Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/zZiWnU2rSS9INLlWuLDnWp8mMI0.roa
File: zZiWnU2rSS9INLlWuLDnWp8mMI0.roa (raw, json)
Hash identifier: oQl3ztDfuwN9f0sR1dPzxnP90tA8xrEK+JDtE+35r6Y=
Subject key identifier: CD:98:96:9D:4D:AB:49:2F:48:34:B9:56:B8:B0:E7:5A:9F:26:30:8D
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 68C954C9
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/zZiWnU2rSS9INLlWuLDnWp8mMI0.roa
Signing time: Mon 07 Feb 2022 23:04:34 +0000
ROA not before: Mon 07 Feb 2022 23:04:34 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:17e:d592:92a4/128 maxlen: 128
2001:67c:64:ffff:0:17e:d600:60b0/128 maxlen: 128
2001:67c:64:ffff:0:17e:a0dd:2f5b/128 maxlen: 128
2001:67c:64:ffff:0:17e:d524:ead9/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:17e:d55b:c264/128 maxlen: 128
2001:67c:64:ffff:0:17e:d66e:8559/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1758024905 (0x68c954c9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Feb 7 23:04:34 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=cd98969d4dab492f4834b956b8b0e75a9f26308d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:85:a3:9d:c4:98:70:44:0c:3a:02:11:63:ff:
16:14:62:85:76:df:94:d6:e9:00:73:ba:29:78:e6:
e2:4c:c8:e9:6f:f3:79:9c:ac:50:f1:2f:30:33:e8:
74:7c:e7:86:f9:61:e5:37:7f:75:99:99:f6:3d:da:
c6:0e:c8:c7:d6:e0:ec:3b:bc:6a:b5:3a:a4:c7:9d:
06:9a:7d:ce:29:8d:27:58:f5:18:0f:af:27:dc:0e:
14:6b:16:99:ef:e0:0c:56:6a:a1:fb:1f:43:24:07:
6e:05:7b:03:e9:44:68:53:5e:a6:31:bb:d9:de:b7:
9c:47:57:25:37:9f:2c:8f:d8:1f:73:f3:c4:95:3e:
06:65:e9:86:9a:b7:6b:e6:8a:29:89:59:3b:39:c7:
0c:93:2e:22:fc:33:5a:34:70:91:fb:9a:89:51:91:
6b:7a:db:55:f0:8d:bc:4d:85:f5:36:1a:85:21:08:
43:eb:fb:63:ee:17:aa:ad:f8:2d:01:cb:68:e6:1f:
de:4a:21:36:9e:2d:47:8d:6d:df:fd:a5:19:a3:ac:
f4:fe:fd:99:26:36:df:c5:6d:85:19:cc:7e:59:9e:
a7:20:32:a3:00:50:48:6e:a5:38:df:4b:bf:d8:5f:
89:d9:9b:94:a1:3b:df:59:00:ac:70:df:79:0c:6c:
df:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:98:96:9D:4D:AB:49:2F:48:34:B9:56:B8:B0:E7:5A:9F:26:30:8D
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/zZiWnU2rSS9INLlWuLDnWp8mMI0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
7d:fc:51:eb:e3:26:1c:7c:88:86:d8:9c:aa:81:68:22:15:6d:
87:58:50:95:9b:1b:5b:8d:8a:6c:f5:9f:13:e7:e3:16:28:da:
25:49:df:a2:e6:6a:c0:38:65:f4:96:42:e9:ab:ad:15:cb:3f:
84:ad:57:3a:da:a6:33:fe:ab:6c:24:8f:be:68:d5:b7:46:99:
ae:29:01:57:2d:d8:26:90:36:1f:c7:ac:7a:6e:72:e9:54:4f:
1b:e1:53:fe:bb:cb:8e:99:09:ea:cd:93:a5:5b:91:ba:bf:c6:
9d:09:05:c7:22:cd:2b:0d:d9:ae:be:1b:ee:3a:22:4f:62:bd:
08:7c:05:7d:02:cd:b3:1f:b1:3e:df:cb:ed:37:f8:58:59:9e:
fe:f5:31:b6:cd:89:8b:cd:3a:aa:16:03:cd:2b:9f:b3:8c:6b:
bb:3d:93:4d:a5:81:25:e7:84:a7:c5:ac:4e:af:43:a7:41:91:
91:4f:ac:07:c2:62:a3:a0:7d:22:1e:24:10:e8:33:78:9e:1d:
2b:88:5d:dc:6c:c0:06:bd:0f:c3:6e:db:8d:11:00:f3:7f:d7:
08:4a:15:a6:0c:08:59:26:a9:02:66:16:88:f2:be:49:e1:0e:
cd:05:c5:d1:76:a3:d6:65:8b:02:78:b6:d6:42:03:e1:71:89:
c5:02:7e:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 00:43:38 2025 by rpki-client