Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/zkfIgCfXafFo8DKeSByf6QQSFJ8.roa
File: zkfIgCfXafFo8DKeSByf6QQSFJ8.roa (raw, json)
Hash identifier: ezaZb9jtY1z3TwJPgBF3cY016AR/m/3J70jiLZv+eD4=
Subject key identifier: CE:47:C8:80:27:D7:69:F1:68:F0:32:9E:48:1C:9F:E9:04:12:14:9F
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0185684E5443133C378EB829726472F06395
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/zkfIgCfXafFo8DKeSByf6QQSFJ8.roa
Signing time: Sat 31 Dec 2022 13:10:41 +0000
ROA not before: Sat 31 Dec 2022 13:10:41 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:185:3dcc:d8f/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:68:4e:54:43:13:3c:37:8e:b8:29:72:64:72:f0:63:95
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Dec 31 13:10:41 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=ce47c88027d769f168f0329e481c9fe90412149f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:41:c3:08:63:f5:e1:f8:fb:e4:da:ea:73:54:
6f:e7:bd:33:f6:69:36:9f:3a:20:30:9a:23:ea:9e:
f5:14:9a:ed:51:03:22:1a:7f:6c:f2:23:2c:b8:81:
3d:09:ac:70:c9:de:65:84:03:c3:86:47:e5:1c:f4:
4d:28:bc:cf:15:e6:d6:bf:fa:07:de:f3:7e:cf:b8:
b2:47:1b:a6:3e:c5:cc:ee:32:5c:81:8a:cc:4a:7c:
28:71:7d:c1:62:04:f5:19:e8:7d:82:6f:f6:c5:7a:
84:0f:98:5e:10:ab:95:0b:a2:26:ad:4e:e8:da:42:
14:39:de:dc:51:36:a6:20:4a:be:1e:16:89:4b:5c:
bf:2c:b6:8b:e0:86:f2:8f:8f:19:77:db:b7:54:93:
c5:97:f5:52:3d:19:72:2c:eb:de:13:ab:d2:9c:f8:
d3:64:87:23:7b:0d:37:95:5d:cc:70:f8:33:84:5d:
2c:2a:0e:38:06:9b:6e:d1:1e:43:19:17:ce:69:f1:
b6:0f:43:91:9b:ce:4a:dc:a5:b0:59:62:0c:4a:03:
53:27:ae:9d:50:a8:e4:8f:25:f9:68:e4:8a:15:5c:
1e:4e:52:a3:70:f3:66:9a:32:9c:43:ea:6d:3e:00:
2c:22:d5:b9:a8:69:28:06:12:25:3b:eb:4f:30:c0:
16:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:47:C8:80:27:D7:69:F1:68:F0:32:9E:48:1C:9F:E9:04:12:14:9F
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/zkfIgCfXafFo8DKeSByf6QQSFJ8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
42:a2:cb:b6:72:1d:59:50:08:b3:93:8e:0c:6d:9a:b7:03:4e:
7b:e8:7c:ba:75:ec:c0:ec:7e:fb:fe:70:d6:55:5c:2e:7b:1c:
96:01:39:61:10:e2:ec:e9:f9:98:df:29:19:1b:fe:60:a1:b9:
ac:3d:9b:1a:74:da:7b:ec:f4:da:b2:02:53:f5:70:f5:a2:71:
7e:61:d9:00:58:b4:f1:54:c0:4b:c0:e8:1d:ae:30:13:0b:70:
88:27:32:dc:db:de:dc:18:73:89:9e:cd:e3:9c:a8:52:eb:ed:
91:49:2a:e4:46:c7:bc:3f:a7:98:0e:dc:93:33:3a:70:60:a0:
3d:15:84:2d:67:2c:d0:80:49:46:a3:15:13:2d:94:90:01:91:
cd:33:73:73:63:0c:20:85:49:e5:d0:a2:90:7a:98:76:cc:3f:
79:b3:2c:60:50:69:8d:4d:37:88:0a:6a:66:1b:c1:79:b4:b3:
fe:01:4b:65:15:e0:ae:c2:ba:4e:c8:14:a0:85:a3:2c:76:50:
24:05:13:55:64:8a:00:ea:a8:b3:03:1d:9a:16:49:ff:6a:68:
12:2d:8c:cd:04:69:d0:8f:67:71:b4:89:83:30:44:ec:6e:bb:
00:f3:15:e8:d8:09:f7:c2:93:c1:30:2f:cf:55:3d:30:ce:dc:
62:ca:37:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 17:39:32 2025 by rpki-client