Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/Zzmx83MimE1vgPSp4RjVaiW4g1M.roa
File: Zzmx83MimE1vgPSp4RjVaiW4g1M.roa (raw, json)
Hash identifier: K7sjd3HC0DUH+3XVOpe1Px7wtSX81o2BiJsC5JZ7oH4=
Subject key identifier: 67:39:B1:F3:73:22:98:4D:6F:80:F4:A9:E1:18:D5:6A:25:B8:83:53
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 6CA41A1C
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/Zzmx83MimE1vgPSp4RjVaiW4g1M.roa
Signing time: Tue 22 Feb 2022 00:08:18 +0000
ROA not before: Tue 22 Feb 2022 00:08:18 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:17f:1bf4:40b5/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1822693916 (0x6ca41a1c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Feb 22 00:08:18 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=6739b1f37322984d6f80f4a9e118d56a25b88353
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:5b:e3:e9:96:01:09:c8:33:ee:b1:21:e0:3f:
fd:36:7e:c7:34:44:60:e5:9f:3c:7e:a7:08:95:2c:
09:e0:b8:11:2f:35:e2:b5:ce:fe:c7:e2:6b:d2:a2:
09:c7:cd:7d:58:73:e4:58:43:12:63:29:50:d0:d3:
74:b1:3d:77:78:9e:a9:ce:df:6b:a1:9c:21:f0:50:
12:5f:64:c1:b2:c8:fb:1a:0a:02:3e:00:3f:a3:ac:
88:f9:99:3d:28:09:d0:9b:5f:5f:8b:2d:26:8a:d1:
6a:98:2f:f6:d3:bf:16:81:9a:99:fb:3f:bd:fc:5d:
a9:42:2f:c4:9f:09:9b:36:36:f6:8e:3e:d7:77:d2:
14:44:cf:c7:a0:1b:1b:74:2d:06:0d:bc:0c:c3:4b:
1d:f1:a0:64:c2:d0:e7:e5:e6:de:fa:f4:b7:1e:07:
8f:13:cb:e2:90:02:af:a2:d8:d7:65:ec:49:b0:6f:
a5:cb:aa:06:3f:1b:6f:77:af:c6:16:49:5e:78:60:
63:31:80:56:c9:71:ab:4b:92:e4:40:88:0f:91:e5:
f2:33:fd:66:8e:99:90:0a:b4:5d:64:ed:22:c3:c7:
e6:b0:65:76:9f:11:c2:2a:7a:df:b7:e9:ae:9c:2a:
a1:2c:12:38:6a:fc:7b:5e:a9:92:56:23:5e:4a:f1:
ae:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:39:B1:F3:73:22:98:4D:6F:80:F4:A9:E1:18:D5:6A:25:B8:83:53
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/Zzmx83MimE1vgPSp4RjVaiW4g1M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
0f:0b:59:aa:eb:4d:44:da:5b:59:53:15:72:94:70:9c:88:66:
ea:ed:53:5b:24:b6:b2:7c:5a:27:30:e2:2e:d5:e8:c5:58:e9:
56:d5:fd:b8:0c:00:07:92:66:eb:f6:1b:23:e3:90:5c:93:92:
5d:c0:23:eb:ed:5b:65:9d:b4:61:46:23:20:dc:41:ba:6c:e9:
f8:c6:d5:f5:c5:fe:4e:e0:8d:e9:29:bf:4b:7e:38:15:70:85:
56:ce:99:f2:3e:09:a2:d1:62:f3:17:c9:c3:2d:4a:19:a5:c9:
18:5f:37:53:ce:d6:c0:7c:6f:b9:d9:3a:37:85:04:df:7e:56:
61:73:52:c4:73:3e:b0:f1:98:3e:bf:c4:eb:72:46:7f:40:e3:
e0:a5:93:28:dc:f0:b4:6e:80:62:57:95:aa:5d:83:9e:6f:4f:
cb:c6:7c:11:1c:5d:68:a9:e5:71:10:12:66:19:c0:95:96:2a:
c1:68:7b:2c:b8:17:db:06:68:0c:93:02:ca:3e:35:a2:a9:00:
7e:c4:07:11:cf:a1:9c:41:6d:61:e9:21:2e:c5:71:f6:aa:7b:
5a:13:07:25:c5:3e:b7:9c:17:a6:3e:f4:ab:d7:af:c3:a5:42:
9f:84:0d:c7:31:43:df:25:56:e5:34:9a:7b:26:4e:40:dd:f8:
7e:67:aa:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 3 04:11:10 2025 by rpki-client