Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/z5AyhvfhuvT9AuNVvVazBHBk-Hg.roa
File: z5AyhvfhuvT9AuNVvVazBHBk-Hg.roa (raw, json)
Hash identifier: XlSdJ7+GHW1CkBe53cCJJPM4z6lu60CN1rcKMrFcBS8=
Subject key identifier: CF:90:32:86:F7:E1:BA:F4:FD:02:E3:55:BD:56:B3:04:70:64:F8:78
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0181F364AC6A790211D722D6501724C38354
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/z5AyhvfhuvT9AuNVvVazBHBk-Hg.roa
Signing time: Tue 12 Jul 2022 17:11:09 +0000
ROA not before: Tue 12 Jul 2022 17:11:09 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:81:f3:64:ac:6a:79:02:11:d7:22:d6:50:17:24:c3:83:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Jul 12 17:11:09 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=cf903286f7e1baf4fd02e355bd56b3047064f878
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:4d:fc:ee:7a:f8:f6:d4:a2:96:fd:37:da:ee:
c3:77:35:83:df:6b:52:2e:32:12:09:9b:76:81:d7:
e4:19:1c:12:ff:c8:2c:9a:e6:b4:26:e4:65:2d:90:
b3:a7:d5:fa:da:ff:c1:04:5a:e6:a0:a5:8e:1f:1c:
30:98:f9:ac:c5:76:84:55:63:5a:30:7a:68:c8:f4:
e4:5b:0c:0e:39:ed:e9:a1:ec:9e:5a:ee:b6:b4:14:
4a:88:81:79:1e:22:2b:d1:14:26:94:98:1d:b1:33:
39:cb:48:4a:c1:35:5e:21:04:9a:1e:b8:f4:cf:81:
58:e1:25:71:fd:f7:7c:62:3f:75:6f:3b:46:d7:42:
f8:a0:e1:3c:8a:60:7e:f9:fd:e4:12:eb:da:5f:ff:
9f:1a:48:3c:b0:2a:5d:00:bb:e0:e7:ef:9b:f1:0f:
be:57:38:50:33:37:34:94:35:27:9b:20:b9:18:56:
36:f8:15:6a:60:c0:ac:a0:bb:2f:1b:34:b2:44:d6:
12:d7:26:73:15:16:88:f2:5d:a6:fa:c8:e0:8b:8b:
69:9e:c7:4f:2e:9c:ff:91:41:92:24:c4:58:e7:61:
d9:b0:6e:aa:4d:3f:e7:96:38:3f:3f:d4:63:65:ef:
11:65:a0:ac:ba:99:a8:2f:e4:ab:59:30:9c:0d:94:
4c:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:90:32:86:F7:E1:BA:F4:FD:02:E3:55:BD:56:B3:04:70:64:F8:78
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/z5AyhvfhuvT9AuNVvVazBHBk-Hg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
81:6f:2e:c9:3d:5a:66:3f:89:ba:36:0a:70:d3:cf:a0:07:de:
d9:06:b5:b6:2c:b5:bd:93:fc:80:bc:40:cc:18:09:5a:5b:20:
c3:1a:9b:92:da:79:c3:26:32:d4:13:ea:5d:5a:59:f4:9f:9b:
e3:94:37:9b:8c:10:c2:e0:8e:5f:90:ab:91:91:dc:5a:31:23:
39:56:9e:7b:f5:d2:ff:4d:8e:01:1f:23:a2:38:a8:21:71:d0:
ab:ed:73:e4:46:09:86:7e:fd:4f:68:99:e5:49:37:07:33:bf:
ed:51:d4:8d:e0:69:49:55:fb:16:33:e4:2b:ca:af:ac:c6:f6:
37:89:65:00:52:9a:65:f6:43:bd:0b:9f:e4:0f:74:b6:93:6e:
da:0c:18:c1:93:2f:71:c2:10:f9:d3:70:c0:0c:af:76:08:7e:
62:bb:94:eb:ee:7a:05:15:7d:2d:a5:b3:64:f8:14:6a:ac:50:
4d:0b:44:03:3d:3a:37:7f:75:4f:d0:f6:18:56:e7:d5:32:3b:
0a:bd:69:f6:f9:a5:f4:2f:f3:85:79:31:0a:54:c1:ac:a6:b1:
a8:52:39:b7:20:12:8e:4e:2e:6a:47:58:f0:4f:a9:95:17:e8:
da:d6:1a:a0:09:5e:cf:52:73:51:87:ec:b6:91:f4:14:b5:d2:
59:98:d5:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 3 14:58:19 2025 by rpki-client