Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/zfaVCaV65oWZ9WhxP9SyPvuB-7A.roa
File: zfaVCaV65oWZ9WhxP9SyPvuB-7A.roa (raw, json)
Hash identifier: uZViNFOdENsWpl/gBR82K24QqbdEoz30eeOj53S6wDE=
Subject key identifier: CD:F6:95:09:A5:7A:E6:85:99:F5:68:71:3F:D4:B2:3E:FB:81:FB:B0
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 6BD4CA0E
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/zfaVCaV65oWZ9WhxP9SyPvuB-7A.roa
Signing time: Sat 19 Feb 2022 02:10:31 +0000
ROA not before: Sat 19 Feb 2022 02:10:31 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1809107470 (0x6bd4ca0e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Feb 19 02:10:31 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=cdf69509a57ae68599f568713fd4b23efb81fbb0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:08:4a:76:b0:b1:3d:e5:6d:c5:47:58:7c:9b:
e8:25:e7:9a:41:94:b5:2a:db:83:e0:d0:5d:a5:80:
0c:27:c7:5b:12:97:be:ab:c4:ec:94:4a:16:4f:ec:
25:06:a8:65:ad:52:7b:f0:17:91:de:79:2d:06:47:
bb:3c:a4:a0:52:a0:f3:85:a0:6b:9f:4e:15:fb:75:
de:79:cf:92:15:d8:b3:02:8a:fc:e7:a3:9a:68:95:
ea:3e:96:9d:51:46:7f:ae:05:2b:44:38:22:a7:15:
ab:15:63:33:18:e0:3c:33:41:16:60:dd:a3:ab:b5:
2d:21:f9:5f:d2:59:8c:ce:d8:d3:42:f1:50:1d:20:
5f:d7:f0:7a:2f:dd:b6:c9:87:08:2c:45:0b:e0:e2:
9e:cb:fe:05:00:c5:00:0f:0f:fe:ed:92:e8:4c:d6:
d3:32:c4:2b:aa:5b:b2:6e:e1:92:94:d4:65:4c:20:
68:62:56:fe:77:aa:a5:d4:8f:aa:f8:a9:b3:02:bb:
e4:42:8d:9b:78:aa:66:ae:ad:16:96:a2:cf:0d:82:
3b:32:f8:c4:34:5b:63:53:39:a1:2b:f2:c9:8f:61:
aa:45:db:35:69:cd:a6:2b:2e:9c:64:d8:56:7a:6e:
e4:cd:f7:03:c2:14:ff:50:a5:65:22:33:e3:cd:08:
97:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:F6:95:09:A5:7A:E6:85:99:F5:68:71:3F:D4:B2:3E:FB:81:FB:B0
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/zfaVCaV65oWZ9WhxP9SyPvuB-7A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
48:8a:bc:3e:d5:b0:4f:73:31:ab:b8:e4:3f:37:83:31:3f:e3:
60:97:11:e2:a5:38:b3:e2:53:87:3b:5c:73:6a:72:81:58:00:
bb:14:fd:ae:d4:7f:79:4c:cd:66:3f:48:00:ad:de:32:03:9b:
2e:0b:cb:df:fa:5f:5a:ee:4a:48:79:ed:ba:9b:fc:76:a4:55:
f9:26:55:86:50:51:f5:f8:62:f1:71:0f:0f:0a:83:5c:3e:13:
34:6a:f6:23:4d:10:05:81:38:2d:39:29:5c:6c:ce:91:7e:f3:
61:4c:80:2e:6a:99:82:1e:5a:70:ef:06:24:57:35:80:d8:3c:
31:58:f8:3a:0c:87:fe:21:1a:f6:7b:b5:92:3d:b0:0a:a3:fb:
2e:bd:fd:ee:48:fc:68:4a:2a:7a:8a:8f:db:c3:0c:9e:49:00:
b6:12:4b:fe:3f:ec:1a:c6:48:bc:f5:b7:af:65:8f:c8:3b:61:
d5:e3:e5:c1:f3:d0:24:11:dd:53:01:9f:34:23:53:25:30:7a:
4d:30:82:b2:74:c5:ec:0e:a5:94:67:7e:e0:e1:1a:5b:e0:ef:
62:84:65:3d:65:ae:1d:9d:49:d1:a3:04:a9:1b:5b:c6:c1:99:
2c:06:61:6b:0b:a9:ae:6e:22:b0:a1:2d:1e:a8:1a:1b:43:ca:
bf:4b:d8:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 02:52:10 2025 by rpki-client