Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/zIIZXj7st-Rhx9lV10VUHuph2R4.roa
File: zIIZXj7st-Rhx9lV10VUHuph2R4.roa (raw, json)
Hash identifier: wYglCXoogoO5x2IIu/NqbKaz+vSWGWZia0L4cQjrlp0=
Subject key identifier: CC:82:19:5E:3E:EC:B7:E4:61:C7:D9:55:D7:45:54:1E:EA:61:D9:1E
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 01872B24423577CCFE29DDC848AD4EBAF8E5
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/zIIZXj7st-Rhx9lV10VUHuph2R4.roa
Signing time: Wed 29 Mar 2023 02:13:29 +0000
ROA not before: Wed 29 Mar 2023 02:13:29 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:2b:24:42:35:77:cc:fe:29:dd:c8:48:ad:4e:ba:f8:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Mar 29 02:13:29 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=cc82195e3eecb7e461c7d955d745541eea61d91e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:4a:44:c0:64:c3:92:5a:43:c3:6f:87:71:1b:
85:62:0e:87:22:aa:6a:31:af:f5:7c:62:e0:4a:69:
c6:ab:32:ce:d2:c5:3d:5f:1c:92:a6:02:64:97:85:
b5:87:21:06:21:d7:f1:63:27:ad:24:b4:dc:91:92:
43:7a:b3:ea:db:cc:25:f8:2e:5a:05:1a:b4:bb:4a:
7b:3a:26:0d:d5:d6:ee:82:a5:65:5f:61:00:f4:9f:
a6:d4:7a:87:d7:67:02:d0:ee:90:7f:c8:46:81:5c:
72:bd:2a:ba:ae:25:30:7c:72:a4:da:02:bd:f8:46:
e5:eb:04:50:04:c0:9c:f2:c7:db:7b:ec:6b:f4:b3:
66:2e:3a:8d:8e:59:3c:0c:40:e0:cf:4a:42:6d:57:
d4:80:fe:6c:56:9d:3e:d3:d5:00:54:ca:0f:75:a6:
17:26:06:54:ad:56:b3:7a:84:0e:a6:50:a5:f4:26:
10:38:db:c6:2b:06:90:1a:63:ef:83:68:44:31:48:
51:27:0b:a0:2d:7f:0e:eb:cd:fa:75:d8:6b:ef:e6:
b9:36:d6:33:60:51:cc:e4:61:6c:f5:b3:28:9c:e3:
9c:0e:b4:ab:7f:b7:03:6e:96:52:5d:33:2a:ee:25:
84:29:69:83:ac:27:d3:d4:cd:9f:b5:15:37:92:26:
35:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:82:19:5E:3E:EC:B7:E4:61:C7:D9:55:D7:45:54:1E:EA:61:D9:1E
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/zIIZXj7st-Rhx9lV10VUHuph2R4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
23:29:11:ae:a5:59:a8:87:76:1b:92:f9:f9:0b:94:f6:e9:c7:
b3:48:a9:ca:c3:a7:6f:32:d2:ea:ba:c3:8d:e0:b8:0e:7b:38:
24:2f:9e:a4:60:36:80:da:24:b8:15:f1:c8:26:52:59:3c:3b:
fa:10:3f:09:5b:8c:8a:6a:05:df:e0:3c:bd:66:1c:31:98:5b:
c1:9f:5d:6c:90:ee:ed:74:70:50:8e:5a:8d:f6:93:54:a6:37:
ca:7e:4a:b1:9b:51:31:93:6b:6b:77:3c:86:09:d0:20:3c:38:
a4:fc:e2:08:a6:96:48:cd:ef:8f:61:c3:11:04:a1:bc:8c:c7:
8c:d3:6d:de:0c:c8:4e:00:74:54:65:f9:b6:b2:b2:c7:42:ca:
72:7a:ae:40:13:c0:59:ce:d6:41:d1:09:2d:b8:0a:04:eb:80:
7d:86:50:37:51:f9:d4:96:97:29:2c:78:93:be:ba:4a:26:97:
fa:c4:f7:01:93:89:d9:ab:4d:6b:9f:ee:6b:b8:d8:49:54:02:
ed:78:4c:11:85:e0:7e:08:22:bb:89:2d:ff:85:b0:df:b0:26:
c1:eb:1b:24:13:eb:f0:50:c6:38:e7:e6:1a:8b:54:0e:1c:0b:
08:31:01:03:3c:00:9f:13:ef:d3:4e:83:fa:dd:8c:d0:f2:33:
12:ae:14:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 12:52:45 2025 by rpki-client