Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/ZvJk2pmwvxE6UKKFi_FOT5ziKUo.roa
File: ZvJk2pmwvxE6UKKFi_FOT5ziKUo.roa (raw, json)
Hash identifier: 6jrqVRWHIbUBMP6cVmAMsQa+jZrIkpqBkLU02CBo9Fw=
Subject key identifier: 66:F2:64:DA:99:B0:BF:11:3A:50:A2:85:8B:F1:4E:4F:9C:E2:29:4A
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 6F1D726F
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/ZvJk2pmwvxE6UKKFi_FOT5ziKUo.roa
Signing time: Wed 02 Mar 2022 18:09:45 +0000
ROA not before: Wed 02 Mar 2022 18:09:45 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:17f:1bf4:40b5/128 maxlen: 128
2001:67c:64:ffff:0:17f:20ac:a2bd/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1864200815 (0x6f1d726f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Mar 2 18:09:45 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=66f264da99b0bf113a50a2858bf14e4f9ce2294a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:0f:87:c0:ff:37:83:79:8d:96:87:b5:86:8f:
77:1b:92:3f:3b:7f:df:a1:3b:00:f7:a3:c6:41:09:
c6:2b:c5:b5:c5:1d:1f:e1:6c:35:a6:fb:e6:a0:5f:
ce:69:24:65:e8:93:3a:f9:65:b1:4c:d1:9f:2a:fe:
e7:66:85:8b:d2:65:d2:03:c3:6e:ab:f7:f5:50:86:
4d:d1:89:fb:58:28:49:e0:bb:71:00:1a:31:a8:14:
e5:ed:7d:5e:82:00:71:ce:18:24:e7:72:ee:e4:72:
28:59:7b:6f:12:7b:44:7e:16:6f:fa:a1:3f:6b:e5:
92:70:f9:6d:f9:59:cb:39:74:f5:d9:18:1f:10:e4:
f8:7e:c0:67:1f:68:75:fd:7f:38:79:04:61:40:ec:
87:bd:c7:42:92:b5:6d:61:0a:65:90:57:2e:67:0b:
a3:4a:d8:fd:b5:2b:48:bf:47:8c:2b:88:38:82:41:
f8:45:e7:93:6a:de:a0:e6:16:24:9e:0d:ff:a6:87:
fd:c7:9a:82:50:73:4e:e2:c6:33:b3:94:81:26:52:
67:b9:1d:d9:91:5d:6f:27:ed:ae:ec:45:cc:d7:e9:
e5:d6:62:75:6c:45:08:e5:2f:b1:f1:3d:09:ce:fb:
1b:9f:ab:a0:e8:78:92:a6:cd:30:3d:a9:e7:1b:b8:
16:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:F2:64:DA:99:B0:BF:11:3A:50:A2:85:8B:F1:4E:4F:9C:E2:29:4A
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/ZvJk2pmwvxE6UKKFi_FOT5ziKUo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
29:b4:58:e2:ec:6e:d6:ea:a6:8d:1d:88:cd:02:51:19:22:85:
79:80:59:14:e8:ba:22:48:25:55:4f:a8:d7:e9:2c:3c:df:13:
5c:ab:25:1a:4b:c6:e5:6a:cd:b0:ae:13:ca:09:b5:cd:02:e8:
8b:e6:e5:32:61:d3:f7:6e:01:c6:81:3b:d7:86:75:b2:4a:3c:
54:b7:e5:d4:c6:a7:04:4e:67:30:72:45:68:ea:a9:9f:16:dc:
38:cc:15:ab:98:9b:84:2e:37:f5:9d:d2:bb:7d:4c:4f:42:c4:
4e:e5:7e:96:93:17:bf:9f:aa:63:05:16:ff:98:6e:8c:a3:8a:
38:11:0a:e3:e3:c9:c0:40:64:cc:8a:f0:d6:1d:1d:98:89:d0:
ef:d8:c9:7c:a1:ba:6e:a1:d5:92:f7:59:a6:9b:39:90:19:7a:
63:b9:5c:92:75:51:8d:d8:ce:8b:c9:af:56:e3:e4:cb:60:cf:
f8:f7:ca:22:dc:ad:19:36:8e:3c:92:24:80:99:ae:02:5f:54:
53:33:71:54:f8:62:d4:0f:c1:7b:57:a7:42:ef:0b:28:8a:59:
18:e1:d1:b7:31:1c:a3:e0:be:d5:d3:0f:1a:8c:8a:56:cd:8b:
dd:7a:2c:b2:67:0d:85:12:78:78:95:d9:71:fa:12:1c:0b:5a:
a9:47:63:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 21:14:05 2025 by rpki-client