Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/z_outPNz_NqxYGWykjMquIkwmNA.roa
File: z_outPNz_NqxYGWykjMquIkwmNA.roa (raw, json)
Hash identifier: QoiXmc4IOmavnHVyLQGLgK/Ao1kXYg0i/PnIZfYv7kY=
Subject key identifier: CF:FA:2E:B4:F3:73:FC:DA:B1:60:65:B2:92:33:2A:B8:89:30:98:D0
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 018405341B81512FC0935CA9FF2992A9A4A6
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/z_outPNz_NqxYGWykjMquIkwmNA.roa
Signing time: Sun 23 Oct 2022 14:16:51 +0000
ROA not before: Sun 23 Oct 2022 14:16:51 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:05:34:1b:81:51:2f:c0:93:5c:a9:ff:29:92:a9:a4:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Oct 23 14:16:51 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=cffa2eb4f373fcdab16065b292332ab8893098d0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:59:30:ff:42:32:d3:42:bf:9b:75:0f:93:78:
b8:7f:fa:b1:c2:fc:30:12:fb:6e:4f:49:eb:9b:11:
18:10:aa:4e:64:13:19:d6:f7:c2:17:26:3e:2d:f1:
3e:4a:ea:59:ad:94:0c:c9:04:15:d4:3b:59:f8:ee:
52:57:3a:08:7f:2b:28:c2:4a:a9:2a:30:23:09:ab:
3e:dc:05:1d:f2:1a:76:60:30:5d:9a:49:2d:d3:66:
44:0a:82:81:d5:b3:21:44:e3:b3:bc:a0:38:42:97:
b0:d0:88:3d:61:34:5d:3a:61:43:31:02:24:ad:2f:
c5:c9:7c:8d:9a:37:bc:10:88:4b:7f:93:56:84:d5:
28:90:51:76:6b:c7:26:0f:e4:20:85:2a:1a:e6:26:
e4:5f:d4:2e:d3:81:93:42:a9:48:80:ac:30:39:ab:
1a:0d:16:84:ff:69:61:a3:7a:b9:3a:29:3b:01:af:
01:ed:10:75:4e:ce:24:25:0b:eb:14:62:6e:29:4b:
0a:e8:96:96:51:d1:d7:a1:29:37:74:18:13:8a:47:
ec:37:89:d4:80:8c:62:4e:b0:38:95:04:4b:6c:ef:
61:4a:a1:cb:d9:d6:ae:d0:0b:1e:3b:1f:80:d8:6c:
09:29:18:e9:a3:14:3b:e1:1a:08:10:54:fa:ff:92:
c9:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:FA:2E:B4:F3:73:FC:DA:B1:60:65:B2:92:33:2A:B8:89:30:98:D0
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/z_outPNz_NqxYGWykjMquIkwmNA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
b5:7a:fb:73:45:0a:2d:e0:8a:ee:2c:9a:f3:9e:90:de:d8:f8:
3e:a0:1c:ba:65:7b:7d:36:78:36:b7:60:b2:ab:f1:e9:62:07:
cc:d9:dd:b0:99:5c:06:3f:7b:63:51:68:3d:b6:12:6c:00:18:
9c:e9:49:bb:1a:35:30:76:40:d3:ce:3d:f1:1b:d1:3a:06:85:
de:95:d3:a3:57:3b:8b:69:fc:6d:b1:05:42:4e:75:53:b6:1e:
ff:a7:21:a8:0a:c8:5b:5b:89:3b:64:85:04:6c:1a:79:ac:4c:
d8:2f:02:c6:a3:a2:6e:ce:5e:3f:80:70:e3:b2:44:8c:74:57:
77:37:ee:a9:58:05:ca:cb:c6:bd:b3:e7:7b:25:eb:40:f9:f5:
81:59:99:73:98:d2:c3:90:60:90:55:46:98:ce:bf:82:fe:14:
f3:d3:02:c2:bf:20:1a:3e:c8:7b:b6:6c:37:4b:51:77:35:bf:
d4:af:4d:ef:58:69:ca:3a:07:c9:44:b7:34:9b:ac:4c:fb:de:
eb:85:46:25:58:f2:00:88:0a:e8:b6:51:e8:17:52:6d:90:d3:
1e:00:18:a7:d8:88:24:d4:a4:d6:36:d8:be:6d:19:a3:28:53:
46:9c:2d:fc:30:f8:af:ee:d7:1e:19:72:52:3c:f0:8b:dd:0b:
20:a3:5e:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 16:37:28 2025 by rpki-client