Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/zmnXuqA7S0hzTk-Ku5Ged_57yrg.roa
File: zmnXuqA7S0hzTk-Ku5Ged_57yrg.roa (raw, json)
Hash identifier: Cv2oyNpWq19ryy8Kh+esRX9/XDKKMtJqEkF961evVNM=
Subject key identifier: CE:69:D7:BA:A0:3B:4B:48:73:4E:4F:8A:BB:91:9E:77:FE:7B:CA:B8
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0184E4BFC143BC1072D36EE35E344CC52CCD
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/zmnXuqA7S0hzTk-Ku5Ged_57yrg.roa
Signing time: Tue 06 Dec 2022 00:04:42 +0000
ROA not before: Tue 06 Dec 2022 00:04:42 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:184:e4bf:8c0b/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:e4:bf:c1:43:bc:10:72:d3:6e:e3:5e:34:4c:c5:2c:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Dec 6 00:04:42 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=ce69d7baa03b4b48734e4f8abb919e77fe7bcab8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:ba:13:1b:4b:f6:58:6a:1c:de:b6:67:dd:76:
49:98:55:9d:69:9e:78:60:2c:64:c5:fd:20:92:31:
9f:2e:24:c2:1c:45:7a:71:01:b8:d6:76:15:0e:f1:
04:64:ef:ad:d3:95:9d:62:e1:e9:66:0c:d1:dc:80:
0d:0b:a6:6f:26:6d:ff:99:77:0b:63:1d:f0:bd:19:
42:50:df:b3:bf:33:e1:22:65:a9:d7:36:d4:09:20:
de:d2:3a:75:c5:dd:85:28:db:bb:19:14:b0:7e:19:
1e:b0:ce:6e:13:8d:e4:23:95:37:e8:f2:0f:03:d4:
09:bc:d8:0d:7e:4f:61:a9:31:5c:b7:e4:5a:6b:e8:
f3:f3:39:ae:3d:5e:ec:a9:53:81:f1:31:23:ea:a1:
06:e9:b6:58:38:d6:c8:af:28:73:d6:0c:90:d4:16:
58:27:d7:da:76:2c:41:98:1e:69:f2:f4:0f:36:90:
b4:0b:07:de:73:4e:26:07:67:43:0f:2c:3d:c6:88:
ed:73:16:12:bb:75:2c:dc:0b:4d:6d:00:68:32:14:
35:66:aa:1c:48:97:37:bf:f6:50:68:ba:b6:b9:20:
00:84:f3:27:87:a4:e7:9c:4b:f6:d1:f9:ea:d5:56:
f6:d3:30:5d:23:dd:3a:45:c5:e8:27:07:21:06:6d:
e6:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:69:D7:BA:A0:3B:4B:48:73:4E:4F:8A:BB:91:9E:77:FE:7B:CA:B8
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/zmnXuqA7S0hzTk-Ku5Ged_57yrg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
ac:4d:c3:a0:1f:48:79:b7:ca:78:f8:b2:ce:e0:28:fe:bf:a0:
a7:54:5e:6b:80:75:68:c3:26:16:8d:52:20:12:5f:1f:93:52:
02:a1:e0:28:34:dd:90:2a:3c:1b:7f:4d:35:12:0a:f9:86:b0:
65:87:0d:bc:7f:98:f8:0a:b7:f7:7e:a5:70:dc:48:eb:0b:77:
1f:bc:00:e1:1e:d2:f2:20:38:9b:b9:99:af:fb:ff:ff:35:9d:
00:d5:43:80:db:03:5f:ff:eb:20:11:bb:17:e4:a5:9e:45:a6:
b3:27:36:8f:91:dc:0f:13:ec:ab:04:d2:04:f8:3a:71:48:57:
67:27:dd:43:56:89:59:68:48:38:fa:f8:07:24:5e:01:41:ba:
47:1c:ae:ec:b4:47:1e:fa:10:03:a7:b3:35:4b:14:0e:44:10:
9d:a0:6e:f6:25:c0:b5:5b:8c:9d:9f:02:cc:6d:be:86:6a:08:
23:7c:bf:e9:22:a5:63:07:ae:54:c2:3b:6c:e1:99:f8:69:a6:
f1:ab:8d:cb:e1:29:8c:3b:eb:7c:8e:42:d9:b7:ac:c1:78:5f:
22:cf:f2:e7:77:27:6e:f1:66:9b:fb:82:c3:9b:f2:59:ed:d5:
55:ff:a0:53:d3:6d:dc:eb:82:a2:b5:e6:20:5a:16:f6:34:09:
5b:33:a8:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 4 09:48:39 2025 by rpki-client