Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/ZyHTV6r2DxWxoI2fyfh1CIppQKI.roa
File: ZyHTV6r2DxWxoI2fyfh1CIppQKI.roa (raw, json)
Hash identifier: VyBgKjgSIaox9aytT1TiGgOp67Ued+VNxyVz48E4tdM=
Subject key identifier: 67:21:D3:57:AA:F6:0F:15:B1:A0:8D:9F:C9:F8:75:08:8A:69:40:A2
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 916B647B
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/ZyHTV6r2DxWxoI2fyfh1CIppQKI.roa
Signing time: Fri 01 Jul 2022 08:11:02 +0000
ROA not before: Fri 01 Jul 2022 08:11:02 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2439734395 (0x916b647b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Jul 1 08:11:02 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=6721d357aaf60f15b1a08d9fc9f875088a6940a2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:42:40:05:2f:49:e8:79:7d:9e:e4:96:46:b3:
5f:02:35:47:1c:3a:ed:1c:d6:53:4b:80:8a:98:09:
11:48:9e:ae:21:8c:d4:39:8a:2d:5f:85:7c:fc:b4:
5e:a4:56:1b:96:f9:b9:3a:14:d7:c4:3c:6b:62:56:
b6:0f:58:54:06:ce:56:6a:56:b4:9f:ef:c2:4e:f2:
72:a3:f0:df:80:2d:ad:22:43:eb:08:83:df:e3:fd:
dc:20:0b:19:a4:da:55:a4:86:97:52:6e:12:1a:b3:
4e:e8:be:aa:3b:ca:ab:77:b4:a6:c3:e4:f9:5f:ec:
01:4b:3f:a0:c7:cf:50:37:01:ab:6e:36:7c:f5:ad:
d3:5f:65:37:68:1b:92:d8:a1:85:94:ff:0b:30:48:
ff:39:9f:1b:93:8e:cb:45:2b:bb:ec:1b:16:a1:27:
7d:88:b4:8a:6b:fd:d5:4c:52:47:ec:b3:99:fb:d8:
dd:2e:24:15:26:92:d0:70:df:be:70:d7:4b:c3:17:
81:69:7f:f1:dc:aa:b5:21:fd:0b:ae:d0:67:6f:dd:
78:b9:d9:af:6d:91:b5:6e:57:31:b2:47:e6:c8:54:
b5:1f:93:06:f0:02:49:68:65:a8:8c:c3:57:ff:fc:
37:49:3b:be:4e:2c:70:98:17:b7:51:42:53:5f:a9:
fa:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:21:D3:57:AA:F6:0F:15:B1:A0:8D:9F:C9:F8:75:08:8A:69:40:A2
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/ZyHTV6r2DxWxoI2fyfh1CIppQKI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
2c:83:d7:1d:a5:fb:1d:2e:d3:6f:af:58:f5:df:f9:65:d8:39:
78:09:d9:3d:1b:5f:71:82:bd:ca:ec:59:99:e4:b8:d6:bd:8b:
15:c5:f8:48:28:12:02:f0:fc:02:2d:f4:04:58:4d:5f:7f:9c:
e1:3d:2f:dd:3a:be:31:9f:12:9c:73:02:cb:e6:18:8c:5e:ca:
1a:05:d1:67:1b:78:9a:5f:04:32:5d:3b:6e:f2:fa:bf:83:1c:
3d:01:44:71:5f:98:71:a0:79:2b:19:ea:f2:ee:b5:8d:55:9b:
c2:e3:52:2b:a7:c1:05:e8:a8:3e:f9:68:1e:ad:fb:96:46:22:
2e:fb:83:6d:58:9a:3e:85:88:cd:24:30:92:2d:a0:96:2f:b1:
63:02:d7:85:7e:49:03:7a:fa:c7:35:13:30:6c:6c:3a:37:92:
18:9c:a3:b1:a8:72:f0:86:0d:26:be:12:cb:49:cf:a3:d1:ba:
60:9f:89:54:25:7d:bd:2a:9c:5b:75:fe:5e:5f:83:7e:79:c7:
5f:a7:77:7d:d9:35:73:f6:53:e1:2c:b0:6b:da:2f:cd:05:77:
ae:ec:87:3c:eb:0b:27:e8:e4:24:e9:71:33:49:0f:12:16:c1:
2e:d6:d1:35:9c:c2:b8:56:f6:6f:c7:74:db:be:02:d4:0b:3c:
69:c4:fc:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 18:45:09 2025 by rpki-client