Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/z-RB0FjKJRyPRYU54kiFbEnKkjs.roa
File: z-RB0FjKJRyPRYU54kiFbEnKkjs.roa (raw, json)
Hash identifier: n/qJ/UPjEUIqRPUBMJ9rFixrvzBfdVJRlacfk1Edp6A=
Subject key identifier: CF:E4:41:D0:58:CA:25:1C:8F:45:85:39:E2:48:85:6C:49:CA:92:3B
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0186E78BD905D39E4976D355E9B82B9C5DBA
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/z-RB0FjKJRyPRYU54kiFbEnKkjs.roa
Signing time: Wed 15 Mar 2023 23:12:27 +0000
ROA not before: Wed 15 Mar 2023 23:12:27 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:e7:8b:d9:05:d3:9e:49:76:d3:55:e9:b8:2b:9c:5d:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Mar 15 23:12:27 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=cfe441d058ca251c8f458539e248856c49ca923b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:d3:43:73:b3:45:2e:95:ce:ee:a0:ee:a5:2f:
20:24:43:66:a4:5f:79:00:1a:45:cc:57:1f:d9:6c:
81:e9:d8:d3:bf:87:bd:5e:41:b9:42:0e:5c:37:d0:
5b:58:e3:93:4a:fc:86:d7:b7:2a:a5:6d:88:50:f1:
64:94:75:98:2e:f7:d4:0e:89:91:a2:b2:09:4a:49:
d1:4c:80:fb:d5:b0:fb:bc:d0:2d:68:1c:28:17:cd:
cd:d3:ef:11:95:86:09:c3:cd:4e:b5:9a:3c:eb:e6:
29:7f:87:80:da:a3:7f:74:db:7a:6e:e3:bf:a6:de:
1f:0c:a9:f2:69:48:8a:cb:76:e8:80:e7:00:f0:af:
df:47:7a:29:d1:0e:18:a8:c8:26:b2:03:0a:41:5b:
78:0e:3b:32:ec:5f:dc:27:84:ba:22:aa:b0:e8:ea:
61:ef:fa:50:4a:7c:38:9a:b5:64:2f:9e:6b:f5:8e:
85:b0:a4:2e:ea:b2:47:24:9b:c3:9d:6d:4c:f8:bb:
07:f2:0c:6c:f9:9d:68:14:c8:da:3c:fa:80:ee:a1:
99:f5:f0:f3:47:8d:74:d9:b3:c7:dc:f7:2a:8c:78:
43:04:5b:a0:7f:ab:08:cb:a6:5b:45:38:42:08:7d:
2d:62:48:7e:85:82:0d:79:b9:f5:ff:96:d1:81:34:
a0:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:E4:41:D0:58:CA:25:1C:8F:45:85:39:E2:48:85:6C:49:CA:92:3B
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/z-RB0FjKJRyPRYU54kiFbEnKkjs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
7b:ef:b5:f6:8d:be:28:dc:b7:72:84:28:d1:a2:00:96:31:76:
ee:22:b6:73:4d:33:8a:de:6f:3f:d0:8b:08:79:db:e7:44:3f:
a5:36:d3:25:e1:c6:77:b3:dc:7b:81:f6:71:4b:d1:cb:e4:50:
bf:24:3b:55:74:d4:ce:f1:e2:d6:a3:b7:62:36:e1:06:74:d9:
5b:08:a2:4f:db:2d:a2:71:b0:d0:c9:b0:2c:43:2a:56:f9:43:
9d:d8:7a:cf:94:e7:0f:39:fe:71:9d:b2:a6:c7:a8:0b:cc:b9:
e2:54:4b:7e:a8:85:b3:2b:49:8b:5d:d7:b1:69:5f:6b:1d:ee:
2d:5c:8a:b2:ba:e8:d7:10:a6:1f:73:63:e5:7e:7e:df:bd:50:
07:17:51:11:a7:fc:30:b1:a8:3f:d1:62:94:b9:0c:1c:d2:1b:
2f:54:1d:aa:22:7b:4f:2b:38:fd:d9:bd:42:ff:a8:6d:6d:31:
05:76:33:77:7d:4f:5d:69:f2:42:c5:1e:17:54:cd:cd:28:2e:
74:2c:ef:b8:89:78:a7:23:d0:3d:2a:7d:9c:31:4c:52:42:c4:
14:7d:ec:23:13:6f:72:f8:16:89:58:ae:b5:2e:03:26:c8:d0:
84:41:ba:7d:09:41:93:4c:93:fe:c2:28:21:b7:87:df:7f:da:
e2:72:42:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 21:29:48 2025 by rpki-client