Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/_zOUkgmtSFGefmWevkYyvHuM3SI.roa
File: _zOUkgmtSFGefmWevkYyvHuM3SI.roa (raw, json)
Hash identifier: Ja+WWa6aa2eWI7YbUjwEGYijOHk46WmgeVtgu476dRU=
Subject key identifier: FF:33:94:92:09:AD:48:51:9E:7E:65:9E:BE:46:32:BC:7B:8C:DD:22
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0189EA86A0DA994A72A562D0D5A6710AE40D
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/_zOUkgmtSFGefmWevkYyvHuM3SI.roa
Signing time: Sat 12 Aug 2023 16:13:58 +0000
ROA not before: Sat 12 Aug 2023 16:13:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:188:7858:a003/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:189:a0e4:5c7d/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:ea:86:a0:da:99:4a:72:a5:62:d0:d5:a6:71:0a:e4:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Aug 12 16:13:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=ff33949209ad48519e7e659ebe4632bc7b8cdd22
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:ac:66:3f:06:55:d3:21:7c:f7:04:36:9d:8d:
cc:41:d4:b9:71:4d:ff:09:13:54:9d:90:9c:46:5a:
d7:78:81:80:0f:27:16:94:17:46:ca:fb:6f:58:95:
a3:51:48:51:6a:e9:c5:dc:b2:ca:e6:fe:e8:ba:91:
a3:bb:cb:85:14:e5:bf:c9:97:48:75:e7:20:54:71:
c3:8e:80:b7:65:dc:3e:ff:8c:d3:84:39:32:53:79:
97:14:05:a3:64:8b:e4:4d:9a:db:4e:9d:7c:32:dc:
57:b7:40:a7:64:ea:47:f4:29:c3:7d:00:51:76:95:
b5:48:a2:12:77:66:5c:bf:dd:8c:a3:5a:42:f5:37:
a9:20:39:73:1c:8a:ec:eb:ec:58:8f:d9:9c:9f:d5:
cf:0d:b5:b8:b4:ed:eb:4c:1a:c5:49:89:85:b0:37:
94:cb:6a:b2:55:98:3d:72:e6:fc:dd:1f:c4:de:d7:
c1:09:d9:bd:37:35:2c:fb:46:c1:37:d0:98:a6:7a:
8b:82:ab:71:6c:93:98:61:df:7e:28:36:b2:61:98:
82:f0:79:53:3d:f1:71:7d:76:c6:b5:40:75:43:75:
96:1d:23:49:99:5c:2c:b8:43:ef:99:2b:3e:86:b5:
91:a4:bd:3c:0f:74:59:cd:71:f6:6b:91:e9:53:73:
74:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:33:94:92:09:AD:48:51:9E:7E:65:9E:BE:46:32:BC:7B:8C:DD:22
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/_zOUkgmtSFGefmWevkYyvHuM3SI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
09:2d:c9:20:9c:69:e7:42:16:08:23:44:42:59:da:0e:44:54:
36:84:41:b6:b7:41:83:03:c7:42:bd:6d:8a:4e:f9:67:6b:64:
06:86:fc:df:91:7e:fc:7c:89:e4:e5:54:42:41:b4:47:b7:0e:
fd:53:11:87:3f:c8:68:67:9d:93:28:50:92:fb:df:ff:4e:6a:
77:7b:97:37:72:29:80:fd:65:73:e7:77:83:c9:d1:79:08:0d:
cb:53:87:9c:1c:1a:ab:6a:2b:e7:36:69:00:a1:f9:62:5b:c7:
b4:41:33:3c:d6:9c:08:b0:5b:20:11:97:9d:f4:16:ec:78:63:
95:93:b8:4e:43:cb:b1:0b:44:cf:30:b2:b8:36:56:a8:f8:d4:
36:23:66:e2:c6:d7:3e:73:1c:1c:af:f4:64:fb:e8:75:f1:d9:
3b:fa:47:b4:41:ca:a6:ed:e1:5a:1c:0e:96:2b:2b:a6:63:33:
9b:0b:42:51:b5:38:1d:a9:a6:26:fa:1c:6c:d1:b8:3c:92:4c:
5e:d8:0c:e7:ea:e4:64:45:38:a9:b6:0f:83:2e:e8:b1:82:b3:
b9:64:8f:95:52:e7:66:59:5a:0c:8e:91:2f:48:b2:94:15:df:
ea:b9:7a:7b:73:22:16:20:f6:47:25:ce:d4:35:85:62:f7:ad:
c1:46:3a:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 09:27:10 2025 by rpki-client