Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/zg91xglcmWWn-jrdS5cpZKwzxr0.roa
File: zg91xglcmWWn-jrdS5cpZKwzxr0.roa (raw, json)
Hash identifier: armVBOi8kvnmefX2NiA0+ElPn90Y7BxUck2QVSudLZY=
Subject key identifier: CE:0F:75:C6:09:5C:99:65:A7:FA:3A:DD:4B:97:29:64:AC:33:C6:BD
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0189837EB8708E2F7C6E179AA806ECE64328
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/zg91xglcmWWn-jrdS5cpZKwzxr0.roa
Signing time: Sun 23 Jul 2023 16:04:27 +0000
ROA not before: Sun 23 Jul 2023 16:04:27 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:189:837e:a07b/128 maxlen: 128
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:188:5fe2:b396/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:187:4695:a68a/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:188:7858:a003/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64:ffff:0:187:fa9a:b088/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:187:b2b8:a7dd/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:83:7e:b8:70:8e:2f:7c:6e:17:9a:a8:06:ec:e6:43:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Jul 23 16:04:27 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=ce0f75c6095c9965a7fa3add4b972964ac33c6bd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:ae:4d:ca:a5:0f:35:6e:6f:d6:22:25:78:26:
39:48:bc:c1:4b:cd:e7:0f:c3:1e:98:4e:ae:2f:4c:
ef:c7:3b:b8:e1:78:c4:71:fd:60:14:b7:7f:29:7b:
18:7e:ee:5e:42:49:89:05:08:77:20:54:b5:a8:cc:
f7:3c:91:d2:96:c8:41:73:88:86:b6:d8:3b:e2:50:
7e:a1:b3:d4:4c:16:64:c8:37:29:cf:5a:65:05:61:
43:79:1b:1b:62:af:f7:7f:d5:7f:72:f1:b6:da:67:
66:66:73:83:f7:09:55:29:54:69:82:c6:c4:ff:a2:
40:49:f8:40:f9:00:6f:99:32:41:58:94:7d:55:b4:
2f:b1:d4:6b:43:2b:f3:bf:0b:61:c6:93:11:69:4b:
b8:db:f1:47:af:c7:67:0c:06:ae:5b:2f:4e:69:0f:
a1:9b:c5:ec:30:4d:9a:20:33:85:16:dd:fb:6e:b7:
6c:b5:11:ad:b8:17:d7:44:61:84:96:11:02:7f:19:
55:a5:dc:a6:fc:53:e7:70:73:ea:70:b9:ce:11:a4:
9f:f1:e0:f0:53:34:b5:14:a2:be:03:08:83:1b:9c:
31:40:ef:38:ad:f8:d0:30:2c:7a:ba:f7:87:3d:d1:
5d:17:77:14:a7:81:5b:16:71:d5:25:71:72:7b:a4:
a6:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:0F:75:C6:09:5C:99:65:A7:FA:3A:DD:4B:97:29:64:AC:33:C6:BD
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/zg91xglcmWWn-jrdS5cpZKwzxr0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
38:47:7e:72:2a:b8:f1:60:63:cc:b6:84:4d:74:a2:90:50:61:
dd:9b:b7:b5:10:5e:f3:43:a6:6e:8a:50:8e:e8:3b:e4:c6:50:
2b:61:37:d8:28:20:8e:a4:42:36:8d:e1:c6:f5:5b:27:b6:67:
41:bb:b8:b1:b9:f5:29:36:cd:e6:b7:59:6a:84:b1:4d:12:53:
dc:8f:62:a7:22:49:46:47:8e:4d:94:15:d6:3f:ba:a6:f4:e5:
03:ad:af:f6:4d:72:00:ae:ea:0d:68:52:97:75:3d:e1:e2:ac:
32:c7:56:32:0b:48:d2:fe:23:6c:f8:e8:f0:6b:7a:7e:f4:a8:
9e:18:0a:e2:df:36:b2:4b:b6:0e:59:7d:9b:4f:13:ea:50:0d:
9a:d1:60:01:59:e3:71:3e:61:a0:d6:77:5f:d5:42:21:79:42:
0a:61:47:3e:6f:56:0e:c1:ee:90:20:65:0b:d0:ec:f6:cd:7b:
a2:a3:c1:16:19:26:d4:ae:6e:91:61:b3:ee:76:3f:6c:4e:78:
11:b6:30:d1:f4:a5:00:76:d3:0a:61:37:91:17:7d:55:81:6c:
cb:a6:d7:a6:3c:d9:d5:76:4a:ef:b0:7b:e3:4a:1d:b3:23:7f:
53:0a:a4:76:d8:44:7a:66:d3:4b:02:9a:94:35:2a:93:5c:9b:
df:f9:dc:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 19:38:56 2025 by rpki-client