Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/zGT77DsLd9gDdv1WfP4PLIL42z0.roa
File: zGT77DsLd9gDdv1WfP4PLIL42z0.roa (raw, json)
Hash identifier: HqUtiZdEJFcmD/pJ1OXSFHnBWKEH6No8Zjq9J0P6yEo=
Subject key identifier: CC:64:FB:EC:3B:0B:77:D8:03:76:FD:56:7C:FE:0F:2C:82:F8:DB:3D
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 018664D70226C2754C89E90B67EA2E22D8F0
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/zGT77DsLd9gDdv1WfP4PLIL42z0.roa
Signing time: Sat 18 Feb 2023 14:04:17 +0000
ROA not before: Sat 18 Feb 2023 14:04:17 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:64d6:e7be/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:64:d7:02:26:c2:75:4c:89:e9:0b:67:ea:2e:22:d8:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Feb 18 14:04:17 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=cc64fbec3b0b77d80376fd567cfe0f2c82f8db3d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:90:63:38:d1:2d:e8:60:cd:94:e7:14:af:14:
d6:20:f4:b1:7b:a2:7d:23:b4:85:84:1d:4f:31:b4:
c2:4c:52:79:88:f8:a0:5b:87:2a:68:72:bc:01:2b:
cd:43:f5:11:5c:14:94:73:54:c3:08:4b:05:66:cb:
cc:7c:6a:ef:da:26:f2:2e:72:bd:a7:19:45:30:a7:
a3:3c:93:bc:3e:ca:02:91:5b:b3:e1:23:1a:37:9a:
f1:ac:72:e9:4f:8b:35:23:ff:2e:78:ec:97:3a:98:
68:f0:22:ac:b7:ae:4b:e9:d2:d7:23:02:8b:32:bf:
e3:15:85:8d:78:e9:67:d2:d2:ac:ef:43:90:cb:25:
76:9c:10:95:50:ab:12:cb:c7:34:a4:27:39:c3:47:
4b:cd:69:57:b5:91:bf:a0:49:ce:1d:1b:35:03:c6:
38:d9:bd:12:37:96:48:7a:00:6d:0f:1f:76:db:9d:
37:af:11:19:53:71:45:4b:68:58:1e:aa:63:ef:0d:
7b:b5:73:dd:0e:aa:3f:0d:3e:4a:9a:04:7a:c2:a5:
6d:42:76:cf:28:16:4e:6b:ce:34:9b:f1:50:43:30:
f8:d5:8f:f0:11:60:0f:d5:5a:cc:2e:ed:a4:b6:47:
3e:d2:c6:fa:c9:99:21:64:7c:65:d4:bd:75:48:2e:
f2:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:64:FB:EC:3B:0B:77:D8:03:76:FD:56:7C:FE:0F:2C:82:F8:DB:3D
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/zGT77DsLd9gDdv1WfP4PLIL42z0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
63:b2:6e:ff:0d:ac:bc:53:59:a3:7b:b0:29:83:2a:0d:82:29:
72:51:6f:58:de:4e:28:b9:88:2f:2e:3d:78:4d:32:2d:6c:cd:
3a:aa:20:93:64:04:e4:c1:5a:a6:f9:e2:d9:39:55:d6:4f:49:
d9:92:1e:77:ed:e5:d6:6e:80:e9:11:c8:be:98:a8:05:4d:42:
78:92:19:5b:e6:06:33:0c:b4:cc:99:cd:74:49:68:fd:7e:9f:
f3:77:44:83:96:8e:aa:e1:14:03:4e:15:b3:1f:42:36:ff:c2:
f5:38:69:95:94:83:a9:22:16:9a:61:be:b7:b5:ad:97:f9:c9:
12:80:28:c4:9e:b9:c2:7a:25:0e:45:3e:3d:b9:da:fd:43:fa:
7b:59:48:e3:fb:35:8b:7d:79:63:28:55:e4:c2:88:44:a4:78:
ea:98:71:2e:76:27:23:8d:d3:22:02:9c:f4:1d:c3:a5:64:bd:
c7:28:aa:d3:68:f7:5a:9d:07:a8:2e:86:5c:b5:9c:54:c3:d8:
6b:bc:24:9e:05:c6:b0:e4:cc:81:76:24:2c:d8:d3:2d:cd:94:
39:d6:3d:52:6f:24:07:2e:96:bc:af:4a:26:fc:86:5b:cf:88:
7a:a4:4b:fa:f9:00:1a:d6:d2:39:97:36:e4:3e:4f:d2:04:ce:
20:36:54:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 18:46:19 2025 by rpki-client