Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/zereswaW57auAav5VXxYgrVcINc.roa
File: zereswaW57auAav5VXxYgrVcINc.roa (raw, json)
Hash identifier: IEMmrShnyFJAm5Zo6JVWwjEFa/wL2rbJwUbopgZgbuA=
Subject key identifier: CD:EA:DE:B3:06:96:E7:B6:AE:01:AB:F9:55:7C:58:82:B5:5C:20:D7
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 7347DA98
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/zereswaW57auAav5VXxYgrVcINc.roa
Signing time: Thu 17 Mar 2022 16:13:29 +0000
ROA not before: Thu 17 Mar 2022 16:13:29 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:17f:1bf4:40b5/128 maxlen: 128
2001:67c:64:ffff:0:17f:20ac:a2bd/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:17f:87e3:2531/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1934088856 (0x7347da98)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Mar 17 16:13:29 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=cdeadeb30696e7b6ae01abf9557c5882b55c20d7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:e5:f1:ad:89:85:6d:b4:6b:8d:4b:02:aa:e9:
e2:78:ca:43:49:71:78:22:f3:65:b8:00:26:6a:23:
c4:f0:57:0a:13:e5:05:f6:fe:50:11:04:47:ee:54:
cf:6c:f7:24:90:6e:30:de:5a:64:a0:15:65:5f:24:
24:80:c3:5b:57:97:75:17:6a:62:2c:83:9a:11:53:
92:f5:f0:cc:82:ec:ae:76:24:3c:da:97:ab:58:2c:
66:4f:9d:57:84:53:02:bd:b6:89:70:a4:ea:eb:3b:
66:1c:58:59:74:26:84:2d:99:15:8b:dc:93:b8:97:
33:29:99:db:6b:e5:fa:2c:12:ec:68:56:f9:5e:1f:
a9:9f:1e:f4:04:b5:54:cf:9a:27:e7:24:0d:dc:bb:
ed:35:6d:c4:b1:4d:0d:60:22:88:de:11:9f:d2:3e:
80:30:d7:0f:02:e1:68:9c:8e:28:a8:36:3e:a3:56:
f9:84:2d:a4:70:02:e4:8f:15:bc:e3:ec:f8:fe:0e:
77:da:2f:4f:28:d2:74:82:81:fb:67:41:d9:4d:6b:
19:34:64:bc:ff:2d:4a:64:f0:f8:dc:e9:05:21:92:
c2:16:90:33:d1:50:9d:ea:97:82:08:64:12:2e:60:
88:ef:f9:38:b8:6c:d7:ee:a0:be:e0:52:0b:6f:1c:
62:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:EA:DE:B3:06:96:E7:B6:AE:01:AB:F9:55:7C:58:82:B5:5C:20:D7
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/zereswaW57auAav5VXxYgrVcINc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
88:cb:07:10:1c:df:bf:68:ad:1a:24:be:5f:50:93:a7:45:e5:
0c:cb:d3:07:d3:ef:4e:8c:47:cb:73:30:6c:a9:c9:79:0f:3a:
7e:90:01:6d:0c:79:8f:67:db:76:ef:0f:6e:1e:d6:a1:97:81:
5d:b5:6f:21:f7:e3:81:66:69:7e:95:bc:ca:ff:65:14:a8:67:
4a:82:1c:43:78:25:11:73:02:ed:3f:8c:0d:db:d5:a0:ec:f5:
2f:c9:de:92:7d:85:aa:02:e3:bc:f9:67:66:de:8b:11:fb:d7:
95:d7:a2:90:70:77:c7:6d:69:e6:26:1e:97:97:54:57:22:8c:
fe:a0:94:c5:e6:e4:f7:61:7a:5c:c8:2d:04:3e:82:78:2b:d1:
ca:90:5f:65:0d:f1:fc:68:0c:e7:15:d8:09:7b:ee:52:3b:5a:
e6:d9:d2:24:4f:e4:2b:f0:db:83:cf:df:93:a7:81:5a:09:ec:
8d:f9:45:69:02:53:d5:3e:d6:16:5b:47:a9:b7:7a:ef:cc:ee:
ab:40:36:b5:2c:35:90:eb:d0:c4:88:db:f2:d5:e5:57:50:e3:
b4:9b:f9:11:47:70:0f:20:e1:22:32:66:18:46:f9:23:af:8e:
2c:55:2d:43:8e:ba:27:e3:ee:08:ba:70:4e:fc:37:26:ee:3c:
16:ee:09:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 4 02:32:39 2025 by rpki-client