Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/z_4ppTd9aNTSIpdlEP2Ex76zx1g.roa
File: z_4ppTd9aNTSIpdlEP2Ex76zx1g.roa (raw, json)
Hash identifier: tTXb9SoeLHzxIYz4dS44ZSfGtHwHAhtEO8FKiEL93WM=
Subject key identifier: CF:FE:29:A5:37:7D:68:D4:D2:22:97:65:10:FD:84:C7:BE:B3:C7:58
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 018329DCDA6F82C32D910815C6D81295DFE2
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/z_4ppTd9aNTSIpdlEP2Ex76zx1g.roa
Signing time: Sun 11 Sep 2022 00:04:43 +0000
ROA not before: Sun 11 Sep 2022 00:04:43 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:182:3f1d:a803/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:182:7cb2:99d4/128 maxlen: 128
2001:67c:64:ffff:0:183:1279:659d/128 maxlen: 128
2001:67c:64:ffff:0:182:383f:6b78/128 maxlen: 128
2001:67c:64:ffff:0:183:29dc:c97c/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:29:dc:da:6f:82:c3:2d:91:08:15:c6:d8:12:95:df:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Sep 11 00:04:43 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=cffe29a5377d68d4d222976510fd84c7beb3c758
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:88:a0:15:f0:af:20:5e:23:db:b5:7c:67:c8:
e1:c4:be:74:9c:0a:27:2f:da:bc:35:30:a9:9e:97:
40:7b:2c:27:6a:ec:be:b4:ce:90:b4:8c:0e:5d:f6:
1a:88:be:ae:21:78:65:fe:a8:a7:eb:da:3b:3e:51:
c7:a9:04:c7:6d:e7:df:88:43:64:61:0a:c4:68:8d:
91:e5:7b:37:9d:5a:37:d9:76:3e:be:47:0b:e7:31:
85:e9:1d:32:ef:e6:65:b6:31:81:f8:9f:98:bb:bc:
ae:5a:c0:14:a0:29:94:b2:de:36:ff:39:09:5f:fc:
d6:a8:8e:c1:49:f7:f5:a0:db:36:15:cb:fc:fd:bb:
e6:9b:75:a2:d7:49:8a:ce:af:60:ce:31:ba:61:08:
27:09:c4:e9:22:96:bc:13:05:4d:df:5e:27:53:e4:
82:6b:d5:0e:98:87:40:28:7f:69:cc:db:a4:e4:eb:
ab:52:46:10:91:cb:5d:b7:f3:fa:a1:58:7c:3c:29:
54:25:ad:ee:94:7c:30:6f:f9:4e:43:d5:f6:db:ae:
2a:54:41:1c:5e:8a:e4:b7:68:31:ab:66:4a:42:2f:
e7:7c:26:42:ad:42:df:fc:7f:ad:a9:67:22:7b:d0:
e1:b1:34:7e:61:f4:c1:78:aa:53:48:11:25:22:6f:
88:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:FE:29:A5:37:7D:68:D4:D2:22:97:65:10:FD:84:C7:BE:B3:C7:58
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/z_4ppTd9aNTSIpdlEP2Ex76zx1g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
67:e7:9f:b4:c2:68:7b:de:43:66:46:e4:84:46:b5:f6:fb:7e:
59:bc:31:aa:69:82:0a:29:70:e5:37:a8:1a:f0:b8:51:8a:9a:
f9:73:9f:e5:60:fd:73:be:75:a2:c4:7f:d3:60:cd:88:01:06:
ca:f2:2e:0e:21:70:af:8b:94:6d:2b:db:8b:1a:d1:34:03:94:
11:db:85:97:46:f0:ea:cd:50:e2:15:c8:97:76:d0:3f:2b:c1:
f8:fa:10:af:70:7a:2b:d6:9f:8e:ef:c8:8a:73:dd:d8:c6:77:
fc:e8:05:03:d2:13:e6:1d:ad:ab:76:04:51:ab:c0:ad:ca:ef:
00:7d:43:d3:45:23:fc:05:b9:ff:96:da:09:bd:6e:56:77:31:
66:16:cb:0e:24:d0:00:6a:75:fd:51:de:7e:1a:26:12:5b:8e:
54:d0:5c:b0:13:1b:98:38:fe:0f:5f:a4:41:fe:59:29:ac:38:
1c:42:3c:01:45:99:94:a7:37:b4:49:6f:9c:25:fe:9c:49:6b:
ee:9d:75:58:66:58:9d:2e:46:7b:eb:e9:8d:d7:30:7a:37:82:
fa:97:b9:19:95:68:f7:8f:b4:38:a9:27:77:9b:23:77:4f:f4:
c8:fd:33:b0:46:4c:84:86:63:68:46:cc:8d:de:c7:cc:4e:35:
e5:99:c2:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 21:33:53 2025 by rpki-client