Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/zOzJTlmAdOZ7guyLabyToOLN5LY.roa
File: zOzJTlmAdOZ7guyLabyToOLN5LY.roa (raw, json)
Hash identifier: /DhE+EMmAAgX3uvnCZuUDF3eSWm0wntuT+gATNjt1mE=
Subject key identifier: CC:EC:C9:4E:59:80:74:E6:7B:82:EC:8B:69:BC:93:A0:E2:CD:E4:B6
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 018503E1AF0819CF1EB3F95262B1D575FA80
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/zOzJTlmAdOZ7guyLabyToOLN5LY.roa
Signing time: Mon 12 Dec 2022 01:10:00 +0000
ROA not before: Mon 12 Dec 2022 01:10:00 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:03:e1:af:08:19:cf:1e:b3:f9:52:62:b1:d5:75:fa:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Dec 12 01:10:00 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=ccecc94e598074e67b82ec8b69bc93a0e2cde4b6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:8e:86:04:f2:a3:c1:15:5c:6d:80:95:b9:71:
28:5a:9b:1a:5e:21:48:1f:5f:35:fe:ac:7e:a2:ac:
b7:44:b9:b4:6d:97:d6:a2:8a:0e:6c:fa:1f:18:88:
32:89:0d:d9:dc:ab:e7:ff:40:d7:6b:67:b1:d2:52:
93:64:58:7b:28:93:21:dd:31:03:a5:81:5c:33:ee:
b8:17:ce:b3:e6:07:c0:49:92:65:6c:d2:37:ce:b0:
33:73:b5:55:97:65:19:4b:a4:d2:f7:87:13:d7:64:
21:74:3e:b5:34:bc:1d:28:99:a0:4d:1f:6d:cc:35:
51:d0:d0:6d:fb:57:89:ab:66:f6:2c:8a:b8:d5:a3:
73:d6:ab:b3:13:95:c4:12:d5:61:eb:ef:35:5a:af:
d7:88:94:46:c5:f5:d5:e4:08:32:96:34:63:1a:65:
da:0a:03:8d:c5:a8:be:fe:40:e8:a3:c5:0e:be:25:
03:e2:b0:66:84:40:cf:cc:fb:f1:4e:91:ae:94:0d:
46:b2:ca:cf:c7:83:e1:72:9a:b5:07:4f:6f:b6:6a:
7e:91:ef:2e:44:0a:41:8f:93:9b:7f:e2:21:69:8e:
d0:8a:a0:61:53:9b:e5:3f:b1:a7:fe:68:8d:34:2e:
50:61:13:2b:59:ec:58:3d:2d:a6:b0:ad:6a:42:94:
39:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:EC:C9:4E:59:80:74:E6:7B:82:EC:8B:69:BC:93:A0:E2:CD:E4:B6
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/zOzJTlmAdOZ7guyLabyToOLN5LY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
4d:30:74:11:38:a1:c3:f6:29:22:16:5c:34:4e:2c:9c:d6:5c:
88:de:bb:62:59:fd:78:ba:0d:3b:77:d5:2a:da:27:00:5a:e3:
3e:bc:0e:4d:4e:87:95:0b:df:05:bb:73:72:0f:e5:03:f3:1c:
4e:72:5c:36:b5:38:9f:a0:83:57:6f:dc:5f:74:ee:1b:fd:2d:
07:b3:8c:aa:d6:ad:13:70:52:86:a0:6c:8f:4e:46:57:71:46:
4f:3b:d9:b7:c1:66:03:1a:fc:9b:fe:98:46:c5:e9:65:fd:bb:
d7:23:bf:2a:e0:5c:07:c8:a3:0e:49:4c:d3:77:3d:44:8d:c5:
b5:93:86:c3:61:44:74:f6:98:b9:1c:7a:ea:40:c0:42:b7:2e:
ac:f1:1a:46:3b:5d:2f:94:23:13:cf:08:1a:0d:7c:11:95:d4:
45:e6:38:5d:21:d2:11:da:de:64:79:49:12:24:87:4e:40:41:
52:23:79:c5:95:c2:62:66:bc:c7:45:7d:97:0e:e0:32:93:d9:
5e:73:af:bd:df:3b:97:3f:0d:70:d0:cf:da:e4:25:43:da:74:
da:22:b2:cf:ea:9c:a5:04:9d:e0:05:4c:db:bf:d8:0c:55:1a:
52:c6:57:04:b5:64:16:d9:bf:88:2a:82:68:3a:78:4a:cb:40:
73:a8:81:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 17:38:48 2025 by rpki-client