Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/_pz_Z8fsVaBrYVfHb7pRj-09U8U.roa
File: _pz_Z8fsVaBrYVfHb7pRj-09U8U.roa (raw, json)
Hash identifier: ImwfdJ0EH3EMOmbRSEHAFOfTujKC0smTY8pej4tX4MU=
Subject key identifier: FE:9C:FF:67:C7:EC:55:A0:6B:61:57:C7:6F:BA:51:8F:ED:3D:53:C5
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 01872637AFE4F89A8C6910366B5171A1B2A1
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/_pz_Z8fsVaBrYVfHb7pRj-09U8U.roa
Signing time: Tue 28 Mar 2023 03:16:36 +0000
ROA not before: Tue 28 Mar 2023 03:16:36 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:26:37:af:e4:f8:9a:8c:69:10:36:6b:51:71:a1:b2:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Mar 28 03:16:36 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=fe9cff67c7ec55a06b6157c76fba518fed3d53c5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:52:53:85:2d:0a:ef:86:f9:48:f0:53:cc:2b:
cb:a7:05:fc:ec:dc:23:8c:33:99:a7:49:0e:f6:e6:
3b:59:88:cc:02:f4:8e:d1:ac:4b:92:09:f8:5b:da:
56:7f:c5:ba:4a:89:99:fe:19:57:42:cb:22:b8:ba:
58:1c:7c:7f:bb:51:19:c0:c2:f5:1e:b9:0b:70:33:
02:50:23:33:fb:5c:25:18:70:df:52:86:bb:96:51:
b3:fe:06:b8:a5:c4:0a:ae:23:df:2d:c5:23:67:2e:
f5:af:47:3b:d6:79:03:1e:c3:98:be:10:fd:40:f2:
ca:b2:49:0c:13:a7:af:2f:be:ab:5a:fd:92:6f:90:
e2:50:18:e1:bf:10:ea:58:98:a4:7e:f4:aa:1a:de:
df:12:7b:2e:95:12:8f:b8:34:5f:7e:7a:fa:7c:41:
e2:76:cc:bf:6d:83:90:34:c3:0d:b5:74:27:d9:6c:
0c:64:30:a1:25:a5:f6:b4:4d:a8:78:84:2a:d8:d2:
82:93:52:51:ef:22:4f:48:96:0d:4b:d5:eb:10:c6:
52:84:a7:43:4e:df:57:48:66:5f:e2:92:74:67:1a:
5c:f9:73:fb:05:a1:6d:c6:51:ce:34:a3:7c:e9:8c:
63:ae:e5:7a:f1:21:5e:65:9d:0c:1a:e4:1b:52:8c:
cb:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:9C:FF:67:C7:EC:55:A0:6B:61:57:C7:6F:BA:51:8F:ED:3D:53:C5
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/_pz_Z8fsVaBrYVfHb7pRj-09U8U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
1a:80:69:ee:5a:48:62:5e:8b:d1:fd:d9:15:1c:de:53:6f:fd:
ef:2e:ce:40:3d:6a:37:54:7e:39:44:f8:22:90:84:69:1b:3d:
fb:4a:bd:ee:d7:07:56:06:9a:ad:c6:9f:7d:2b:13:dc:18:27:
1a:69:37:5c:60:ca:39:1a:09:e2:b4:3c:8b:5e:d9:14:8c:32:
74:91:77:f6:12:57:39:a2:67:7e:af:2c:72:a8:dc:f8:9a:b1:
c9:e9:59:af:de:ca:f3:cd:a0:a0:59:1a:d4:20:d4:a5:a1:ea:
47:80:05:02:98:3e:3f:51:99:c4:e3:e4:3c:91:ec:39:34:b2:
b6:4f:02:12:1e:f7:2f:fa:98:8c:36:cb:d6:45:4c:2c:92:41:
bf:f2:33:d3:cd:25:2f:82:13:db:a8:42:ec:cd:30:2d:d0:3c:
f3:c7:70:0d:f9:2b:7d:de:40:53:89:ce:52:b4:70:f8:2c:2e:
9c:17:76:25:23:bc:c6:e6:a6:b6:14:e9:83:b6:ac:be:09:37:
88:79:b7:c8:74:9c:cb:3a:5b:04:59:f2:79:fc:99:a8:60:9e:
99:f7:31:01:cc:88:f0:b3:fc:77:4c:0b:59:32:e4:13:74:24:
ce:f9:2e:7c:c7:46:64:07:ab:99:df:19:69:4b:f1:4d:0e:81:
cf:87:f2:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 2 01:16:47 2025 by rpki-client