Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/z2Dq1A4Mlq3ITQYPU5NV2zRdRKI.roa
File: z2Dq1A4Mlq3ITQYPU5NV2zRdRKI.roa (raw, json)
Hash identifier: y68QPbmdZKuWUf6uu7l6OwQZY3neZEVQzkdeRhxMSa8=
Subject key identifier: CF:60:EA:D4:0E:0C:96:AD:C8:4D:06:0F:53:93:55:DB:34:5D:44:A2
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 01875AFB77F1A5A683BC35D4C36E15EFF1E1
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/z2Dq1A4Mlq3ITQYPU5NV2zRdRKI.roa
Signing time: Fri 07 Apr 2023 09:10:42 +0000
ROA not before: Fri 07 Apr 2023 09:10:42 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:187:4695:a68a/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:5a:fb:77:f1:a5:a6:83:bc:35:d4:c3:6e:15:ef:f1:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Apr 7 09:10:42 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=cf60ead40e0c96adc84d060f539355db345d44a2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:1b:be:51:76:1f:1b:57:0f:5b:f0:f0:04:49:
cd:4d:51:95:76:a1:fc:7c:39:1f:98:19:d8:e4:47:
84:9a:b2:0d:67:7c:23:0d:62:f5:4d:6b:b7:80:52:
e9:f0:c5:b3:df:1d:a2:b5:7c:a4:e9:33:41:b9:06:
42:6e:c6:71:c0:f8:7b:62:bf:16:6d:fb:ca:ce:4e:
a6:4d:6d:ed:d0:bb:d0:7f:a7:c6:95:22:fa:05:5c:
30:7b:10:59:4d:1b:81:0a:10:10:ad:f3:53:c9:22:
0b:2f:e3:23:93:9b:f2:ed:68:a5:80:4d:7a:c4:89:
3d:ba:d9:01:04:cd:de:e5:3f:6b:1d:e5:e7:d1:32:
95:4a:ac:19:f8:dc:c4:ae:98:08:7e:12:cb:22:63:
35:2e:35:6b:5a:41:5f:50:bc:0e:28:7f:84:9f:21:
22:72:03:f3:55:52:0d:a1:0a:d2:95:9a:c1:82:47:
08:55:69:5a:fd:37:e1:62:9e:3f:76:b0:38:57:44:
12:0a:72:84:e3:7d:20:00:e1:19:d8:c5:5b:ee:46:
00:d4:38:ed:98:27:1c:de:ed:42:d0:61:86:9b:00:
54:bb:87:19:2c:a0:ad:9a:ca:5e:3f:5f:11:1f:76:
c4:f4:f7:89:18:73:0b:5a:d8:c1:3b:7c:4b:3a:df:
0f:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:60:EA:D4:0E:0C:96:AD:C8:4D:06:0F:53:93:55:DB:34:5D:44:A2
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/z2Dq1A4Mlq3ITQYPU5NV2zRdRKI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
3a:17:03:12:4a:41:de:50:38:d3:16:20:66:92:14:48:11:fa:
18:50:32:75:34:62:e6:a1:8f:32:61:0d:1b:5a:ca:6c:4b:6e:
4b:a4:44:e1:a0:4c:0c:b5:c9:98:85:4c:dc:c9:25:78:a6:83:
36:f9:87:8d:0b:d0:7e:8a:c6:88:a3:10:79:6e:49:c9:9f:f6:
2d:1c:da:1a:92:96:36:1e:8f:31:04:a7:12:b9:8a:6a:8a:3f:
e7:32:72:0b:d3:ae:5e:4c:2d:5c:9c:7b:5c:7b:96:71:cd:09:
5c:68:3e:d2:60:fd:b3:49:fc:ad:23:11:b3:9b:16:46:91:0d:
03:7c:f8:d6:54:d2:b2:2a:b7:c0:b0:e9:12:9e:31:1f:4c:8b:
88:4c:1b:e0:bb:b5:7b:b6:ac:f1:e7:81:22:ca:6a:86:c0:b1:
72:f7:f1:e3:6f:68:ec:fc:c9:67:a5:54:d1:87:fa:d2:87:48:
55:6c:20:af:17:99:7c:2f:dc:84:e3:f8:87:c6:28:f4:8c:5b:
60:5b:9c:66:86:f6:46:9c:02:7f:84:df:62:1c:2d:d0:07:49:
c8:90:d1:c3:02:d8:0e:16:6b:25:2f:b4:5d:92:2e:f2:5f:ad:
a1:cb:04:4a:fe:fd:3f:76:a5:2b:8b:e1:f7:02:3a:d3:39:95:
95:45:60:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 2 08:53:40 2025 by rpki-client