Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/ZyPykkxz9mwpI0gijY15LNhNuf8.roa
File: ZyPykkxz9mwpI0gijY15LNhNuf8.roa (raw, json)
Hash identifier: IaaJ09UOSR1OeaKKgYV3rB7uEEraeq0zG/o9pbNOAI8=
Subject key identifier: 67:23:F2:92:4C:73:F6:6C:29:23:48:22:8D:8D:79:2C:D8:4D:B9:FF
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 018676AF7BFE79F5727CCC5F17C68B59C7D3
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/ZyPykkxz9mwpI0gijY15LNhNuf8.roa
Signing time: Wed 22 Feb 2023 01:14:17 +0000
ROA not before: Wed 22 Feb 2023 01:14:17 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:76:af:7b:fe:79:f5:72:7c:cc:5f:17:c6:8b:59:c7:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Feb 22 01:14:17 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=6723f2924c73f66c292348228d8d792cd84db9ff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:86:cc:ee:cc:f4:e9:d3:3d:3c:98:9c:ea:e5:
47:c8:7c:a0:84:05:0c:32:5a:72:b9:a0:b1:11:30:
fb:e3:a8:13:06:32:c4:ac:e8:fc:8f:f8:d9:6f:be:
e0:be:7d:60:8e:41:b4:af:ed:80:56:66:30:34:62:
16:1d:01:6c:ae:d1:12:20:d2:02:1c:b0:e6:c3:72:
ec:7c:fb:bf:3d:4e:83:06:1c:b8:25:32:34:ef:ef:
61:3d:3b:4f:49:21:1b:f1:8c:7f:95:3a:1e:f3:e1:
ac:d0:de:20:4c:a2:a8:83:af:8a:15:e6:79:20:f4:
b5:36:33:42:69:50:d7:42:67:61:3d:c4:8f:e8:aa:
08:11:03:6e:55:73:17:81:af:c6:e3:ec:b2:ea:e3:
13:3c:c1:75:62:6d:27:1b:00:e1:d4:f8:39:e3:da:
42:03:37:94:10:d8:34:30:21:5a:bb:0f:2d:f2:8f:
46:b1:e5:9d:eb:61:d3:21:dc:59:95:2a:5d:2f:43:
a1:95:8f:d1:ae:a7:ea:ff:45:a8:79:b9:93:70:0b:
f8:73:1a:93:74:88:46:dc:2d:2c:74:21:9c:bd:63:
69:2b:9d:af:8b:41:9f:3a:a2:f7:a7:f9:48:e1:99:
2f:cb:00:72:b6:57:fd:48:ad:5c:b9:81:b6:10:a9:
09:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:23:F2:92:4C:73:F6:6C:29:23:48:22:8D:8D:79:2C:D8:4D:B9:FF
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/ZyPykkxz9mwpI0gijY15LNhNuf8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
67:f1:1c:5a:04:b2:72:9a:a1:2d:d0:6b:fe:1e:15:97:c9:d2:
33:6e:ba:40:74:66:7b:e1:97:1c:05:f8:98:31:9a:76:92:ef:
b1:2f:88:79:7e:00:df:be:5e:dd:6f:7b:bb:e0:d8:6d:7a:0c:
20:2b:f1:92:c6:dd:2a:04:1e:3f:33:7c:af:db:75:ab:bb:9f:
15:42:40:ae:2a:b5:88:03:3e:2f:0c:c4:c5:7e:d2:00:77:35:
e8:d8:b6:7b:0f:16:03:bf:c7:11:51:df:7c:00:d1:4d:68:49:
5f:fc:94:3a:a9:dd:10:2a:f1:25:93:b4:b6:0b:0f:43:d1:8f:
ed:9b:55:ea:c8:43:9f:16:e6:05:77:95:6c:52:e9:7f:0d:92:
aa:ef:b6:60:12:f0:d4:32:a3:4f:7d:89:c9:a2:7f:1b:b4:20:
69:a9:cb:03:99:d8:49:0b:c4:76:e8:09:10:87:f0:25:c8:89:
44:0a:e6:b4:b7:2c:35:64:60:23:a9:b2:31:32:0b:69:49:37:
68:c7:7e:94:e4:ef:e8:bc:db:c0:d9:d6:9d:ec:9f:9c:bf:59:
5f:04:a2:94:e8:3e:c1:68:78:df:88:0c:91:21:ce:04:f5:ba:
21:c9:80:a9:1d:da:c1:62:8b:1a:89:6c:bd:73:82:19:88:5e:
44:97:23:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 08:27:36 2025 by rpki-client