGTrB/LQ0=
Subject key identifier: 66:AF:46:AB:85:29:48:6E:3F:C4:CB:A1:B8:BD:EB:34:C4:77:49:9E
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0185D24E811E6ECC1D28F29A7CFDE909F246
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/Zq9Gq4UpSG4_xMuhuL3rNMR3SZ4.roa
Signing time: Sat 21 Jan 2023 03:10:38 +0000
ROA not before: Sat 21 Jan 2023 03:10:38 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:d2:4e:81:1e:6e:cc:1d:28:f2:9a:7c:fd:e9:09:f2:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Jan 21 03:10:38 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=66af46ab8529486e3fc4cba1b8bdeb34c477499e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:ae:88:16:f0:3f:36:10:d2:d1:7e:50:61:2e:
32:a8:b0:dd:71:2e:3f:e0:61:0d:29:59:ae:6a:44:
9c:ce:74:e2:d5:bf:2c:db:f4:f5:b8:d8:39:7f:51:
e6:54:61:1b:5e:a9:a0:bd:36:83:26:b9:bd:81:ef:
e4:53:92:b3:c5:aa:c7:cd:61:a6:93:40:11:40:c4:
0e:a7:af:92:1c:83:cf:e1:b8:3a:a2:a3:f7:5d:cb:
1f:bf:d5:1e:11:50:d3:7c:01:86:b2:43:f7:db:6c:
be:83:4c:2a:de:0a:1c:e4:76:a7:17:9f:2e:52:dc:
5c:73:3c:36:98:4f:88:e5:44:8c:b2:b3:5e:e6:a8:
ac:f5:98:6e:85:ea:4a:27:a2:ea:ed:57:06:83:89:
94:29:cc:fe:44:de:19:4b:0a:fa:6f:13:05:d0:e5:
b4:6e:5c:27:92:fa:e4:0d:6f:24:1e:5d:23:dc:c4:
63:fb:ae:af:5a:05:d7:91:ac:89:c7:2a:a3:bb:ac:
ab:81:0e:b8:51:a2:0a:14:c6:e7:65:71:8c:30:36:
54:de:d1:dc:d6:cd:ac:d6:9b:63:4a:a8:e0:26:1d:
fb:cf:6b:33:57:36:c9:9c:f7:20:3d:4e:a4:06:5b:
8d:39:fa:5e:59:46:00:be:46:85:17:95:bd:da:93:
d3:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:AF:46:AB:85:29:48:6E:3F:C4:CB:A1:B8:BD:EB:34:C4:77:49:9E
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/Zq9Gq4UpSG4_xMuhuL3rNMR3SZ4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
2a:33:a9:32:4f:c8:da:4d:4e:fc:d0:46:91:65:2c:c3:5e:67:
83:a5:18:76:c6:f3:a2:f9:90:f9:b9:95:af:5a:ec:2a:7c:56:
6e:03:11:db:1e:16:7c:fa:8a:ae:c4:c5:c9:54:28:c9:40:fd:
4c:f2:61:32:a1:f5:07:c1:da:94:e9:fc:65:66:d8:7b:bb:96:
ad:33:22:e3:77:b3:b9:1f:13:d2:af:c9:d5:dd:3a:bc:75:c4:
dd:b6:f4:c1:ca:05:2f:78:22:e1:78:51:70:2d:b8:a8:0d:d1:
a3:f1:9f:43:fe:80:3f:6b:f8:27:c6:99:a6:76:80:f4:75:0a:
4d:a3:65:da:e4:96:a8:d0:44:bb:98:7d:10:d0:76:04:2b:ef:
9d:ec:37:d5:55:b1:9c:bb:34:e6:2e:19:d1:3a:92:cb:22:c1:
c7:23:07:db:2f:a6:aa:4e:2a:3d:b9:56:5c:04:8f:fc:ae:cb:
85:cf:d2:77:8a:12:a7:54:6f:60:fd:94:7a:72:a4:a4:ac:ad:
55:79:58:0c:29:82:44:24:ad:7c:cf:a9:46:43:80:7c:cf:cb:
21:5a:e5:73:d0:eb:be:4d:a6:e5:dc:7e:27:06:0a:37:0e:87:
b2:48:8e:c9:5c:4f:e4:75:34:a5:88:9d:05:25:46:28:a4:49:
5a:2a:6e:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 07:38:40 2025 by rpki-client