Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/sZP8p1a-BL6_mRJjoXMQTjQPPLY.roa
File: sZP8p1a-BL6_mRJjoXMQTjQPPLY.roa (raw, json)
Hash identifier: q6/QxASaSGUokIv3b0DHX5YeiYEPTVkrURI6C+QXPTs=
Subject key identifier: B1:93:FC:A7:56:BE:04:BE:BF:99:12:63:A1:73:10:4E:34:0F:3C:B6
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 01835E7B1FC88883899E39BF644364F5A3B8
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/sZP8p1a-BL6_mRJjoXMQTjQPPLY.roa
Signing time: Wed 21 Sep 2022 05:17:50 +0000
ROA not before: Wed 21 Sep 2022 05:17:50 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:182:3f1d:a803/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:183:50b3:5643/128 maxlen: 128
2001:67c:64:ffff:0:182:7cb2:99d4/128 maxlen: 128
2001:67c:64:ffff:0:183:1279:659d/128 maxlen: 128
2001:67c:64:ffff:0:182:383f:6b78/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:5e:7b:1f:c8:88:83:89:9e:39:bf:64:43:64:f5:a3:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Sep 21 05:17:50 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=b193fca756be04bebf991263a173104e340f3cb6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:36:b8:1f:7a:3e:c4:41:e6:67:88:ff:d2:01:
39:b4:be:89:37:99:79:b6:4e:56:6f:29:c2:5d:20:
62:f9:51:ea:16:bc:98:99:b4:f2:52:a4:7e:ba:e9:
7a:f9:46:54:ce:4b:7d:09:9a:a8:7b:a6:5f:13:3a:
77:d3:0e:ab:c6:62:38:13:4c:6b:9b:d6:45:90:b9:
97:35:65:87:6c:3a:bb:e6:94:b0:ce:01:5e:7e:44:
2a:b9:8d:7b:a5:25:f4:67:37:eb:b2:3b:d4:a1:7e:
eb:14:15:3c:4b:30:28:ad:ad:77:04:7d:ea:79:0e:
db:2b:6a:c5:e6:f4:5a:ae:d2:a7:29:75:68:b9:6d:
14:e8:49:f9:af:9b:ac:ce:a6:ed:83:b2:ff:7c:e8:
89:80:87:87:7f:15:49:71:b5:ce:23:f0:d0:17:4e:
2a:a9:f9:cd:5b:54:b0:a7:ab:e8:f7:74:75:6c:62:
81:5c:ba:9a:f6:76:d5:d3:20:5b:ee:b4:c6:a8:d1:
91:c2:a9:8a:8c:6b:a2:4f:22:7b:03:1f:6f:ad:ec:
09:11:d5:a4:f6:01:74:04:49:bb:31:68:1a:f5:36:
aa:70:63:62:a4:69:9e:7b:de:ac:e1:86:8c:07:f2:
6f:7c:c0:75:76:b9:91:bf:6d:64:dd:9e:2e:65:28:
77:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:93:FC:A7:56:BE:04:BE:BF:99:12:63:A1:73:10:4E:34:0F:3C:B6
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/sZP8p1a-BL6_mRJjoXMQTjQPPLY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
3b:93:36:ee:75:83:26:46:05:53:36:8b:58:0d:5f:bc:19:e7:
36:db:f2:11:7e:14:9a:52:4b:82:f1:c2:f2:8f:e7:18:96:f6:
62:45:86:31:1c:b7:55:3c:21:e8:85:ea:d6:30:89:ac:63:df:
22:bc:ee:49:5b:3b:d4:33:96:75:f8:ed:eb:75:e1:8a:74:76:
dc:89:bc:42:04:64:e9:9e:34:09:3d:e1:a9:f4:3a:d3:91:de:
37:3c:97:14:9e:c6:40:03:f2:36:e2:65:90:3d:68:26:3a:0b:
9f:48:6b:ac:20:8a:5d:03:d9:e8:6f:b2:ee:ed:7e:2b:b0:b4:
ac:25:57:71:71:a7:be:ba:22:5f:ea:54:fd:09:99:40:b5:55:
7a:b8:c0:cc:6d:14:97:ea:3a:1b:28:63:96:87:0c:16:4c:66:
94:ef:a0:b4:5d:6e:4b:38:8d:0c:4f:70:98:da:d0:d8:e7:48:
93:81:f9:51:5d:7a:69:97:d8:20:f3:7e:f5:85:a9:6e:f4:ca:
16:14:c8:48:f6:a1:34:b4:4d:d9:be:6b:60:77:9a:32:9a:15:
85:b9:cc:a5:b3:5e:cd:b7:c3:41:3e:20:22:63:1d:11:6e:50:
ca:48:cd:c2:c8:13:0c:30:9f:25:56:66:8e:f1:b3:3f:0c:21:
4f:e8:14:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 04:28:47 2025 by rpki-client