Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/zpYj5QKcn3qZmr8xKypb3ZN2G8Q.roa
File: zpYj5QKcn3qZmr8xKypb3ZN2G8Q.roa (raw, json)
Hash identifier: iDjJ3SHJSuLCcDGieTkA3w2AnNZsH1Bhl/ij/B6Qxzg=
Subject key identifier: CE:96:23:E5:02:9C:9F:7A:99:9A:BF:31:2B:2A:5B:DD:93:76:1B:C4
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 018941A750D5073F112ED75D481A8541DFC3
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/zpYj5QKcn3qZmr8xKypb3ZN2G8Q.roa
Signing time: Mon 10 Jul 2023 21:13:51 +0000
ROA not before: Mon 10 Jul 2023 21:13:51 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:188:5fe2:b396/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:187:4695:a68a/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:188:7858:a003/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64:ffff:0:187:fa9a:b088/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:187:b2b8:a7dd/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:41:a7:50:d5:07:3f:11:2e:d7:5d:48:1a:85:41:df:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Jul 10 21:13:51 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=ce9623e5029c9f7a999abf312b2a5bdd93761bc4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:89:d5:c1:ce:6b:a1:f7:b5:d9:e0:72:7b:a8:
ac:ed:10:9d:5e:ae:eb:ca:bd:6e:51:0a:b9:bb:d4:
db:c3:5c:2d:0c:90:ec:c4:86:0e:ac:9a:81:df:86:
a1:6a:18:1f:04:6e:65:d2:b7:b5:e0:84:35:bf:18:
22:22:4d:87:65:35:54:9c:b5:d0:93:98:82:be:37:
78:5c:e4:7c:46:67:c0:87:e7:17:f6:1b:d0:ff:3c:
a6:a4:4d:be:ec:68:48:dd:42:91:66:4a:cf:d8:1b:
0f:7c:6b:42:ec:74:11:11:2b:51:51:db:ea:d6:17:
9e:69:83:23:83:d4:a7:32:82:7d:14:00:87:46:be:
26:d5:4f:ef:da:c8:e0:a9:7e:ca:25:25:b1:22:94:
ee:20:a5:0f:44:fb:18:cf:04:43:16:43:23:e6:28:
fe:46:5a:da:0a:69:5b:10:64:6d:9b:e7:24:b9:e8:
c7:b0:3a:0c:d5:19:44:d2:9f:fc:16:ba:dd:88:e0:
5d:47:b9:19:12:b0:96:fb:8f:2f:0d:9d:9d:f9:ba:
4c:c8:fc:a5:ee:a2:e7:7b:16:fa:c7:7d:38:0a:06:
3c:4d:7a:1e:5f:3d:69:7a:41:3e:0e:ee:94:7f:03:
d8:86:ed:7f:3f:3c:2b:e9:45:68:6b:98:81:77:5c:
cf:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:96:23:E5:02:9C:9F:7A:99:9A:BF:31:2B:2A:5B:DD:93:76:1B:C4
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/zpYj5QKcn3qZmr8xKypb3ZN2G8Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
02:6e:96:cc:17:12:61:0d:de:14:78:f0:fc:da:74:58:aa:c6:
ea:61:86:f1:2c:7e:50:70:87:ba:b6:96:97:81:f6:ea:4b:3c:
07:4c:de:d2:dd:97:03:8b:0f:e2:8c:f3:b4:7c:1a:df:bf:75:
74:10:05:83:a5:fc:b1:4e:f9:74:a8:d9:ed:ce:41:b5:17:14:
be:0d:ff:a9:b6:d5:9e:04:45:54:5a:d2:4b:75:3d:50:18:dc:
5c:4f:9e:44:b0:ff:d7:b7:c4:68:fe:b2:3f:9e:bc:1e:c4:44:
3c:5f:7a:04:f3:5b:21:c5:55:b1:42:b0:cd:d0:92:c2:94:c5:
08:66:16:ca:18:33:09:30:25:30:11:50:51:a6:d3:1a:c3:c2:
60:c2:1b:86:a3:4a:61:2b:77:4b:66:70:34:a3:d1:ea:de:79:
f6:ad:0a:17:90:d4:fe:96:9c:c9:33:8b:1e:38:66:de:59:ec:
2f:7f:39:bb:ec:2b:77:98:28:46:c8:22:32:ad:0f:40:c3:44:
1c:89:d3:0e:bb:e0:3e:f3:a3:10:a9:26:01:0e:cc:4f:bc:b1:
5c:47:fc:56:e9:4a:e7:3f:52:35:3b:7a:c2:b3:89:b5:df:af:
c6:bb:58:aa:86:10:93:de:e9:89:5c:72:f1:c6:4d:73:d6:7e:
d0:de:9d:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 22:59:53 2025 by rpki-client