Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/zESOmxEmWh8dd5aAYK3EI3xP-RI.roa
File: zESOmxEmWh8dd5aAYK3EI3xP-RI.roa (raw, json)
Hash identifier: ggDT0kOFhtFkX68ZB29ym2MrKZU/hrdTZF8acm1ChfM=
Subject key identifier: CC:44:8E:9B:11:26:5A:1F:1D:77:96:80:60:AD:C4:23:7C:4F:F9:12
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 01865AFE8EBFE3F27A955EF5A102D75825DD
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/zESOmxEmWh8dd5aAYK3EI3xP-RI.roa
Signing time: Thu 16 Feb 2023 16:11:17 +0000
ROA not before: Thu 16 Feb 2023 16:11:17 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:5a:fe:8e:bf:e3:f2:7a:95:5e:f5:a1:02:d7:58:25:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Feb 16 16:11:17 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=cc448e9b11265a1f1d77968060adc4237c4ff912
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:f1:7b:13:1d:6c:d1:0d:70:67:f4:c3:e0:02:
5c:64:63:a7:27:78:fb:0e:fc:a5:16:56:87:ba:20:
e0:3c:46:f7:e9:a5:3b:5f:9d:b7:84:90:87:fb:e2:
4c:95:80:06:40:d2:e1:43:c9:06:53:6d:80:fb:55:
cc:fd:1a:c0:be:28:9d:48:f4:68:be:19:11:f3:73:
70:7e:79:35:5a:da:23:bd:76:46:d7:0f:71:3c:c6:
47:2e:0d:2f:e6:02:08:68:d0:b1:ef:90:92:09:15:
20:24:c6:28:eb:72:b8:5f:3a:ce:45:09:e9:08:fb:
0c:17:7c:60:22:50:9c:ff:42:45:d5:34:c9:65:f8:
98:e1:bc:7d:72:61:a8:28:b3:96:e7:24:00:bf:b8:
e8:20:ec:d1:f4:13:c8:f7:86:44:54:3b:a6:de:7b:
1f:50:0d:8a:5d:91:40:ed:90:00:61:47:1e:ac:3e:
c7:b3:5c:31:51:e4:d7:5b:9d:6e:a7:24:af:27:13:
35:a7:6c:94:23:14:d3:37:df:c4:4b:bb:68:7f:1f:
27:04:8d:c2:44:70:8d:cd:5a:1c:6a:72:39:55:49:
40:c9:4c:89:89:62:46:1c:1d:e5:a5:1c:c8:38:23:
89:0c:5d:fa:ba:c7:c3:82:1d:c0:78:82:76:30:c2:
a2:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:44:8E:9B:11:26:5A:1F:1D:77:96:80:60:AD:C4:23:7C:4F:F9:12
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/zESOmxEmWh8dd5aAYK3EI3xP-RI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
24:4f:e8:a6:46:8c:a2:b2:e2:3b:01:ef:b2:59:60:59:68:ec:
4b:ed:52:32:b3:fe:0b:d5:24:76:02:5a:8d:1d:55:81:ed:d6:
1c:e1:40:e6:17:48:99:46:85:bd:21:1b:da:15:d4:fd:0c:56:
97:d7:c0:59:d7:17:32:33:77:0f:95:54:d4:97:ce:f8:f2:79:
af:5c:c5:38:99:41:36:59:03:11:98:75:c5:d1:36:30:88:ef:
7f:e2:1d:26:0e:71:03:a5:98:78:6a:e8:a0:15:0c:a5:b8:c0:
85:85:8e:e7:6b:05:2f:d5:19:a7:0a:dd:a5:51:6e:51:f4:8b:
f5:af:e0:7c:24:a9:11:8f:f0:f5:39:ad:52:34:e8:68:79:49:
81:34:fe:ef:b6:c6:01:b1:40:b1:69:06:23:83:4c:96:26:b4:
58:6c:4c:ea:0c:9e:5b:a9:c6:b9:0e:f8:24:aa:fe:71:56:c0:
a9:9f:96:10:31:7f:f8:cc:04:90:17:d4:ad:01:1f:46:83:13:
c6:50:c9:b3:a1:7f:2a:74:59:dd:82:7e:3f:f6:67:05:50:6f:
02:de:74:ae:52:a7:19:58:2e:5b:0e:93:9b:b7:bf:1e:0f:fd:
ba:45:c1:70:fd:5a:0d:dd:e1:15:0d:be:13:be:d2:56:2f:6d:
9d:f8:f2:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 17:36:35 2025 by rpki-client