Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/ZwstAgEPSq1aDI1146o8-6Ey-78.roa
File: ZwstAgEPSq1aDI1146o8-6Ey-78.roa (raw, json)
Hash identifier: PRERvJ5LrO77yznVxsgl/JDeltkGp4+7OBphtbMqYF8=
Subject key identifier: 67:0B:2D:02:01:0F:4A:AD:5A:0C:8D:75:E3:AA:3C:FB:A1:32:FB:BF
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 6B3C6724
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/ZwstAgEPSq1aDI1146o8-6Ey-78.roa
Signing time: Thu 17 Feb 2022 01:19:19 +0000
ROA not before: Thu 17 Feb 2022 01:19:19 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1799120676 (0x6b3c6724)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Feb 17 01:19:19 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=670b2d02010f4aad5a0c8d75e3aa3cfba132fbbf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:4d:18:9a:a4:d3:ca:a5:61:91:d6:32:3f:2e:
cb:45:cb:36:0d:88:c4:69:1d:1f:03:ca:b4:4f:23:
34:bc:92:64:e1:ab:9d:b5:53:4f:3e:00:40:a6:87:
cd:e8:71:cb:b2:17:4a:d2:66:32:a3:ce:6c:19:c8:
03:b4:0f:f8:53:59:3a:a4:92:34:bb:c3:1d:15:df:
70:14:94:e5:bb:76:07:2e:f4:98:8f:e2:34:f1:89:
fb:83:0d:96:4d:e1:df:1a:ff:16:52:e4:d1:39:e7:
e5:ee:51:33:5e:2b:8c:f1:b6:e3:19:9d:4a:a0:8f:
85:fb:09:91:93:6b:21:85:ea:3b:a1:e9:b5:9c:49:
f6:71:fd:83:db:82:71:f1:f5:dd:ee:72:5a:b1:d4:
de:7f:19:c6:e8:01:7c:64:79:5e:e6:c5:f4:df:b2:
33:4e:89:f5:42:00:1b:78:e1:39:77:a4:03:c2:bf:
6e:ad:75:5d:2c:a6:bb:c0:61:b2:47:68:07:15:e5:
bf:f2:19:71:d1:57:cd:43:63:a0:93:03:38:ce:aa:
22:ef:6f:c7:d6:f4:9a:26:fb:08:c2:dd:27:a5:ed:
d6:92:6f:e2:c2:79:8a:60:6a:11:b0:83:f4:a1:c4:
e4:d0:53:73:f7:6e:2b:62:cb:66:74:16:0c:2d:b7:
06:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:0B:2D:02:01:0F:4A:AD:5A:0C:8D:75:E3:AA:3C:FB:A1:32:FB:BF
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/ZwstAgEPSq1aDI1146o8-6Ey-78.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
96:18:a2:17:cd:d2:22:95:27:24:53:5a:42:e8:fa:c8:25:c0:
45:41:22:ce:4d:73:4a:aa:69:3c:a5:7a:09:de:51:c8:bb:33:
25:ac:45:27:95:e7:44:2c:88:bb:62:58:3c:b2:c8:4a:4d:ea:
80:11:9a:01:bb:24:b6:62:50:71:56:45:48:8c:e1:4d:02:e5:
a8:9a:dc:8b:95:d1:00:01:6d:ef:03:b5:2d:48:0b:e0:17:e7:
19:2b:cb:e8:fa:4a:6e:b0:d5:cc:e0:27:2f:5b:e2:1b:aa:9d:
29:80:09:cb:e0:52:2c:10:a9:53:fc:ff:8a:18:02:67:0f:bf:
bd:d9:4d:22:b6:78:47:ac:09:52:77:78:22:59:c4:e0:49:4e:
ae:a3:1c:48:c0:95:81:81:2b:19:f1:ce:1e:9d:49:d2:cd:f0:
52:75:0e:03:34:40:d2:6b:81:04:a7:88:ea:93:1a:2f:f0:c3:
fc:e1:25:6d:95:04:c5:90:3f:58:65:1a:08:83:10:15:cf:1b:
05:db:8c:ac:f5:2f:8b:7c:67:ad:e7:1b:2d:4e:47:c9:56:f3:
e2:5d:25:45:c0:5c:4f:50:dd:d3:a5:1f:05:94:d1:4b:5b:a6:
fa:09:04:6e:2b:3b:4b:68:81:ec:66:77:92:6f:3a:54:a9:f5:
fb:ef:32:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 03:56:02 2025 by rpki-client