Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/Zt9kXyR7OjS5NXTDfjFIYUr5A6I.roa
File: Zt9kXyR7OjS5NXTDfjFIYUr5A6I.roa (raw, json)
Hash identifier: uiwtE3E5qJaEIJX8VWYUX5zPuiJ7V3DWs+xpdXcRLoM=
Subject key identifier: 66:DF:64:5F:24:7B:3A:34:B9:35:74:C3:7E:31:48:61:4A:F9:03:A2
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 8B693DA0
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/Zt9kXyR7OjS5NXTDfjFIYUr5A6I.roa
Signing time: Thu 09 Jun 2022 23:09:04 +0000
ROA not before: Thu 09 Jun 2022 23:09:04 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:181:22f:7a99/128 maxlen: 128
2001:67c:64:ffff:0:181:477e:58d8/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2338930080 (0x8b693da0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Jun 9 23:09:04 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=66df645f247b3a34b93574c37e3148614af903a2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:e5:ab:60:65:a2:98:4f:de:40:64:10:d2:c2:
3b:5f:09:b1:61:c0:30:08:8d:72:4b:cf:b9:87:08:
42:f0:8d:b0:09:48:dd:04:08:20:9f:00:5e:76:69:
6b:43:43:b0:36:f3:19:15:cc:02:c8:11:82:db:d2:
8f:46:42:ff:ca:99:c6:57:30:45:4f:fc:5a:e6:11:
49:ad:2c:b3:02:78:91:3f:f3:bd:4e:9b:1e:06:af:
86:c2:2e:4d:21:c9:08:29:48:fb:7f:c5:71:07:1e:
89:4a:e0:ca:91:90:d8:c6:09:21:b9:d5:de:b8:af:
b3:66:be:d3:9a:59:80:a2:33:38:64:cb:40:d3:dc:
18:10:98:78:27:1d:89:ce:c4:2d:b9:2b:95:b8:97:
e7:35:a7:df:98:fd:80:95:5e:ac:7b:89:3d:78:31:
77:5a:6c:de:89:be:51:91:5d:77:d9:bf:51:fe:d1:
7f:7b:e4:ff:69:f3:23:84:6b:36:c0:3e:c0:33:f2:
6f:e9:77:79:4a:d0:a4:fc:93:d0:cc:52:c8:7d:4e:
dc:94:b7:6c:f3:e6:04:75:f3:78:71:63:d3:70:79:
c2:d8:b4:7d:b0:e7:fb:ad:18:3d:b0:54:e3:d1:bc:
70:42:53:4b:bb:12:f7:06:c6:12:8a:38:38:9d:36:
73:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:DF:64:5F:24:7B:3A:34:B9:35:74:C3:7E:31:48:61:4A:F9:03:A2
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/Zt9kXyR7OjS5NXTDfjFIYUr5A6I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
22:5d:6c:0a:8a:87:4d:53:da:de:8a:e0:73:21:f5:62:45:4f:
0c:7e:8f:d3:26:73:92:b6:07:8d:f3:13:21:4e:b7:71:f1:8a:
e2:cf:0e:39:b1:3c:18:95:f0:68:3d:8a:1c:80:9d:44:2c:39:
52:b9:3d:03:6d:62:29:ea:ec:0d:f5:7d:c6:05:78:df:65:55:
77:56:d7:5f:64:1a:56:cb:12:bb:46:4a:7f:ca:42:a1:a9:64:
b3:52:a8:10:11:3d:df:fd:74:28:9b:83:26:1a:7a:f1:d9:fa:
1e:02:81:c9:74:c9:74:7a:b4:5c:9f:48:76:06:b6:06:27:70:
dd:64:5f:b8:9e:76:44:8b:fe:27:9d:d5:11:74:58:f7:1e:dc:
f9:e6:93:c1:da:af:f3:36:3b:3c:6e:95:ae:e2:c1:5d:08:5c:
52:fe:a7:40:51:37:ef:7f:a7:92:67:29:e3:5f:eb:33:e3:59:
88:ff:63:98:c6:c6:26:3e:b3:6c:37:bb:e7:3e:3e:a7:bd:e9:
3a:27:ac:af:62:7e:2a:ec:c0:b9:23:21:89:06:84:2b:5c:1f:
40:2d:25:48:b5:57:01:d8:8f:8c:72:af:c4:80:99:41:5c:e8:
d2:58:ed:aa:ea:5e:a1:d3:ff:6f:8d:03:52:57:86:03:67:19:
76:d6:f9:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 06:32:04 2025 by rpki-client