Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/zLyMTuRkVu9Hc9OJFCN7FF4pL38.roa
File: zLyMTuRkVu9Hc9OJFCN7FF4pL38.roa (raw, json)
Hash identifier: VYacec5RDIsT+eX9EcpKdzise6RL2skpyfyTAAZOLW0=
Subject key identifier: CC:BC:8C:4E:E4:64:56:EF:47:73:D3:89:14:23:7B:14:5E:29:2F:7F
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0188E44B8C3E7922EF5626D0D53A3E1ED2F2
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/zLyMTuRkVu9Hc9OJFCN7FF4pL38.roa
Signing time: Thu 22 Jun 2023 18:08:56 +0000
ROA not before: Thu 22 Jun 2023 18:08:56 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:188:5fe2:b396/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:187:4695:a68a/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:188:7858:a003/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64:ffff:0:187:fa9a:b088/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:187:b2b8:a7dd/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:e4:4b:8c:3e:79:22:ef:56:26:d0:d5:3a:3e:1e:d2:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Jun 22 18:08:56 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=ccbc8c4ee46456ef4773d38914237b145e292f7f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:63:48:16:31:32:ed:fa:e1:6f:4a:61:a0:0c:
47:02:0b:62:7a:c7:91:d1:c0:00:f1:60:bc:26:8a:
a6:bc:53:a3:e1:81:55:2d:20:57:a5:c9:d4:7e:c8:
59:a0:35:e7:a6:c8:05:e6:9a:84:48:ff:10:cd:7d:
a6:52:ac:45:93:5e:6e:1c:58:28:b3:23:ed:c1:0f:
6a:cd:78:10:b5:dc:14:10:a9:b0:94:9b:9b:6e:2d:
9c:00:56:e3:f7:68:93:63:08:3a:cd:cb:c9:e3:47:
f2:aa:60:4a:fa:41:71:90:fc:7f:de:13:36:f2:b4:
87:9d:31:90:13:8d:c2:13:f8:2f:2d:f2:b8:17:0a:
a9:6b:dd:dc:29:8f:8d:e1:7c:c4:08:66:c2:d2:fc:
7d:96:9b:c9:8c:95:06:38:d4:47:81:24:a6:9e:9c:
2e:c3:f4:05:5c:52:d8:4c:5a:a2:20:fd:fd:37:5a:
3a:4f:5f:f3:18:1f:56:23:12:61:21:d4:44:03:b1:
ad:03:a3:09:87:8b:c4:61:92:f9:59:b5:53:b4:ef:
2d:c4:9f:2c:d9:c6:5d:b0:00:9e:17:67:7d:5c:9f:
09:70:79:63:5f:c3:01:06:7a:18:92:78:17:02:17:
fb:ea:d6:7a:ea:37:bf:80:22:33:89:41:9f:cf:cd:
39:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:BC:8C:4E:E4:64:56:EF:47:73:D3:89:14:23:7B:14:5E:29:2F:7F
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/zLyMTuRkVu9Hc9OJFCN7FF4pL38.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
b2:59:16:08:26:e1:4c:85:e3:3c:36:58:94:ed:d5:bb:a9:14:
d2:cb:82:14:22:51:5b:00:f3:af:3f:83:62:46:57:ae:51:37:
56:33:28:56:39:d0:69:28:44:94:5d:26:9f:35:3b:a8:b1:34:
7d:ca:0f:33:10:fc:06:58:bd:35:9e:79:3a:9c:bc:5f:03:b5:
3f:be:f1:70:44:d9:25:ad:83:79:31:e5:0a:36:11:ce:69:1b:
6c:e3:1e:fa:87:98:42:35:51:9e:ad:40:f2:64:a8:f5:db:7a:
86:ea:7c:ae:75:7a:b7:25:de:9b:23:9c:80:12:f6:4d:c6:87:
94:e1:c5:60:e7:b7:e8:1e:ee:15:b1:79:78:77:fd:b6:3f:87:
b0:72:e6:60:dd:d2:0b:80:23:34:78:51:dc:8d:41:6f:21:7f:
b5:42:78:a2:7a:3b:fe:6e:68:bf:1c:a8:8e:7f:92:90:0e:97:
a5:81:59:e2:30:ff:e8:c2:f0:ab:23:52:cd:86:1f:11:4d:57:
72:2c:81:e0:07:e7:56:99:86:95:3b:d8:85:7f:f8:ae:85:ff:
e5:6d:9c:7c:3c:5c:22:22:0a:66:59:7e:56:cf:b1:91:69:8f:
de:4a:92:70:4c:f6:1a:a6:70:e8:b5:24:f3:46:38:b1:e5:05:
72:e2:8a:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 00:33:22 2025 by rpki-client