Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/zm5hgXaryDfCjUh4XQzgRxnfWHc.roa
File: zm5hgXaryDfCjUh4XQzgRxnfWHc.roa (raw, json)
Hash identifier: t0CHksR5STpSCyuCWREuMmf6ekp0PRq0DhJjfQLuQeo=
Subject key identifier: CE:6E:61:81:76:AB:C8:37:C2:8D:48:78:5D:0C:E0:47:19:DF:58:77
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0183580194C07A11584FCC75D78473C7A4FC
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/zm5hgXaryDfCjUh4XQzgRxnfWHc.roa
Signing time: Mon 19 Sep 2022 23:07:22 +0000
ROA not before: Mon 19 Sep 2022 23:07:22 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:182:3f1d:a803/128 maxlen: 128
2001:67c:64:ffff:0:183:57ff:2df4/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:183:50b3:5643/128 maxlen: 128
2001:67c:64:ffff:0:182:7cb2:99d4/128 maxlen: 128
2001:67c:64:ffff:0:183:1279:659d/128 maxlen: 128
2001:67c:64:ffff:0:182:383f:6b78/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:58:01:94:c0:7a:11:58:4f:cc:75:d7:84:73:c7:a4:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Sep 19 23:07:22 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=ce6e618176abc837c28d48785d0ce04719df5877
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:d9:db:64:9f:c1:d7:71:79:2a:ab:3c:5c:1e:
ee:3c:67:eb:9e:a9:1b:b1:43:b7:83:0b:b4:93:f8:
3b:4a:80:9b:04:ac:94:e4:1c:08:a6:1c:c4:fc:46:
cc:3d:83:81:4e:83:b4:e5:ff:ba:fc:89:51:6c:c4:
db:cf:91:10:e6:b4:90:43:87:a5:84:56:6d:ac:68:
c4:1c:c4:88:48:2d:fe:a3:95:c0:2f:9a:5a:d8:63:
af:9b:a6:4a:56:c3:5c:4d:2b:6e:00:5e:e7:ef:da:
24:82:14:2f:f3:0d:f3:ea:44:54:13:c6:f2:2e:4f:
43:78:f0:58:8a:93:a4:6d:98:94:29:ff:7c:98:e6:
e7:b6:0a:ae:00:2a:e2:63:14:b0:90:bf:01:d8:03:
61:ba:27:21:4a:0e:a2:71:30:a6:be:68:fd:5c:aa:
11:23:ad:81:ec:f5:85:97:ee:28:4d:1d:2c:1b:60:
c7:da:0c:42:01:18:ff:fd:06:86:92:89:1d:45:ef:
2d:05:90:52:c7:01:32:72:16:30:c8:b8:38:05:9f:
51:bc:16:8c:cb:2a:40:76:65:8f:20:9f:54:43:b6:
cf:49:02:28:38:89:b9:05:41:03:11:35:ef:77:c2:
b7:4f:35:f4:8d:89:e1:e9:eb:1a:6a:19:26:76:c3:
ed:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:6E:61:81:76:AB:C8:37:C2:8D:48:78:5D:0C:E0:47:19:DF:58:77
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/zm5hgXaryDfCjUh4XQzgRxnfWHc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
92:e3:99:59:02:b5:a0:5d:2e:ef:b1:a4:aa:52:9f:39:80:21:
65:77:0a:17:ca:37:05:01:d8:fb:54:31:e8:df:c0:cb:a0:42:
7d:3f:4e:88:13:dc:63:d7:d1:28:e5:a9:d6:b1:8b:e2:be:92:
a2:03:8f:c7:5d:c0:77:92:89:7c:af:d8:7c:39:38:a0:b3:23:
30:ff:ef:ff:44:0f:ec:9e:47:d3:89:03:e4:f3:cc:9d:f3:e7:
d4:20:ec:93:07:0c:73:11:00:f0:bb:cc:54:6f:b0:14:8d:b8:
ef:ce:ca:40:d1:34:81:c7:96:aa:51:10:79:85:c9:01:d1:92:
3e:a3:9f:c1:71:0e:b4:f1:bd:c1:0f:ea:5d:89:2a:57:13:b5:
3f:9b:7d:0d:5a:6a:46:5f:c2:98:43:87:5e:23:7d:a6:8b:d1:
eb:69:fe:25:d3:4f:b4:84:57:07:48:76:d0:9f:4b:3a:fe:25:
c4:33:03:d5:5c:7c:4a:73:a5:c9:7a:1d:a1:f9:15:57:97:d5:
c5:39:06:0d:a9:5f:92:bd:0e:12:4e:96:a3:08:58:b0:72:43:
3f:2a:2b:b2:35:cd:6f:f7:7f:42:98:e7:d4:00:b9:3a:98:ce:
89:96:45:77:ac:d3:cf:bd:e5:60:6c:d5:03:f8:99:4e:b7:7b:
18:e1:06:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 06:48:11 2025 by rpki-client