Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/zf3dqsZz14eolOwq4yf_3vcezsg.roa
File: zf3dqsZz14eolOwq4yf_3vcezsg.roa (raw, json)
Hash identifier: bJaOXgaq76UKpOxdog31Ea0MZqGXpPkcNRZh/GuBYKI=
Subject key identifier: CD:FD:DD:AA:C6:73:D7:87:A8:94:EC:2A:E3:27:FF:DE:F7:1E:CE:C8
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 86C9A860
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/zf3dqsZz14eolOwq4yf_3vcezsg.roa
Signing time: Tue 24 May 2022 07:12:30 +0000
ROA not before: Tue 24 May 2022 07:12:30 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:180:a810:6542/128 maxlen: 128
2001:67c:64:ffff:0:180:ddb5:bc5/128 maxlen: 128
2001:67c:64:ffff:0:180:466e:42dd/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:180:e0ec:efe1/128 maxlen: 128
2001:67c:64:ffff:0:180:8961:505f/128 maxlen: 128
2001:67c:64:ffff:0:180:457:1e3f/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2261362784 (0x86c9a860)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: May 24 07:12:30 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=cdfdddaac673d787a894ec2ae327ffdef71ecec8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:d1:3d:72:7f:48:36:6c:3c:31:cc:28:0d:e8:
a7:a6:87:11:4e:a5:a4:5a:8f:d8:6b:c2:ed:d3:92:
06:d9:b1:52:aa:1f:29:8e:14:49:eb:12:f2:f4:d4:
b6:9d:68:69:79:e4:8c:4b:1f:1d:57:20:3d:93:33:
f7:9a:c8:b9:1a:aa:58:fd:e7:a1:9a:f0:e5:4a:fe:
49:3f:69:7e:e4:b7:8f:d6:75:25:a6:c1:39:17:3d:
53:9c:a8:eb:0e:fd:10:b3:fc:2d:dd:24:a5:ee:2e:
52:e5:f4:64:ed:c0:ba:31:dc:1f:21:48:41:37:d3:
eb:25:5e:ad:bd:57:f5:25:7c:e2:3b:13:7b:73:61:
57:05:2e:ff:ac:22:8c:69:4a:8c:02:e8:1c:ec:d2:
48:32:71:e5:83:d1:aa:fd:fc:1b:56:99:a3:4a:4d:
52:35:4a:ec:78:41:15:34:b6:1a:ed:e3:bd:73:09:
c5:9d:b2:a5:f6:26:d7:c2:09:48:75:b7:7c:5f:54:
f2:34:5a:50:d6:f2:97:9f:9c:fd:62:84:50:02:52:
a9:b6:99:71:06:98:f3:80:bd:8b:5d:3d:ca:ef:17:
88:9e:95:da:63:36:fe:0e:f9:bd:e2:82:9b:b8:61:
84:7d:9e:26:02:fb:d7:c8:3e:be:c6:85:f1:c5:38:
ac:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:FD:DD:AA:C6:73:D7:87:A8:94:EC:2A:E3:27:FF:DE:F7:1E:CE:C8
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/zf3dqsZz14eolOwq4yf_3vcezsg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
aa:f0:5a:67:37:10:74:5c:99:77:32:8c:59:01:26:d5:ce:d1:
4a:9a:f1:4e:70:cb:84:a4:58:88:5a:1e:c8:b4:c0:ee:4f:e6:
1f:82:57:8f:af:9f:7b:ad:9d:17:c6:5a:b8:75:c2:f3:9d:9c:
4c:9d:35:25:c7:79:f7:63:5c:18:01:a0:30:7a:93:58:1c:ec:
0d:54:d6:01:ec:47:66:b2:6f:c8:5a:95:8a:e7:39:e4:71:64:
bb:9e:08:76:36:de:e2:c3:95:07:cb:28:30:8e:c4:40:ec:df:
52:78:ee:02:44:6f:c5:73:bc:c7:f4:9e:9a:50:b4:af:a8:d4:
cd:03:ac:ce:b3:c3:f7:ad:da:c9:ee:3f:7e:99:2f:48:3d:0a:
e4:14:ca:09:25:4c:d6:81:f5:c7:82:4e:05:b8:4b:9b:e9:ba:
34:09:8b:52:46:30:9a:c1:46:53:30:27:42:03:64:83:bb:20:
8f:97:cf:da:05:c5:42:be:c7:0f:1d:cf:51:ae:20:31:39:53:
28:a6:81:19:b3:7c:13:11:15:3a:8e:e3:ed:a5:d9:3e:d1:3d:
1e:f3:04:f4:dd:fb:00:e7:52:7b:5f:a6:a1:d2:c8:3e:2f:db:
0c:b4:19:c9:71:8c:c9:64:5a:4e:0e:93:69:8f:92:fd:53:d2:
48:bf:96:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 01:48:36 2025 by rpki-client