Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/ZxftrKycN7Y1E8Auv5Bpcz6RM9U.roa
File: ZxftrKycN7Y1E8Auv5Bpcz6RM9U.roa (raw, json)
Hash identifier: MrhOHvrbqymOxGPLPVJ6WD7ZSxdlP82EqfTrC8bH098=
Subject key identifier: 67:17:ED:AC:AC:9C:37:B6:35:13:C0:2E:BF:90:69:73:3E:91:33:D5
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 686BBF60
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/ZxftrKycN7Y1E8Auv5Bpcz6RM9U.roa
Signing time: Sun 06 Feb 2022 12:08:48 +0000
ROA not before: Sun 06 Feb 2022 12:08:48 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:17e:a0dd:2f5b/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1751891808 (0x686bbf60)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Feb 6 12:08:48 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=6717edacac9c37b63513c02ebf9069733e9133d5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:2e:d8:16:8f:e2:d2:49:c3:a4:f2:3f:0f:e5:
ff:48:dd:2c:81:94:9d:7f:8c:10:41:3c:a6:10:a1:
de:29:54:51:3b:cc:a9:84:70:92:cb:7e:d4:c8:0a:
6b:28:d2:b8:73:01:71:24:e2:95:df:81:c6:6a:ef:
8a:b5:f0:e7:ac:8e:fa:36:1e:93:2d:74:57:61:cb:
f2:6f:ac:49:5a:1f:32:0e:51:14:41:27:44:5c:08:
b1:35:5b:92:83:ca:42:31:4e:b5:09:8e:4d:8c:d5:
1f:b6:68:b6:34:34:1d:14:77:dd:0a:60:8c:45:66:
c5:bd:2e:76:e6:d8:27:98:78:b4:64:aa:c7:b3:14:
3e:cb:bc:b3:6b:34:d6:00:30:bb:fa:4d:75:53:db:
2e:70:1a:e0:43:c6:95:2b:cc:02:b8:a3:72:49:38:
c8:ae:32:d8:8b:6d:b1:3f:d7:7c:8a:e4:58:66:42:
23:6a:05:d1:93:ed:d6:19:66:6d:35:7e:76:07:1e:
9d:9c:86:c1:94:74:63:07:e8:e7:ff:ad:5a:fe:4b:
5e:f0:dd:c2:8d:ae:a7:33:d3:39:c9:aa:c8:90:07:
7c:8f:20:98:e8:1e:83:0c:6f:26:e7:02:e8:b9:7d:
f2:c8:6e:b4:9e:0a:18:5a:d6:db:75:1c:9b:ab:89:
b4:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:17:ED:AC:AC:9C:37:B6:35:13:C0:2E:BF:90:69:73:3E:91:33:D5
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/ZxftrKycN7Y1E8Auv5Bpcz6RM9U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
74:a0:65:57:f5:06:28:07:fa:d0:a0:5d:7a:f4:99:9b:4f:be:
0e:38:55:25:c2:09:23:99:de:3b:61:d5:b8:65:14:c1:4c:11:
bc:3d:4a:ff:da:c9:ba:7f:55:28:a9:72:54:4d:34:34:d1:17:
19:d5:1c:7b:fb:a4:99:a0:d7:c1:dd:90:b3:98:f7:a6:4f:e4:
67:3b:ad:43:08:42:a5:d4:08:6b:07:77:8c:1f:a8:1b:c7:3c:
da:6c:13:b4:83:8f:d3:6a:05:84:9f:ee:68:d2:8e:ca:d4:79:
c5:36:b9:6e:29:0c:2b:d9:fe:00:12:fd:d1:56:ce:71:e1:67:
fe:b3:72:c3:18:11:9c:06:93:81:be:3b:ca:ea:dc:39:eb:2f:
71:04:94:4a:cf:05:45:8b:41:c7:2d:10:ce:bc:cd:ee:52:ec:
df:bf:e7:a1:fa:24:0f:53:f8:9e:b5:fe:69:d1:c1:35:aa:9f:
c6:9a:f6:a1:51:26:0a:e3:0d:04:36:23:60:27:6b:14:3e:7d:
4c:ce:ae:82:69:1d:e5:79:04:61:3a:72:cb:8c:5d:4e:e5:e9:
91:7e:b8:46:d1:ac:ba:b7:e1:07:ad:99:fe:72:ef:e0:c1:35:
49:f9:79:d3:8a:af:02:ed:66:ea:09:9a:51:97:cd:b9:20:80:
6b:6f:71:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 4 12:40:57 2025 by rpki-client