Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/zonIDaeovcOzJm3iF0--5TrLR8Y.roa
File: zonIDaeovcOzJm3iF0--5TrLR8Y.roa (raw, json)
Hash identifier: vdVLD8SHAqinapHORNizEULCKdgqzpoBUODew6ZGFAQ=
Subject key identifier: CE:89:C8:0D:A7:A8:BD:C3:B3:26:6D:E2:17:4F:BE:E5:3A:CB:47:C6
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 01893530AF59B7D0A97832439653EE1A92C5
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/zonIDaeovcOzJm3iF0--5TrLR8Y.roa
Signing time: Sat 08 Jul 2023 11:08:50 +0000
ROA not before: Sat 08 Jul 2023 11:08:50 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:188:5fe2:b396/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:187:4695:a68a/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:188:7858:a003/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64:ffff:0:187:fa9a:b088/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:187:b2b8:a7dd/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:35:30:af:59:b7:d0:a9:78:32:43:96:53:ee:1a:92:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Jul 8 11:08:50 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=ce89c80da7a8bdc3b3266de2174fbee53acb47c6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:29:5f:9e:54:07:8e:68:3e:bf:34:ae:ad:bc:
81:c9:07:29:37:66:9e:f3:89:28:06:da:c5:ac:c0:
e3:24:d3:aa:0e:86:fc:5e:57:13:7c:81:34:70:8d:
65:ad:bd:3a:73:be:03:b1:d4:5f:42:1d:d6:e8:38:
62:ad:22:91:c9:80:12:5b:0e:d4:9e:48:d0:f2:64:
49:18:9b:fb:fc:79:0e:41:5f:99:5c:d0:20:ee:14:
a0:5b:6f:b8:d3:bd:82:d5:c9:2d:c5:fe:d9:08:2f:
fe:04:af:2e:56:00:d7:da:e8:ab:de:c6:55:cd:55:
5b:fc:4b:3c:72:3a:4d:ea:06:40:09:e6:e2:07:26:
8b:12:cf:da:f5:54:bb:10:4b:97:09:0f:fb:40:61:
72:01:5c:be:43:d2:a6:79:e1:c4:e9:ea:c2:25:be:
ad:e7:c7:b9:f1:bc:7e:a6:b2:f0:af:e5:c8:29:ba:
44:33:a7:28:24:54:01:65:23:f2:68:6f:98:30:64:
9a:32:42:d2:aa:c9:ca:86:1f:c2:78:c7:17:13:9a:
72:4d:4f:cc:97:4e:53:4f:f7:e5:3f:d4:da:06:15:
d4:8f:af:8c:c1:29:b5:e5:56:29:bd:f7:df:ed:1b:
19:02:de:38:f4:f4:1f:fb:01:45:7c:53:69:e5:4e:
14:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:89:C8:0D:A7:A8:BD:C3:B3:26:6D:E2:17:4F:BE:E5:3A:CB:47:C6
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/zonIDaeovcOzJm3iF0--5TrLR8Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
77:d5:9d:e9:c8:b8:2b:05:60:0b:c8:41:a3:6f:e8:ee:e1:b9:
79:2b:fd:42:8e:26:f8:37:c4:e1:0f:63:97:7f:92:86:fb:e8:
52:09:d3:8b:bd:ab:17:a6:83:f3:59:0e:dd:81:57:34:be:58:
8a:4a:6c:8b:d7:af:7d:c7:e0:d4:55:1d:a0:89:66:74:7a:a9:
9e:f9:a2:b5:40:ce:f6:40:b0:1d:dd:14:e7:d2:e3:56:8a:8a:
40:25:d4:d1:4a:0f:f8:b9:24:29:4d:74:8c:76:be:ed:21:4a:
3c:78:bd:8d:82:15:4e:52:11:1b:e1:20:d6:4f:15:33:6c:1a:
ec:6d:88:45:f8:e5:3e:d1:b3:0a:8e:28:5a:b6:09:99:7a:cc:
60:68:c8:25:ce:8a:b6:f2:07:7d:d0:14:2e:bc:b2:c4:41:fd:
8f:bf:c8:4e:3e:50:b1:f3:c7:b2:a7:7b:6a:14:93:55:83:89:
74:27:98:76:31:2a:d0:2c:45:46:19:b0:97:4e:e1:e4:06:09:
7b:f5:5b:a6:c8:cd:01:bf:8a:f2:79:c1:a1:cd:29:86:21:1b:
bc:1e:35:92:de:35:b2:58:08:ca:df:2c:99:c1:8a:f8:c6:15:
3c:09:dc:a8:d0:3f:aa:eb:ce:c9:8b:a6:ee:ee:02:db:98:f2:
b0:71:bd:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 03:59:57 2025 by rpki-client