Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/zmueAMhcdmwPKHMc3OBbOc-VJLk.roa
File: zmueAMhcdmwPKHMc3OBbOc-VJLk.roa (raw, json)
Hash identifier: RnSaaC27n7LCarTK2T/w637M3Pr6yEWWJG/Nut9WWW0=
Subject key identifier: CE:6B:9E:00:C8:5C:76:6C:0F:28:73:1C:DC:E0:5B:39:CF:95:24:B9
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 01832AF06EC437989BFFE7B4E41FA3EF1807
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/zmueAMhcdmwPKHMc3OBbOc-VJLk.roa
Signing time: Sun 11 Sep 2022 05:05:43 +0000
ROA not before: Sun 11 Sep 2022 05:05:43 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:182:3f1d:a803/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:182:7cb2:99d4/128 maxlen: 128
2001:67c:64:ffff:0:183:2aef:926a/128 maxlen: 128
2001:67c:64:ffff:0:183:1279:659d/128 maxlen: 128
2001:67c:64:ffff:0:182:383f:6b78/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:2a:f0:6e:c4:37:98:9b:ff:e7:b4:e4:1f:a3:ef:18:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Sep 11 05:05:43 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=ce6b9e00c85c766c0f28731cdce05b39cf9524b9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:1b:ae:c7:28:bd:5f:39:6a:39:c8:b9:b0:cd:
20:47:79:ca:17:35:48:db:57:97:11:eb:95:fa:ab:
2c:c9:68:9a:09:22:7e:5d:b2:f6:c0:41:c9:ba:46:
82:ab:71:08:22:0b:45:82:bb:b9:ac:f8:f6:68:c3:
47:66:ec:d6:f7:41:71:67:98:ef:e3:26:4d:36:bd:
5c:5e:4c:98:f5:84:9e:2a:46:e6:22:28:1d:60:3c:
fc:b8:f5:9b:ec:78:72:e9:44:a2:85:df:bb:85:ea:
c1:d7:c7:07:a4:4a:0a:7d:ff:bf:1e:ac:22:ce:ae:
f3:5e:8f:7d:5e:eb:b4:e4:f0:9d:01:1b:69:1f:46:
5c:7b:9a:6e:b5:6e:88:67:44:60:59:06:7b:9e:a1:
b8:7b:d1:22:44:64:d7:37:76:64:18:58:18:94:70:
4e:e0:3a:b8:24:d6:dd:11:5e:9f:d6:50:ee:b1:16:
76:fa:fa:1e:d3:86:e6:cc:e5:71:f3:b3:6d:37:5b:
e8:90:6e:86:6d:67:2b:a3:ba:29:00:72:70:79:76:
65:f6:ec:19:de:21:5e:69:61:6d:11:24:25:4f:5c:
07:30:60:6b:5b:50:2f:1c:eb:ff:db:b2:9b:d2:52:
f4:d1:29:94:ca:90:7b:eb:f2:4d:25:d4:01:dd:7c:
7b:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:6B:9E:00:C8:5C:76:6C:0F:28:73:1C:DC:E0:5B:39:CF:95:24:B9
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/zmueAMhcdmwPKHMc3OBbOc-VJLk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
93:c0:ec:e4:93:da:54:1c:9c:e2:c7:83:79:9b:78:97:33:85:
eb:fd:db:76:97:87:4c:a2:40:ff:ab:91:23:b1:76:b0:db:d0:
ae:4f:80:57:a1:00:9d:cc:a5:e5:c1:6f:55:e0:30:86:7d:08:
c3:1d:f8:d5:42:00:33:07:10:26:d6:4d:5e:19:ae:40:b5:e9:
a8:0a:d6:c7:2e:f0:e9:c5:cd:a0:f4:fc:b9:3f:07:3e:54:47:
b1:04:91:18:19:71:04:35:3c:fc:74:00:72:17:cc:20:e9:7c:
07:b1:7e:f1:18:d2:9b:d9:7f:8d:20:b3:a4:db:6c:79:45:49:
33:00:fd:de:59:11:23:54:98:34:78:7c:35:7c:07:05:a8:24:
23:b5:29:07:48:a3:4c:ec:b6:c8:80:4f:e3:f8:14:a6:7a:3b:
ea:57:1c:d8:2d:ab:ce:22:a5:86:17:f8:45:14:70:81:5e:39:
59:36:c6:d7:77:fb:6a:a0:1f:05:38:d6:84:0f:24:dc:e7:3c:
85:46:82:4b:74:3a:10:c7:2f:4d:f4:05:2f:b4:9a:df:01:c4:
fe:7b:07:fc:c4:62:56:d0:54:2c:6e:ab:8e:81:d3:f2:21:df:
c8:b0:4f:5b:bd:17:f2:ab:49:08:c7:0f:98:ea:88:e4:34:f2:
5c:96:aa:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 11:09:02 2025 by rpki-client