Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/zen1HKolUw-CCNKGyEEHaOQFQzg.roa
File: zen1HKolUw-CCNKGyEEHaOQFQzg.roa (raw, json)
Hash identifier: txG4YPNZkivDCSuydZqfiZFIhrrVyFDJuYmOXAMwIWI=
Subject key identifier: CD:E9:F5:1C:AA:25:53:0F:82:08:D2:86:C8:41:07:68:E4:05:43:38
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0182827F11D3CAD039197A32D2F357581813
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/zen1HKolUw-CCNKGyEEHaOQFQzg.roa
Signing time: Tue 09 Aug 2022 12:05:41 +0000
ROA not before: Tue 09 Aug 2022 12:05:41 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:182:3f1d:a803/128 maxlen: 128
2001:67c:64:ffff:0:182:827e:56cf/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:182:7cb2:99d4/128 maxlen: 128
2001:67c:64:ffff:0:182:383f:6b78/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:82:7f:11:d3:ca:d0:39:19:7a:32:d2:f3:57:58:18:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Aug 9 12:05:41 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=cde9f51caa25530f8208d286c8410768e4054338
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:f3:01:91:2e:ba:63:62:f3:1b:7c:48:d0:a4:
be:56:13:b2:dc:b0:5a:bd:70:fd:05:16:55:69:d0:
36:9c:c5:27:33:f1:5b:50:1c:9c:eb:05:d0:99:23:
8e:88:93:95:dd:94:6b:b4:44:c6:31:ea:73:51:b4:
7b:2e:4b:63:c2:b0:55:8f:22:20:4a:7f:58:4e:99:
d3:c3:fa:73:58:3e:62:9c:69:d9:f5:70:21:b5:fe:
09:9b:9e:a8:fb:29:6b:d7:f2:47:d9:1f:bf:44:4f:
58:45:17:f8:84:97:4b:87:f4:4b:7e:a3:f2:88:e5:
9a:cc:87:88:0e:9a:5a:bc:00:dc:33:15:48:c4:83:
97:24:58:2b:26:d1:62:9d:42:e8:78:1d:8c:65:cf:
88:9a:39:77:e1:5c:08:db:f5:39:af:27:b9:62:ab:
10:8c:e8:6e:2f:af:f4:59:43:ab:09:dd:c8:e5:21:
dd:0a:97:d1:7c:f2:ff:73:15:af:82:2d:b2:a4:c2:
5f:03:08:d6:0f:f5:31:70:64:df:c2:55:c3:76:0e:
a3:30:db:3b:75:4d:63:2a:1a:ec:e3:0d:71:14:14:
9d:e9:34:58:dc:a7:63:e0:53:e4:91:d3:f6:1b:9f:
c2:c0:1a:00:67:1a:e8:da:f2:d3:cd:31:8b:9a:68:
30:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:E9:F5:1C:AA:25:53:0F:82:08:D2:86:C8:41:07:68:E4:05:43:38
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/zen1HKolUw-CCNKGyEEHaOQFQzg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
65:63:28:33:ff:73:72:ac:21:80:d6:39:97:ac:91:38:a9:de:
7f:ec:ff:4f:77:4e:2a:50:bc:82:d7:87:f3:4e:2e:5f:5c:fd:
3c:da:cf:df:7d:7c:22:b9:b5:6d:2e:ad:e9:54:86:14:1c:3d:
b1:5e:df:24:50:8c:46:96:ed:db:09:a8:96:69:3e:01:22:07:
f9:06:f8:b8:c1:2b:77:90:27:9c:dc:52:90:1f:a9:cc:e8:46:
4f:e1:f9:85:30:8d:37:5a:7a:d9:66:5c:c7:2e:f7:26:96:cd:
2a:b3:74:69:68:e3:6b:60:fd:b0:5f:11:ab:0e:9c:70:65:42:
c4:65:1c:24:0e:4d:d7:91:7b:f8:31:b5:9b:86:f4:40:34:d9:
38:e4:22:43:ae:48:ce:5b:ae:0b:85:b2:1b:b3:8c:de:5e:a1:
9a:45:28:c1:6b:05:49:77:d2:84:a9:66:1d:74:96:b5:be:0a:
24:67:37:eb:89:7c:96:d7:67:68:68:3f:f3:df:f4:44:a9:48:
e3:91:cb:d3:01:50:44:e2:a1:3c:dd:3f:a2:62:4e:9d:f5:4c:
dd:c9:ae:a9:1f:43:ff:7e:6e:c8:6d:a5:a1:86:b1:22:99:bc:
c6:91:2f:7f:09:e9:d3:d3:fc:74:4c:fd:44:eb:b1:70:0f:ba:
6c:0b:df:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 00:41:57 2025 by rpki-client