Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/_zSdtbG3d7O3SD02I_lbTGzh5lo.roa
File: _zSdtbG3d7O3SD02I_lbTGzh5lo.roa (raw, json)
Hash identifier: dTXiwiSf/6aHEHYY2vP3Gih3U1pTJZRu8HZG9gvhjm0=
Subject key identifier: FF:34:9D:B5:B1:B7:77:B3:B7:48:3D:36:23:F9:5B:4C:6C:E1:E6:5A
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 674988A9
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/_zSdtbG3d7O3SD02I_lbTGzh5lo.roa
Signing time: Wed 02 Feb 2022 20:08:27 +0000
ROA not before: Wed 02 Feb 2022 20:08:27 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:17e:a0dd:2f5b/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1732872361 (0x674988a9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Feb 2 20:08:27 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=ff349db5b1b777b3b7483d3623f95b4c6ce1e65a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:8a:13:8b:44:c4:bd:74:06:0d:6e:06:c2:92:
5c:de:4c:81:df:bf:4d:9d:81:1c:6b:62:e4:60:5f:
15:92:6d:3c:dd:3f:54:62:7c:22:b9:20:74:b6:1e:
74:6e:30:b0:43:e7:25:80:f2:69:a5:d3:22:a5:84:
c1:01:bd:9c:8f:2e:12:e1:6c:7e:d8:6b:ab:e0:06:
8f:7c:0c:28:06:9d:0b:20:c5:16:74:f1:ea:7f:9e:
ce:4a:8b:cd:f9:84:ca:34:e6:42:f1:d1:fb:44:c8:
12:69:40:da:cd:78:b0:38:17:8e:6d:53:1f:bc:37:
0b:14:4c:6b:72:0a:dd:73:51:77:5c:c9:22:25:f4:
13:23:78:cd:fb:13:fb:eb:aa:47:5f:ec:1b:59:1f:
33:a0:96:09:95:fc:92:8d:c5:30:9c:58:1e:a5:8f:
66:8a:d1:60:1b:33:ad:82:1a:c1:ac:9e:c8:af:15:
64:3d:2a:28:ba:ff:e5:ba:87:fe:ba:b5:41:2f:97:
e8:9a:6d:0f:95:a2:87:ac:76:43:e3:74:3b:ff:e6:
c9:a1:63:c3:8e:92:f1:f7:de:bd:0a:2e:59:df:af:
be:75:65:bb:bc:18:8d:69:6e:52:68:66:85:1c:0e:
be:80:55:81:e7:8d:53:16:28:6b:70:47:36:a7:8c:
56:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:34:9D:B5:B1:B7:77:B3:B7:48:3D:36:23:F9:5B:4C:6C:E1:E6:5A
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/_zSdtbG3d7O3SD02I_lbTGzh5lo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
30:0f:80:0b:6c:7b:75:1c:26:d9:b1:b8:fb:e8:53:cb:16:bc:
50:6a:85:ff:36:2b:4b:f4:a9:ce:90:44:82:af:50:4c:e3:6c:
41:e7:a5:81:48:3b:20:f2:47:0a:17:da:f1:b7:59:6e:2e:d6:
e7:34:75:d9:fd:fc:c0:29:b7:26:a9:c9:59:32:da:ab:6b:04:
d0:89:01:bf:e0:02:a8:48:b9:3b:1d:db:ba:39:b7:a5:8f:c7:
78:86:4e:08:8e:85:5a:e5:38:7e:d8:e4:10:07:8a:f4:50:7a:
d0:c1:78:36:de:aa:4d:7c:b7:75:ff:08:fb:0d:46:a0:98:91:
f8:9f:0a:60:0d:f4:cb:26:29:4e:48:10:be:6f:af:ba:49:5d:
cd:b4:f3:95:85:8f:39:8e:4e:0b:98:d0:b2:d2:c1:a4:ec:7e:
35:f9:6d:5d:d0:ad:f6:ed:78:de:e4:8f:ab:9c:34:b7:99:ef:
63:23:e8:0b:e2:39:be:08:b7:05:5d:15:7d:1a:bd:53:d9:7f:
00:69:13:e7:76:43:06:17:7e:bc:e3:11:55:fe:a1:88:5b:da:
ed:04:02:0d:d0:8c:77:96:a5:54:1b:89:e0:78:cc:32:ff:75:
a3:d6:c2:b0:ca:99:82:f9:2c:c6:cb:a8:b4:0d:96:5b:53:9e:
5b:f0:d9:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 13:19:49 2025 by rpki-client