Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/zAFzJ2i0HVdDbBkpDBlsHADwKds.roa
File: zAFzJ2i0HVdDbBkpDBlsHADwKds.roa (raw, json)
Hash identifier: 8NnKEJ4Q0hgXsGXVikLQcFQVpLZ8fDf+OSSlYSVguSQ=
Subject key identifier: CC:01:73:27:68:B4:1D:57:43:6C:19:29:0C:19:6C:1C:00:F0:29:DB
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 01880CA1CC5335970306CF4781B2D79230A0
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/zAFzJ2i0HVdDbBkpDBlsHADwKds.roa
Signing time: Thu 11 May 2023 21:05:10 +0000
ROA not before: Thu 11 May 2023 21:05:10 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:187:4695:a68a/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64:ffff:0:187:fa9a:b088/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:187:b2b8:a7dd/128 maxlen: 128
2001:67c:64:ffff:0:188:ca1:2f2/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:0c:a1:cc:53:35:97:03:06:cf:47:81:b2:d7:92:30:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: May 11 21:05:10 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=cc01732768b41d57436c19290c196c1c00f029db
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:46:d2:87:ae:c8:91:f2:3b:c3:24:87:d5:51:
55:cc:05:28:30:f1:94:09:11:91:9b:33:19:2d:c3:
fd:5a:29:c6:af:1a:8b:b4:ce:c0:b2:cf:34:ca:50:
2b:f0:b4:d3:7d:1c:b2:7e:e2:51:bb:c8:2c:c0:32:
7f:26:7c:19:a4:f9:6d:1c:fd:34:40:6e:f5:8a:f1:
d9:f3:96:a5:5e:70:12:e7:f8:ee:ab:8c:41:58:7e:
66:c9:01:fa:3c:5c:84:cb:9b:e7:88:c3:6a:6c:a3:
a2:bc:73:4c:58:62:ed:03:73:f0:f6:ee:17:29:0a:
2d:ea:6b:98:16:a5:e8:86:4e:1b:97:63:69:68:e8:
d8:67:8c:4a:17:f8:64:32:13:9d:56:be:55:07:c5:
fc:02:59:b0:60:2f:61:f2:54:96:cd:3f:54:02:c8:
c3:94:1e:9c:48:55:86:71:9b:1f:88:94:69:ee:03:
da:e7:75:3b:f9:ae:bb:f2:61:c2:75:39:a4:f4:ac:
41:79:d0:ac:02:d2:f1:ce:a7:ba:ec:2e:1a:4b:b4:
95:51:f9:31:84:6d:29:f2:d7:34:3a:a0:05:3a:62:
a6:e2:13:80:98:14:ef:61:49:d8:88:82:05:06:95:
4c:78:ba:79:ea:d7:2a:55:e3:33:13:6f:fe:86:4b:
87:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:01:73:27:68:B4:1D:57:43:6C:19:29:0C:19:6C:1C:00:F0:29:DB
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/zAFzJ2i0HVdDbBkpDBlsHADwKds.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
ae:74:71:34:c3:40:72:7f:95:55:95:27:4c:5d:8b:4c:75:c0:
4f:39:75:01:0a:54:7b:5b:42:f9:ec:83:38:22:ee:59:f4:3b:
c6:7e:f9:66:76:eb:f5:26:76:aa:0a:7f:e3:b9:e1:68:b0:0f:
63:ad:4a:cf:33:34:89:f1:de:20:2d:85:1b:00:2f:9e:39:9b:
2c:c2:d4:5e:50:6f:f6:6f:4d:6a:e3:94:84:93:63:8b:c5:e0:
03:00:13:83:05:1d:13:09:e8:51:d0:2c:1d:90:76:2d:be:e5:
bd:6f:66:9b:f3:5a:54:28:7a:a0:ad:3f:40:74:47:a4:cb:89:
bb:09:8c:a0:2e:4f:97:80:b4:52:4d:0c:e9:64:d5:f6:e7:66:
3a:43:50:0e:89:e5:04:1a:99:b2:9e:0a:54:93:05:83:2d:f1:
15:06:ed:df:91:b4:66:25:0c:59:1b:b6:eb:7a:46:a1:96:58:
de:97:7f:1d:08:11:f3:f6:33:d1:22:54:92:68:a8:a5:e3:1d:
3f:62:04:a4:7b:16:75:c4:e1:4a:e3:1d:8d:26:fd:6a:ad:0d:
f5:1e:5a:34:f9:a2:42:e2:48:8e:ea:6d:e9:1d:e5:74:09:27:
f7:2b:24:5f:78:e8:b8:3a:65:ce:80:b6:4c:88:27:a6:a7:91:
31:ee:f3:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 11:15:21 2025 by rpki-client