Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/ztdG7oCPdNM62DYQ7Er2qOFRDTo.roa
File: ztdG7oCPdNM62DYQ7Er2qOFRDTo.roa (raw, json)
Hash identifier: bd68I0TzncPkxySAP9cn+/jYLcDxuEQvt04FVGjhs5k=
Subject key identifier: CE:D7:46:EE:80:8F:74:D3:3A:D8:36:10:EC:4A:F6:A8:E1:51:0D:3A
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 018A20D7AD56AA95814CCCEA6A8ADCA2B1DE
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/ztdG7oCPdNM62DYQ7Er2qOFRDTo.roa
Signing time: Wed 23 Aug 2023 05:22:00 +0000
ROA not before: Wed 23 Aug 2023 05:22:00 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:188:7858:a003/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18a:178d:7ed9/128 maxlen: 128
2001:67c:64:ffff:0:189:a0e4:5c7d/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:20:d7:ad:56:aa:95:81:4c:cc:ea:6a:8a:dc:a2:b1:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Aug 23 05:22:00 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=ced746ee808f74d33ad83610ec4af6a8e1510d3a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:d2:b6:1b:3f:6c:c4:05:13:81:22:20:fa:8d:
38:cd:6e:a7:16:65:ee:79:03:ab:8d:eb:5f:49:76:
1e:f8:24:f1:54:1f:75:4e:31:6c:14:bd:6c:e3:9f:
89:8a:09:34:55:6c:37:c1:74:e6:7c:b1:ba:1f:9c:
d6:57:a2:b6:cc:ee:90:cc:bb:ca:1f:e7:a2:12:23:
43:c6:3d:3d:46:31:5e:0e:89:21:1b:40:a7:2f:e8:
e8:c5:1c:23:d7:8c:0c:00:b4:f3:91:52:b0:7b:14:
90:0d:01:fd:a8:1b:5c:4d:69:15:68:e6:fc:79:89:
a3:0a:02:11:91:d2:9c:4c:58:e1:75:8b:b8:6a:58:
6d:98:e1:a8:f4:77:79:0c:ca:61:83:bb:f1:17:df:
c6:8a:3a:d6:7d:ac:c8:ca:db:bc:be:25:7c:88:80:
6d:97:29:53:6d:9d:76:74:55:df:7a:45:17:68:57:
c2:6b:e0:e0:a6:7a:6c:a8:fe:ff:2d:72:61:29:9a:
3d:d8:22:09:4d:db:55:53:70:d0:34:a4:e7:2b:b9:
0c:0a:4b:ee:4a:ce:ff:ee:5f:f8:17:d7:17:7c:b4:
d4:21:3f:0e:59:80:ad:a1:a9:98:fe:c1:f3:ad:03:
71:6c:71:30:4a:7e:1a:85:52:66:b0:bd:75:82:cd:
3a:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:D7:46:EE:80:8F:74:D3:3A:D8:36:10:EC:4A:F6:A8:E1:51:0D:3A
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/ztdG7oCPdNM62DYQ7Er2qOFRDTo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
7a:bc:82:02:4e:36:57:14:cf:3d:99:81:d5:f4:95:2e:29:5c:
0d:d7:e0:38:6f:04:36:c6:6a:59:8f:fb:5a:12:e7:09:14:6f:
40:49:0a:93:9b:0a:c1:4a:db:df:08:e5:18:fb:c8:78:dc:56:
bb:a3:35:a7:54:b6:ff:d8:2b:ea:f2:d0:e2:13:30:57:70:6c:
c7:30:f9:74:3b:66:1a:53:23:7a:f4:eb:8c:d8:6a:81:59:43:
73:cd:86:a4:fd:27:bb:bc:21:94:d7:03:9f:17:8a:8d:c1:31:
de:0f:36:94:d7:91:0d:a5:2c:a9:84:d9:38:55:bd:bb:0c:5d:
dc:35:13:b5:e7:dd:3e:2c:68:9e:b1:ee:03:3f:39:a5:12:a2:
e5:4c:27:7b:07:02:49:84:63:0e:01:8b:b4:9a:8b:f7:cd:98:
a9:a3:4f:3c:55:06:39:a2:d0:29:e5:ea:0d:9f:c6:73:5e:b5:
95:00:27:1a:5a:13:e0:8b:6d:98:53:d9:3e:ba:15:6a:e3:be:
3f:77:ad:66:e5:a5:7c:d2:92:0a:00:9d:c4:ba:b0:6d:e7:3d:
73:ee:6e:5e:e8:40:c9:c5:64:ba:ac:aa:00:86:c5:fb:a3:80:
db:c1:e2:2a:47:b0:5b:bc:84:e0:1c:21:3c:ac:06:bd:72:8c:
44:75:29:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 06:48:55 2025 by rpki-client