Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/zq004S8dFXr0JNzfQtqWLcl93EY.roa
File: zq004S8dFXr0JNzfQtqWLcl93EY.roa (raw, json)
Hash identifier: 2TffCCf2Ydi/nz0OvOoSyf0l6m6cRGJstlx7YrpZXYA=
Subject key identifier: CE:AD:34:E1:2F:1D:15:7A:F4:24:DC:DF:42:DA:96:2D:C9:7D:DC:46
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0181EFF4D9A098AB2B4AF970A769D78462AD
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/zq004S8dFXr0JNzfQtqWLcl93EY.roa
Signing time: Tue 12 Jul 2022 01:10:09 +0000
ROA not before: Tue 12 Jul 2022 01:10:09 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:81:ef:f4:d9:a0:98:ab:2b:4a:f9:70:a7:69:d7:84:62:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Jul 12 01:10:09 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=cead34e12f1d157af424dcdf42da962dc97ddc46
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:4c:5c:fd:4e:87:a2:66:56:ac:bf:52:97:cc:
38:73:a7:3d:39:2a:16:1a:a3:39:9e:78:24:9b:16:
93:2e:a7:8c:8a:4b:68:1f:17:2c:ba:4e:6e:21:c0:
08:a4:68:71:f8:07:3a:50:f0:7d:28:69:b6:71:3d:
57:9d:29:cd:20:20:37:5d:13:bf:a8:43:01:91:27:
d1:2d:3a:8b:b9:03:59:8b:83:c4:6b:5a:2c:a4:3a:
bc:3a:f4:9c:25:4b:1a:5f:ae:fc:1e:f2:e5:4c:fe:
27:cd:0b:64:22:de:3f:4b:7e:54:ec:57:07:ba:ca:
75:8d:00:ed:ae:a7:3d:0d:67:25:6f:1f:d2:02:f3:
72:ce:e0:62:db:58:f8:32:24:1e:0f:1f:83:ff:2c:
b6:37:3a:7b:46:23:b8:b9:dc:7e:e5:9c:8a:28:97:
f7:c2:ac:d7:dd:7f:e2:11:58:9a:0f:d9:fd:fe:00:
38:18:1f:d2:6b:f7:13:8a:49:06:92:40:cb:ff:d0:
15:5e:49:af:f5:08:99:02:61:16:db:d0:d6:6b:17:
ab:23:81:f0:54:40:73:4a:48:a4:ca:ab:34:b7:28:
f2:c2:98:c2:fa:37:9c:7c:67:2b:e2:aa:b0:b9:11:
1e:7b:80:c4:ca:b3:2d:7e:90:12:7c:8f:84:bf:99:
35:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:AD:34:E1:2F:1D:15:7A:F4:24:DC:DF:42:DA:96:2D:C9:7D:DC:46
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/zq004S8dFXr0JNzfQtqWLcl93EY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
6d:c8:18:cf:93:5b:30:00:8b:62:df:90:9d:b4:0f:ee:da:17:
3e:da:5b:ac:a5:de:23:50:11:a3:4f:c1:e3:49:a6:4e:ce:93:
18:aa:96:ae:10:46:45:10:f1:30:f7:5d:b1:cc:14:af:4d:81:
a8:a7:02:e5:f6:b2:ff:3c:ba:ad:b7:bb:e5:f2:32:f1:50:7f:
38:df:bb:4d:c9:16:8f:86:7a:6a:53:e8:58:e0:26:7e:1f:68:
10:cf:d5:8d:27:0c:16:c2:b8:e8:7b:d7:c0:3a:9d:4c:45:22:
e2:bd:27:2c:b3:b5:cf:c6:cc:ed:d3:86:d5:b5:c0:f7:2a:80:
d8:16:db:7d:77:08:3f:6d:55:22:44:e3:64:bd:2b:5a:e0:ce:
71:ea:7c:93:82:a5:fb:1b:c3:ae:a0:13:cb:05:d3:a9:e8:d5:
be:d6:77:ed:bc:53:c4:7a:82:2d:52:5b:49:af:18:e2:04:a6:
68:4c:39:b5:71:95:08:7a:4e:b4:11:b3:0c:e9:51:f2:4a:09:
4e:c0:ba:a6:0d:c7:a2:db:c2:b2:0e:f3:75:40:da:fb:44:56:
ae:5e:22:2d:24:44:b0:4f:f2:24:b7:a7:4f:41:ff:72:94:e3:
d2:e9:06:5d:74:c2:f5:58:c5:31:06:c8:e8:c1:e9:d2:ad:29:
1c:9a:4f:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 21:59:42 2025 by rpki-client