Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/zA24ICaLg_wQEFkEg1bxasHmO3k.roa
File: zA24ICaLg_wQEFkEg1bxasHmO3k.roa (raw, json)
Hash identifier: mQwAoyidRvqWjMKAj203MUVz+tdtZQ/DqQEzn0NqORo=
Subject key identifier: CC:0D:B8:20:26:8B:83:FC:10:10:59:04:83:56:F1:6A:C1:E6:3B:79
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 018240023CE91EFE142D8742F7B262C78327
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/zA24ICaLg_wQEFkEg1bxasHmO3k.roa
Signing time: Wed 27 Jul 2022 14:14:24 +0000
ROA not before: Wed 27 Jul 2022 14:14:24 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:182:3f1d:a803/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:182:383f:6b78/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:40:02:3c:e9:1e:fe:14:2d:87:42:f7:b2:62:c7:83:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Jul 27 14:14:24 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=cc0db820268b83fc101059048356f16ac1e63b79
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:c6:1d:be:d1:d6:b0:31:f0:3f:a2:84:3e:5a:
75:75:32:de:18:20:e4:18:d9:91:7d:e4:91:48:c0:
0a:50:be:f2:67:67:2c:9e:1c:a6:e6:8c:fb:cb:1e:
cd:d4:8e:32:35:7e:b7:d8:de:f5:9c:c7:a8:96:09:
08:fc:a3:b3:79:46:d8:02:9a:fb:87:d3:7a:14:ae:
d1:46:53:95:ae:14:02:c2:59:0b:27:32:b8:65:69:
6b:94:e2:fe:80:92:7d:8b:f0:ad:d2:52:20:30:d9:
c4:01:c6:97:29:03:bb:a5:52:79:3a:99:74:0a:9d:
c8:26:5a:90:d3:f1:b1:2c:1d:b2:23:a7:d1:c3:99:
15:a7:56:9d:a7:c1:a3:35:d9:13:08:f0:02:d1:ec:
78:ca:62:dc:ad:03:67:cb:29:9b:81:23:38:b2:c1:
09:3b:32:f3:67:6e:cd:f6:64:6a:11:f0:92:e5:82:
fe:22:f2:a3:5f:02:c6:68:f5:d1:fb:a1:3c:b8:7d:
1e:70:e9:ce:ff:24:20:fc:91:bd:79:7d:5e:5d:1e:
ea:07:a4:cb:58:94:e6:fe:2c:2c:68:a0:04:36:1d:
02:ba:fd:8c:0c:87:b5:4e:bf:09:11:9e:73:0e:85:
e1:13:b2:46:86:24:24:2d:ef:c1:93:64:77:ee:2b:
ce:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:0D:B8:20:26:8B:83:FC:10:10:59:04:83:56:F1:6A:C1:E6:3B:79
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/zA24ICaLg_wQEFkEg1bxasHmO3k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
0d:ba:d8:28:f1:3a:05:b2:10:be:d0:36:99:dc:80:e7:19:1c:
1d:b8:fa:b6:c9:00:b0:17:e4:da:59:65:fb:19:d8:1d:10:0b:
08:b5:a4:4e:f4:7b:fc:e2:bd:07:bb:b0:28:54:4b:aa:0d:a2:
1e:eb:52:3f:4b:28:58:fc:b0:7e:e0:c5:d6:67:34:1a:1a:fe:
45:a5:64:db:e6:f0:91:c9:5d:b5:68:62:d6:13:0d:90:c5:82:
74:3e:ff:49:f3:5b:6f:66:cf:b5:6e:e1:83:b1:fd:4e:fe:78:
80:28:bd:fb:4d:a7:7d:62:bb:a1:54:95:c7:88:e1:a2:d5:12:
8d:86:15:70:4f:32:ed:4f:ae:03:e7:09:a3:e0:76:df:52:92:
47:0c:76:17:fe:3c:af:6e:fd:dc:8e:2a:8d:71:6e:f0:ba:b2:
23:b7:96:80:69:b8:f9:52:66:c9:4c:eb:db:97:c5:b6:42:35:
18:67:20:51:9c:d9:07:4d:48:78:7d:83:de:82:a1:86:36:42:
7e:c8:0c:b7:b6:a5:91:b3:b8:90:3e:cc:09:49:09:75:9f:88:
9e:6e:e0:8d:43:d4:36:fe:c9:c5:15:fc:f9:73:80:26:9d:7a:
8e:e1:4c:ac:9d:54:85:cb:75:25:63:a3:f2:88:2e:a2:25:71:
d4:31:c0:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 12:17:39 2025 by rpki-client