Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/z3OJs-ofsxnE1L_DgYBhOWbiXSw.roa
File: z3OJs-ofsxnE1L_DgYBhOWbiXSw.roa (raw, json)
Hash identifier: Q7acsYwZClHIcWr3ScH0/yZ6L8sIzTgeGbuHpjn6jfw=
Subject key identifier: CF:73:89:B3:EA:1F:B3:19:C4:D4:BF:C3:81:80:61:39:66:E2:5D:2C
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 01879C681D5104A3F21044BDB557897DFAEE
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/z3OJs-ofsxnE1L_DgYBhOWbiXSw.roa
Signing time: Thu 20 Apr 2023 02:04:41 +0000
ROA not before: Thu 20 Apr 2023 02:04:41 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:187:4695:a68a/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:187:9c67:bb67/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:9c:68:1d:51:04:a3:f2:10:44:bd:b5:57:89:7d:fa:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Apr 20 02:04:41 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=cf7389b3ea1fb319c4d4bfc38180613966e25d2c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:46:fa:57:3c:0a:e3:03:4a:5a:1b:fa:da:be:
b2:5d:10:fc:75:d9:cf:29:ad:bb:00:b5:f1:c7:2a:
de:7b:5a:0d:9d:c3:15:50:fa:5d:ee:68:83:d7:b0:
4b:0b:74:e5:53:45:76:0d:86:6f:89:86:f1:62:0a:
a5:4b:bb:01:49:a8:25:ed:b2:26:73:13:a1:83:3e:
ee:1c:8b:13:95:8c:51:09:03:d8:61:79:5d:0a:92:
78:16:5b:63:6c:ff:d9:8e:4a:f2:ae:a9:47:4b:ff:
a6:d5:f0:dc:90:b6:e0:d3:4e:23:f3:a6:3a:7a:60:
c4:92:7d:d7:ab:1c:d4:56:bd:78:76:00:99:63:47:
60:80:21:a6:81:04:1c:d8:25:bf:fa:95:cd:a2:71:
23:0b:f9:d0:fa:1c:35:18:cf:06:73:5b:1d:eb:4c:
de:83:db:19:3d:7d:ca:5d:ad:0a:20:ce:55:cb:20:
b5:47:95:72:d9:5a:0d:ff:5e:fa:29:e9:05:b5:57:
bc:a4:ab:d3:ed:ec:3f:f2:ab:36:8d:23:4a:8d:db:
6b:bd:d9:2e:8b:13:15:32:4e:05:ea:2e:44:7b:3b:
70:72:28:84:82:a3:af:47:44:39:ec:fb:58:18:9d:
28:fe:c2:54:af:b4:f3:d1:0d:de:be:a1:ae:ed:2e:
e3:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:73:89:B3:EA:1F:B3:19:C4:D4:BF:C3:81:80:61:39:66:E2:5D:2C
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/z3OJs-ofsxnE1L_DgYBhOWbiXSw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
16:84:db:da:24:c1:b9:89:a2:4d:d1:fa:cd:8f:27:df:5b:dd:
93:2d:bc:42:26:71:32:71:ef:79:75:2e:f3:2e:7f:3e:c8:45:
04:fa:c5:0a:33:0c:6f:84:21:d5:ce:b0:62:7c:cb:b8:f2:b3:
2c:1b:65:41:33:71:de:4b:54:c1:49:eb:22:92:8c:91:ae:77:
f2:f1:f9:64:b9:83:88:f7:33:e3:a4:7e:87:1f:71:72:95:6b:
b9:85:8d:ed:26:53:a7:d7:c0:0c:f0:52:dc:e9:27:65:76:ca:
14:9c:29:98:0e:e1:f3:dc:1b:f7:e1:c3:72:d4:a1:6a:c4:a9:
28:49:1d:61:a2:d4:7d:bb:8d:2b:8b:24:f7:b9:75:cd:5d:f3:
22:05:2f:59:06:8f:81:8f:21:8f:68:b3:d8:18:0c:a7:4f:57:
3f:c4:1c:1b:d0:33:8f:8c:fa:15:47:a0:86:fa:4c:91:49:18:
6b:ed:7d:6d:33:b1:d3:b6:ec:10:59:bd:2a:1c:9a:f5:6f:36:
f0:28:be:2d:47:4d:bf:83:6d:4d:b6:76:b7:06:0f:c9:ae:91:
4e:20:30:c9:58:99:49:15:55:ec:eb:db:55:0f:25:43:72:eb:
73:e1:cc:8e:a4:17:1d:cc:33:65:1b:fb:c3:be:d5:4a:cc:b6:
da:fa:8c:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 21:35:13 2025 by rpki-client