Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/zeGBkQqOYsSCEC9UgxkRPFaZCHo.roa
File: zeGBkQqOYsSCEC9UgxkRPFaZCHo.roa (raw, json)
Hash identifier: dID7NcauIBPEN/Z1JXu/FxsZUd51qSoy7lfpwzjzXiE=
Subject key identifier: CD:E1:81:91:0A:8E:62:C4:82:10:2F:54:83:19:11:3C:56:99:08:7A
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0187F5AFB3BD51DC63CBF82B47926C43EB16
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/zeGBkQqOYsSCEC9UgxkRPFaZCHo.roa
Signing time: Sun 07 May 2023 10:09:05 +0000
ROA not before: Sun 07 May 2023 10:09:05 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:187:4695:a68a/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:187:b2b8:a7dd/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:f5:af:b3:bd:51:dc:63:cb:f8:2b:47:92:6c:43:eb:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: May 7 10:09:05 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=cde181910a8e62c482102f548319113c5699087a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:8e:f5:59:d1:6e:ed:f3:51:a3:de:b4:5a:1c:
69:3b:de:73:a5:d3:dc:c3:23:84:0e:21:7a:61:82:
2f:5f:14:be:49:02:ba:01:08:fa:01:c3:b6:11:2e:
12:d9:36:fb:ec:b4:f6:ff:88:bf:b7:d1:b9:27:18:
35:7c:fd:a3:96:56:8c:cc:3b:23:f1:6f:a9:92:cd:
bb:fe:3e:26:62:5a:c6:6f:64:2b:3e:2d:10:23:dd:
75:fb:f1:8f:ba:45:fb:67:20:45:cb:d8:1a:4f:4e:
6b:66:c8:f9:fd:20:68:90:23:0d:f7:38:d9:a5:a8:
77:da:59:0b:3f:54:c6:ca:3b:45:5d:7c:97:1a:1e:
5e:78:43:07:1f:4c:59:0b:db:5e:30:11:55:97:da:
d3:24:e0:c4:94:eb:8d:bd:88:03:99:23:aa:1b:13:
03:c1:4f:1b:bf:b6:08:ce:25:13:a1:65:fe:cd:11:
86:57:0b:ae:2c:e5:bf:9b:2a:1d:8f:b1:6c:b0:99:
9e:65:8a:20:a9:ff:86:9f:b9:21:74:4f:6c:60:e6:
a6:8b:d4:6d:3a:7b:df:d7:87:e7:ff:e2:99:06:15:
77:a4:35:43:d9:97:d5:88:93:56:7b:9e:c9:41:68:
e0:ec:42:70:f0:50:7e:ff:cc:b9:ee:97:1a:5b:1b:
c2:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:E1:81:91:0A:8E:62:C4:82:10:2F:54:83:19:11:3C:56:99:08:7A
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/zeGBkQqOYsSCEC9UgxkRPFaZCHo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
80:1f:5c:b9:40:01:f3:85:c3:f1:9e:44:5d:9d:c1:35:04:bf:
be:08:91:81:52:4c:55:9a:75:2c:c4:2d:e8:89:ad:31:c1:28:
53:40:c3:13:89:2b:fe:df:cd:f7:05:14:64:f3:d5:45:fb:0c:
87:c9:14:a9:cf:13:62:74:f7:38:eb:c0:72:0b:15:29:d9:67:
35:9a:3e:99:52:ce:85:93:0d:78:da:83:51:c3:08:85:4e:86:
b8:d2:b6:6f:14:30:c4:b5:b3:fb:51:d6:3d:7c:d6:63:0d:55:
b2:fd:8c:c8:d2:65:b9:b1:d8:09:2b:1c:ca:4c:88:7e:55:18:
c1:39:f8:ef:bc:6c:d1:54:ad:b9:d1:0a:ec:85:3b:cf:55:cf:
98:2a:76:43:76:86:c5:9c:28:bd:f2:c2:ba:e5:57:d4:39:9a:
9a:a2:60:ab:dc:0c:97:9f:e0:8a:9e:16:59:c7:e4:3d:1d:d6:
a2:8a:26:ea:32:6b:81:35:e4:01:e6:7f:54:68:65:2a:17:2b:
42:16:62:4a:75:93:ea:7c:19:d3:c2:41:12:0c:ad:9b:da:0c:
03:c4:4e:85:f7:c2:1d:fd:a4:3a:75:40:e8:c5:94:c6:e9:d4:
cc:94:b2:1a:a3:aa:4f:44:64:51:52:20:07:e8:4a:9a:ae:50:
8b:ef:38:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 00:24:32 2025 by rpki-client