Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/zZaoOF0dvuYpAgWHHGXFdhilL8w.roa
File: zZaoOF0dvuYpAgWHHGXFdhilL8w.roa (raw, json)
Hash identifier: YxC2f8GTMjjKMgz39+R9BGN4MRu/w01S+How4iJ2P6s=
Subject key identifier: CD:96:A8:38:5D:1D:BE:E6:29:02:05:87:1C:65:C5:76:18:A5:2F:CC
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 018216CE6C9446C6FDA4F3DC8B7F7BE8316B
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/zZaoOF0dvuYpAgWHHGXFdhilL8w.roa
Signing time: Tue 19 Jul 2022 14:13:23 +0000
ROA not before: Tue 19 Jul 2022 14:13:23 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:16:ce:6c:94:46:c6:fd:a4:f3:dc:8b:7f:7b:e8:31:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Jul 19 14:13:23 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=cd96a8385d1dbee6290205871c65c57618a52fcc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:66:c5:dc:77:4a:38:b9:f0:f4:59:0b:a8:f8:
4e:f8:15:28:4c:26:01:27:40:38:c6:6e:7b:59:3e:
e6:4d:1d:fe:47:63:6c:b3:80:29:6a:1e:8b:10:23:
d4:85:d4:75:5b:5c:f0:94:3f:d7:bb:43:12:36:82:
b8:44:c2:0d:be:4c:18:09:b1:86:a4:60:0f:b8:77:
8f:bc:df:45:8c:9b:a7:96:01:3c:ee:4d:62:7a:13:
2a:67:a7:0e:2a:d1:32:23:cf:56:53:2f:c5:3e:4e:
6d:87:86:e4:0b:7a:c6:79:21:27:37:20:14:81:d6:
57:72:de:8d:75:4b:f0:42:cb:d9:fb:2f:6b:83:86:
b6:f3:6f:ce:41:e8:cd:71:cf:68:3c:94:65:14:b4:
cb:15:d3:3c:38:5a:a3:b2:e9:f9:23:ad:3e:7f:a2:
dc:42:db:4e:27:f4:33:75:4d:aa:fe:a9:cb:39:97:
a4:5c:0a:05:8d:26:24:e4:62:24:2a:b9:54:e1:9e:
d9:12:ce:0a:32:5a:f0:6b:e6:68:b0:e2:6a:93:ea:
5a:10:84:05:9e:0f:fb:ee:cb:c7:3d:3d:5c:31:6d:
33:1d:97:ac:74:39:e4:ad:c6:3e:fe:c2:4f:08:36:
fc:3d:4d:79:90:2a:51:84:3d:53:0e:99:56:46:e8:
11:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:96:A8:38:5D:1D:BE:E6:29:02:05:87:1C:65:C5:76:18:A5:2F:CC
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/zZaoOF0dvuYpAgWHHGXFdhilL8w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
3f:b2:3e:a6:8e:b0:1e:9c:b5:3d:7f:41:0b:53:a4:83:b5:06:
55:ef:40:3e:a2:19:cc:69:19:93:23:9b:4f:a1:e6:5d:53:41:
cc:58:bb:d3:13:89:ca:66:fc:1b:e8:d1:fa:e8:58:d8:b7:d6:
93:58:cb:a6:3c:7a:ca:b4:8d:2e:ed:51:53:f7:a0:22:ff:fb:
8e:e0:c7:1e:ca:cb:a1:4f:6d:a1:7f:93:7c:f5:bd:d8:5c:e5:
ba:41:09:72:43:62:36:34:19:3a:c3:7b:8b:ca:22:80:c9:2c:
0a:77:c4:2d:73:4f:84:e0:a7:63:75:bd:a6:c8:2c:34:9e:5f:
55:a5:3e:67:c4:ef:1f:dc:61:7c:f2:30:bf:e7:cd:06:50:0c:
1b:e4:3c:aa:11:40:10:58:da:f8:5e:f0:9b:05:56:d0:b8:37:
8b:65:84:0d:6e:bc:7f:4d:eb:46:b5:7a:7d:46:ad:8e:e8:01:
06:12:62:1d:aa:b8:7f:c7:d7:84:30:1b:6b:0c:73:c4:c2:00:
03:e5:9f:af:d4:1d:82:c0:40:94:84:87:0d:60:7e:50:6d:9c:
24:fd:cc:2d:55:55:cd:83:76:71:fa:be:74:7c:4c:67:6f:4f:
01:a0:23:46:38:45:e5:7a:64:79:6f:7c:63:30:86:27:bd:08:
78:44:89:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 20:23:40 2025 by rpki-client