Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/paZieZDSTgbBCHBFfXsHC43A_jI.roa
File: paZieZDSTgbBCHBFfXsHC43A_jI.roa (raw, json)
Hash identifier: 4GUex8Ao+lMDGW9V4AjnUlCoO1ESHxSTqmRHNKqhU38=
Subject key identifier: A5:A6:62:79:90:D2:4E:06:C1:08:70:45:7D:7B:07:0B:8D:C0:FE:32
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 768DFB1E
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/paZieZDSTgbBCHBFfXsHC43A_jI.roa
Signing time: Tue 29 Mar 2022 00:10:29 +0000
ROA not before: Tue 29 Mar 2022 00:10:29 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:17f:1bf4:40b5/128 maxlen: 128
2001:67c:64:ffff:0:17f:20ac:a2bd/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:17f:87e3:2531/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1989016350 (0x768dfb1e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Mar 29 00:10:29 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=a5a6627990d24e06c10870457d7b070b8dc0fe32
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:09:2b:e3:ce:11:e1:1f:be:0f:54:52:87:60:
9e:97:a1:c6:3a:73:61:cc:fe:53:f5:7f:72:f4:fc:
4c:77:71:e5:87:0e:8f:43:ea:d6:89:e7:8d:77:dd:
c8:7a:0b:fd:0f:00:75:aa:8a:17:a0:96:f7:b2:8e:
82:f3:b5:1c:eb:16:d4:86:8b:1a:3f:4e:8f:7c:ca:
7d:05:30:49:f8:71:20:78:5c:79:fb:2d:b5:58:dc:
76:92:12:8a:6a:d1:22:ad:df:19:6f:30:27:4e:78:
3e:41:cc:d1:21:4f:75:92:33:fa:92:1f:e8:54:a7:
95:9e:e3:31:89:69:da:f0:a7:81:f9:de:49:e9:60:
26:4b:77:bc:85:9b:84:bf:4d:ae:77:26:e7:c5:33:
8f:06:87:31:3f:15:0a:4c:d2:14:95:75:d1:cc:3d:
43:93:b5:d4:da:1b:8b:d5:67:14:9b:26:7f:da:69:
0a:83:e1:61:4d:dc:f8:a4:e3:04:e2:ca:d0:55:1a:
5f:e0:a9:fb:82:40:ee:06:6c:3a:0a:a3:32:9f:f8:
02:7b:80:57:81:cc:b6:02:4f:5e:59:51:73:73:39:
81:db:13:44:de:07:f2:61:c3:c1:cc:50:6e:01:f6:
d0:72:46:83:99:db:d3:34:bb:67:5b:03:7e:36:25:
1a:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:A6:62:79:90:D2:4E:06:C1:08:70:45:7D:7B:07:0B:8D:C0:FE:32
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/paZieZDSTgbBCHBFfXsHC43A_jI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
33:45:7a:95:35:c4:05:3c:c2:0a:cb:ad:d5:96:ef:b4:a9:2f:
e8:09:cc:88:69:2f:8b:a7:c1:e3:be:b1:00:79:15:d5:d9:c3:
aa:da:c9:5d:ab:fb:e5:04:58:ce:4d:7e:ed:b1:47:3c:fd:7b:
20:49:cc:2b:f1:67:16:6d:48:29:34:38:fb:af:3f:27:be:c7:
63:3f:85:97:3a:fd:f4:0f:95:37:36:79:3a:46:0d:a5:fa:4d:
09:4b:43:24:f4:97:46:3e:1c:52:af:9e:9c:a2:b0:68:04:27:
85:57:80:c3:2d:0f:08:7e:f4:6f:a1:68:c2:82:84:00:48:a5:
10:79:62:6e:ad:c4:7b:59:d0:6b:11:16:d4:9d:4b:02:5f:c5:
7c:e3:62:da:dd:69:b1:fc:89:2b:98:9a:92:f4:df:39:9d:72:
c5:28:33:e8:1c:3f:04:4d:c0:f6:de:5a:21:ad:12:68:0a:c6:
a4:5a:75:4d:54:eb:d4:8b:bb:ef:39:0c:46:9b:4a:60:0e:31:
b1:2a:df:c7:af:19:a5:9b:7b:f6:fb:a7:c9:27:ab:4b:5c:1d:
09:9f:19:24:bc:89:0d:f6:93:08:a9:b9:65:2a:b3:04:81:8c:
4f:3e:6d:3f:59:12:97:f8:7a:0e:76:6e:bf:9f:e7:59:a2:cd:
94:90:cc:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 02:06:42 2025 by rpki-client