Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/zNTLvNP3M0ObjI5GFa4LJ4tbmWA.roa
File: zNTLvNP3M0ObjI5GFa4LJ4tbmWA.roa (raw, json)
Hash identifier: lSzVjTT1ztUFIXjQtr1tsquRVTARrzuldGyDUPJT5wQ=
Subject key identifier: CC:D4:CB:BC:D3:F7:33:43:9B:8C:8E:46:15:AE:0B:27:8B:5B:99:60
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0188C78AD483404E132425D885032509C319
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/zNTLvNP3M0ObjI5GFa4LJ4tbmWA.roa
Signing time: Sat 17 Jun 2023 04:09:04 +0000
ROA not before: Sat 17 Jun 2023 04:09:04 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:188:5fe2:b396/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:187:4695:a68a/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:188:7858:a003/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64:ffff:0:187:fa9a:b088/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:187:b2b8:a7dd/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:c7:8a:d4:83:40:4e:13:24:25:d8:85:03:25:09:c3:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Jun 17 04:09:04 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=ccd4cbbcd3f733439b8c8e4615ae0b278b5b9960
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f2:24:71:75:66:90:21:3d:3e:d6:53:c4:4f:66:
f9:8e:b1:f5:6b:48:f6:b5:55:5d:f2:38:04:e5:58:
d7:63:32:5e:db:f5:7f:55:c6:69:24:84:46:8c:3e:
16:58:ec:1a:bb:77:2d:81:4a:c9:b3:b2:e0:e6:ea:
28:99:79:79:8f:10:2e:17:82:95:fa:94:31:0d:b8:
18:ea:00:34:d6:50:a6:23:36:32:4a:34:42:36:08:
01:05:7e:67:b2:ac:6a:b9:18:ea:62:94:b9:74:55:
05:dc:f5:cb:5a:9b:f9:a2:ba:1a:cc:08:5d:1f:34:
c5:94:ad:44:00:cd:18:d1:f0:e3:d2:ef:40:c7:16:
8e:4f:1a:40:7b:bc:2a:37:f3:57:6f:c3:dc:3a:57:
2c:51:c9:4a:60:19:1b:d3:58:1d:5e:96:c6:31:dc:
db:08:f3:ef:1c:a8:69:67:06:f7:e6:10:a3:cf:e9:
44:4d:26:15:f8:f0:60:d3:62:48:07:5b:da:2f:f6:
b4:bd:42:fe:b2:75:9f:76:d8:98:c2:51:f5:f6:67:
16:06:dd:f6:41:f1:f4:32:b4:61:d0:90:e2:d3:70:
4b:92:0c:b8:12:10:20:f3:ee:d6:d4:3e:1e:cc:dd:
8b:ec:82:b8:02:4a:e7:c0:ec:c3:c8:07:c3:b9:67:
20:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:D4:CB:BC:D3:F7:33:43:9B:8C:8E:46:15:AE:0B:27:8B:5B:99:60
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/zNTLvNP3M0ObjI5GFa4LJ4tbmWA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
85:1a:51:20:22:67:b5:8c:84:4f:89:8b:1b:32:38:04:8d:2d:
cc:a3:10:ac:92:04:28:7d:a7:3b:9e:db:a9:de:63:66:59:69:
81:81:d9:56:5a:61:0f:0c:6a:4f:0d:d8:e7:8b:31:70:42:67:
25:e9:f4:d2:a3:14:01:41:e9:ba:21:a6:91:ac:2f:51:7b:40:
68:2b:17:91:8c:15:80:3c:b1:f3:5d:46:30:41:e5:05:59:55:
af:07:5c:94:25:fb:59:36:6c:fe:8d:30:cd:f8:cd:e0:51:e7:
64:ec:f6:62:b5:f6:6c:7b:d2:c9:43:a2:43:1c:35:7e:82:66:
8f:c9:4b:fe:cd:c5:a3:90:a6:72:7b:55:18:33:93:91:2a:a2:
f2:98:e7:1a:7a:7f:0d:57:e7:62:a6:e8:06:ab:bc:c7:e2:ad:
99:04:ae:13:2b:55:2c:d2:30:22:05:39:a6:c8:7b:c8:71:66:
0e:93:ab:d0:3d:67:c1:79:a3:e4:d4:40:7a:be:b1:6d:9f:14:
32:37:83:74:59:a4:6e:26:a6:e7:9c:7a:94:15:f4:71:08:d2:
97:20:86:9e:a0:a0:de:9a:2f:5c:73:0c:66:b7:51:04:17:ae:
03:fe:e6:e0:d4:47:95:44:b2:a6:a1:53:f3:e1:8a:3b:f5:90:
e6:55:5d:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 18:45:11 2025 by rpki-client