Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/zX-YUEsekHHA2EjrrDD5imjsldc.roa
File: zX-YUEsekHHA2EjrrDD5imjsldc.roa (raw, json)
Hash identifier: JzKXPnen1ihzhmGxmQJvZdpOI5SxPxqJBiHFCZXa298=
Subject key identifier: CD:7F:98:50:4B:1E:90:71:C0:D8:48:EB:AC:30:F9:8A:68:EC:95:D7
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 01899B8E6241A6137ACFC22C7134ECFB3CA8
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/zX-YUEsekHHA2EjrrDD5imjsldc.roa
Signing time: Fri 28 Jul 2023 08:12:26 +0000
ROA not before: Fri 28 Jul 2023 08:12:26 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:188:7858:a003/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:9b:8e:62:41:a6:13:7a:cf:c2:2c:71:34:ec:fb:3c:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Jul 28 08:12:26 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=cd7f98504b1e9071c0d848ebac30f98a68ec95d7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:3b:cc:83:11:97:5a:01:0b:e5:8a:d3:d8:77:
a7:13:16:91:94:19:5c:9a:64:b5:60:3b:bd:cb:42:
07:8e:db:67:18:de:d3:60:3b:70:0c:b8:27:e4:87:
d9:89:98:c8:88:7a:d3:b9:0e:b4:b1:9a:ee:c9:c2:
3b:ee:fa:43:c7:3a:31:8f:98:8f:bd:5f:02:cf:1f:
50:72:fe:ee:0d:3e:e3:a1:38:11:5c:15:62:98:38:
2a:b5:12:35:53:db:8e:84:17:7a:81:1a:e8:40:db:
cc:e1:36:97:4f:98:a2:a7:21:5c:d3:cb:74:d1:63:
fc:17:2f:1f:71:50:86:68:01:7c:53:b5:f8:c5:ef:
73:6a:d6:c0:45:24:ee:11:34:10:64:2a:ad:da:b3:
f9:3c:e7:58:03:c0:8e:d5:cd:de:22:63:ef:14:4e:
5e:26:24:b4:90:97:25:1f:7b:80:44:1d:12:55:89:
cf:48:da:b7:e9:03:0a:8e:82:8c:dc:0b:fc:3b:b7:
c3:49:0a:2d:d7:0a:a4:da:68:1c:f8:ff:6b:57:7d:
b0:67:2f:b2:c8:31:75:00:35:fb:21:95:4c:de:c3:
d3:5c:12:2a:05:61:ec:ff:05:ba:9f:db:77:54:01:
c2:23:c0:28:26:4b:3f:0e:af:32:0d:0e:cc:2b:f5:
71:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:7F:98:50:4B:1E:90:71:C0:D8:48:EB:AC:30:F9:8A:68:EC:95:D7
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/zX-YUEsekHHA2EjrrDD5imjsldc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
71:c0:8a:b5:38:2d:4c:ce:e8:ab:0b:ea:69:49:31:81:36:98:
00:78:1d:1c:a7:f3:f4:44:e1:fe:0c:e0:a0:7c:63:15:b6:b0:
4c:69:73:88:4f:80:bb:ab:09:bb:0d:1b:74:a2:74:9e:5e:e7:
0e:9c:51:08:da:d1:89:09:de:58:df:dc:02:b6:cf:9b:fe:6e:
c2:04:55:19:75:25:f2:00:25:e1:3a:80:22:ab:fe:41:00:0f:
f9:a3:c9:66:76:e3:2e:a2:d4:38:de:3c:9f:f5:47:49:9a:53:
c7:ec:e1:dc:60:58:0c:df:03:b4:56:92:2a:fa:e8:ea:f9:7c:
50:b4:96:45:9a:18:68:82:c9:b0:9e:b6:7a:16:f2:be:ea:ef:
19:df:f2:9f:8e:e0:5a:41:27:1d:b2:13:88:da:50:f2:b1:1b:
2b:56:56:18:00:df:c0:12:9c:08:6a:e8:ec:a9:ee:be:d6:04:
5e:75:5a:63:6d:5a:31:1a:69:74:01:49:30:8c:8d:9e:08:3a:
13:27:61:61:46:ce:cf:17:4a:ef:ba:7d:c5:b4:96:16:b2:39:
27:7d:af:d8:28:50:9e:96:b1:05:a6:71:60:86:ca:1f:d4:33:
e9:8d:8b:ac:11:b6:86:7e:7a:8d:64:4b:6e:6d:da:a2:ed:59:
fc:e6:c5:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 01:45:32 2025 by rpki-client