Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/zrN5Ud3PIWBrrkCfS1MQKnMib5Q.roa
File: zrN5Ud3PIWBrrkCfS1MQKnMib5Q.roa (raw, json)
Hash identifier: schFl/pUutoZwLmhQLfAskdTU4bh2IDZuLAej0D/xIs=
Subject key identifier: CE:B3:79:51:DD:CF:21:60:6B:AE:40:9F:4B:53:10:2A:73:22:6F:94
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 01829BA24F5BA9E92DA0CC0FDAEE478CB93A
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/zrN5Ud3PIWBrrkCfS1MQKnMib5Q.roa
Signing time: Sun 14 Aug 2022 09:14:41 +0000
ROA not before: Sun 14 Aug 2022 09:14:41 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:182:3f1d:a803/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:182:7cb2:99d4/128 maxlen: 128
2001:67c:64:ffff:0:182:383f:6b78/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:9b:a2:4f:5b:a9:e9:2d:a0:cc:0f:da:ee:47:8c:b9:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Aug 14 09:14:41 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=ceb37951ddcf21606bae409f4b53102a73226f94
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:ec:af:f8:1b:ba:18:fc:84:dc:5a:ee:87:f7:
ef:09:01:cd:b0:9c:00:d2:9d:2a:51:ed:20:c1:ab:
9c:a8:57:68:f0:84:f0:d8:ec:a7:12:20:05:11:22:
a8:68:cf:35:99:a6:77:bd:f9:62:12:b5:cd:35:fd:
81:ab:25:aa:05:fd:fc:d5:98:10:48:e5:02:88:af:
d4:c8:e0:24:c0:ea:37:2a:95:80:67:c7:38:7c:5e:
31:81:89:4e:03:82:cd:92:e0:30:d9:7a:05:89:4e:
c1:22:e7:19:93:5a:71:4d:cc:ea:20:19:36:f5:5f:
3a:6c:8a:73:65:b9:2b:a8:9a:c8:da:81:be:ed:aa:
f0:db:d2:0e:61:31:ac:9d:b8:60:3a:9c:b7:bd:29:
c5:cf:a7:55:e1:8c:ca:16:a7:ac:11:a0:01:c6:b1:
3a:81:34:85:b7:c9:3b:92:95:c7:b8:6b:c2:aa:7e:
ee:fa:11:0b:58:3a:cd:07:26:84:a2:8f:1d:c8:a7:
68:ae:69:b1:f5:a3:fa:82:66:4f:0d:94:d6:0f:69:
c1:11:5a:e3:a0:aa:d3:c5:62:25:0a:e0:69:ca:bf:
46:ad:76:fd:fc:38:de:45:ca:8d:af:8c:de:3c:3f:
ea:36:4e:1a:cb:1f:85:b6:2a:50:2d:68:01:4a:0b:
c3:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:B3:79:51:DD:CF:21:60:6B:AE:40:9F:4B:53:10:2A:73:22:6F:94
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/zrN5Ud3PIWBrrkCfS1MQKnMib5Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
9e:a4:ca:ee:2e:b6:5c:37:18:38:f9:ef:16:3f:2e:63:b5:86:
ee:49:07:fb:1e:84:47:8a:bd:04:a9:ef:69:d2:30:2a:5d:31:
f2:b7:00:ba:a1:fb:6d:f2:1d:57:f0:6a:bb:f3:49:34:3d:a3:
47:d5:6b:98:13:0a:5c:b1:ba:14:65:02:38:e4:d5:c4:2d:c2:
9a:38:29:72:e7:ae:e6:60:69:66:e1:e6:cd:45:96:c0:fb:dd:
6c:55:9d:71:52:2f:26:a6:b8:a3:fb:02:83:31:15:9e:51:0c:
30:7f:94:24:f1:71:b7:51:99:5f:3d:20:4a:43:10:45:8b:b6:
11:71:9c:7c:09:fa:c9:14:22:36:8f:d6:8b:69:76:41:d4:96:
51:3f:ad:03:75:f1:9d:19:15:ab:9e:0a:30:be:1f:6d:5d:6a:
6f:e0:63:d5:66:29:8f:02:48:50:7c:69:15:fe:3b:b9:6e:d6:
10:96:8a:70:e8:b0:cc:cd:14:45:4f:56:7b:e3:78:be:42:c2:
a9:52:f2:00:86:5e:70:e7:fc:44:bc:a6:dd:21:d0:9d:0e:99:
67:82:59:9c:f4:aa:a7:af:aa:29:1f:c0:91:bc:ae:4e:8b:7f:
eb:20:d7:f5:57:c6:b7:84:6c:32:61:d5:af:2a:4b:a5:68:a1:
1f:0b:e7:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 17:36:10 2025 by rpki-client