Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/zs7pnZax7GPZkf0_ErDaLIsig84.roa
File: zs7pnZax7GPZkf0_ErDaLIsig84.roa (raw, json)
Hash identifier: mCZh9XMqhJAakHAnSsAaLXnE1tHZIyJOF0DcIrBsdm0=
Subject key identifier: CE:CE:E9:9D:96:B1:EC:63:D9:91:FD:3F:12:B0:DA:2C:8B:22:83:CE
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 01884438FAE5431C0FD63C7592BAD40D5E87
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/zs7pnZax7GPZkf0_ErDaLIsig84.roa
Signing time: Mon 22 May 2023 16:09:24 +0000
ROA not before: Mon 22 May 2023 16:09:24 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:187:4695:a68a/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64:ffff:0:187:fa9a:b088/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:187:b2b8:a7dd/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:44:38:fa:e5:43:1c:0f:d6:3c:75:92:ba:d4:0d:5e:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: May 22 16:09:24 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=cecee99d96b1ec63d991fd3f12b0da2c8b2283ce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:40:e5:67:5c:16:ef:2f:b6:a0:61:49:87:08:
ce:5f:cc:4f:65:75:15:49:b1:67:a2:45:bc:fc:7d:
a9:70:97:67:be:e1:c0:8b:01:39:eb:08:ba:9c:8d:
ee:52:7d:28:ce:0d:67:1f:f4:04:91:6e:80:50:3f:
ec:4e:97:56:46:82:83:4a:a5:06:e3:4e:e5:2c:b4:
8c:1e:37:40:0c:7a:5c:12:1c:f2:0a:dc:28:8c:33:
e8:34:39:cc:82:0a:49:d0:e0:e0:3e:34:00:c4:cc:
c8:0f:4f:5a:71:a2:5d:8d:cc:e6:28:17:cf:5f:e7:
dd:0c:d9:8d:b2:b0:4b:34:19:56:8d:7a:a4:4f:12:
4c:0a:f7:f4:a0:1f:b6:3d:bd:fb:26:3a:b8:09:42:
c6:db:d6:2f:59:8f:c4:55:36:a8:6b:1b:d6:e6:c5:
cd:d8:61:bb:44:0d:1e:2b:fc:14:66:06:cb:c5:f3:
67:52:81:ac:82:26:b1:e8:34:1f:03:85:4e:ad:1c:
36:a9:3b:29:c6:e4:a8:c4:bd:8c:71:b0:28:dc:00:
7b:8d:79:b4:84:46:92:7d:f3:ed:1c:9d:70:22:b0:
60:f5:37:14:52:ca:4b:7d:fe:7b:ee:49:a0:40:ab:
29:35:66:70:c0:e6:cd:d5:77:bd:12:73:87:cf:5b:
33:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:CE:E9:9D:96:B1:EC:63:D9:91:FD:3F:12:B0:DA:2C:8B:22:83:CE
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/zs7pnZax7GPZkf0_ErDaLIsig84.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
1b:91:e3:e9:26:6f:a1:7a:d9:07:56:1b:5e:70:fa:68:d0:c0:
b9:91:ab:31:a3:76:26:29:9f:11:e5:f8:5d:de:f8:fc:af:03:
bd:e5:4a:c2:69:cd:8f:be:6f:bb:76:85:5c:62:4b:1a:a9:87:
90:d4:44:a7:31:9e:70:37:82:39:6b:eb:04:38:15:91:88:6e:
ba:90:a8:fe:b7:0a:31:71:4d:85:32:d0:07:3e:62:e7:7e:20:
11:0f:55:94:d6:09:aa:18:d4:ac:3f:67:c5:53:03:63:6e:5a:
8a:63:66:39:88:f2:05:99:b4:b7:59:30:fa:f3:36:b0:9e:77:
f2:5d:7e:04:4a:ac:99:43:24:eb:7e:b8:a4:ed:48:7a:b7:9d:
74:c3:2c:3d:bd:68:98:94:73:3a:90:c0:a9:a8:50:04:b8:6b:
80:a1:ec:b5:a9:b0:5d:aa:55:27:b5:c8:b0:4f:d5:92:4a:d9:
14:66:ff:2b:70:34:dc:38:01:8d:a0:3a:dd:b9:a6:08:7e:52:
74:4e:ca:83:07:7e:0e:17:84:4c:b6:97:17:f0:38:b6:ff:7a:
ae:2e:b3:6a:43:fd:74:04:85:e4:06:46:5e:fc:70:4a:31:1c:
79:e8:ba:79:00:85:b0:34:f0:f5:d3:ce:25:cf:99:10:7a:e5:
19:fc:63:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 20:55:03 2025 by rpki-client