Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/zWXKMV2-8z8L_gYX8-1nfkSpZWg.roa
File: zWXKMV2-8z8L_gYX8-1nfkSpZWg.roa (raw, json)
Hash identifier: hRlYqsu1V9KqPgf7nagvCEpI1ZCgcIYTtP3vtklo5L4=
Subject key identifier: CD:65:CA:31:5D:BE:F3:3F:0B:FE:06:17:F3:ED:67:7E:44:A9:65:68
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0182B560CB132E7EB2A4FE18498FC261D4D4
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/zWXKMV2-8z8L_gYX8-1nfkSpZWg.roa
Signing time: Fri 19 Aug 2022 09:13:15 +0000
ROA not before: Fri 19 Aug 2022 09:13:15 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:182:3f1d:a803/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:182:7cb2:99d4/128 maxlen: 128
2001:67c:64:ffff:0:182:383f:6b78/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:b5:60:cb:13:2e:7e:b2:a4:fe:18:49:8f:c2:61:d4:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Aug 19 09:13:15 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=cd65ca315dbef33f0bfe0617f3ed677e44a96568
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:33:7a:7f:1e:7b:f2:57:09:9e:b6:88:6b:cc:
ec:6f:2f:62:c5:62:66:ac:88:2d:44:74:31:0a:83:
71:6f:52:4b:12:1b:96:b0:6d:59:9a:b0:b3:13:f9:
d6:82:0f:f6:ba:e6:e5:49:1c:7d:07:72:49:95:2c:
76:ec:2b:cf:5f:23:2a:c1:29:8b:a8:14:df:a2:aa:
36:05:3c:67:1d:88:bd:7d:da:50:cc:5a:90:80:6d:
9e:36:18:16:6b:f2:05:54:f8:71:e9:53:44:1e:a9:
4a:be:23:42:f3:66:81:5f:df:d7:68:65:da:62:50:
7d:5b:0e:05:e3:82:b2:33:34:1a:df:90:2f:4e:94:
92:d6:20:6e:87:30:5d:9f:ad:a7:e9:a9:8e:69:c3:
3f:70:4e:1b:12:e5:ed:96:12:b5:17:9a:4e:04:29:
8f:69:85:c6:6c:5e:13:85:c1:78:ca:12:73:02:5b:
2b:bf:97:d3:42:ad:18:1e:ae:3b:56:79:18:44:05:
ed:e5:eb:80:ac:00:94:c7:ee:a2:9d:6e:45:40:af:
da:6d:c7:19:95:c8:3c:f6:98:f5:b7:95:cd:0f:9a:
67:1f:4a:a0:de:e5:42:ff:f9:e5:66:4c:56:1d:00:
1b:0e:f8:eb:f9:a9:99:8c:56:b0:fc:13:a0:ad:8a:
ee:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:65:CA:31:5D:BE:F3:3F:0B:FE:06:17:F3:ED:67:7E:44:A9:65:68
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/zWXKMV2-8z8L_gYX8-1nfkSpZWg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
9a:7e:c7:57:48:68:60:ac:89:6b:c8:03:c2:20:4d:bc:81:b5:
2d:45:82:ed:a7:b2:63:8d:96:0c:3c:fe:24:f3:11:98:b3:0a:
01:57:08:32:6b:f7:4d:5e:d4:20:9d:d1:85:c8:9b:b3:ac:1d:
3a:c0:33:4b:56:55:85:79:31:20:a6:76:1e:08:84:b2:00:fa:
09:c7:ca:e7:73:b2:7d:b5:6c:4d:8a:e7:34:00:7c:75:6d:0f:
a3:94:b1:2f:ef:a0:a5:33:ac:26:f1:fc:52:4e:57:24:f3:1e:
26:8b:5b:42:b2:60:40:84:e3:60:de:2c:ac:b7:0f:47:38:ac:
79:c8:86:65:5b:de:28:db:c6:d8:63:7a:d3:05:e8:6a:b8:23:
e0:ae:4f:56:2d:ad:2b:b5:c4:fd:ab:8e:79:66:0e:55:44:60:
22:a4:d3:7e:5a:c3:59:84:fc:4b:6f:62:e5:b5:73:9e:76:d8:
48:a5:a0:dc:16:c1:01:52:67:73:e3:0e:58:5a:3f:d0:f8:50:
c8:75:0c:c8:a2:b7:3a:2c:92:9e:0e:25:e8:5b:e1:7a:4f:00:
da:c5:53:10:63:4d:c7:f9:17:6d:f3:90:3d:0b:d9:7e:fa:4b:
b0:d2:aa:10:0a:4a:05:3e:ff:0f:a9:d4:22:45:4d:f0:63:bf:
40:d2:a0:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 17:35:47 2025 by rpki-client