Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/zuR3xyj7O_sgv0d0jXJj4HM1aM8.roa
File: zuR3xyj7O_sgv0d0jXJj4HM1aM8.roa (raw, json)
Hash identifier: Zj0qDUx9aktLKYmiYeHwlvVceO043ZI96xy7XcVgb3E=
Subject key identifier: CE:E4:77:C7:28:FB:3B:FB:20:BF:47:74:8D:72:63:E0:73:35:68:CF
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0185F02050E7F4375068B066F4C1AB4594E3
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/zuR3xyj7O_sgv0d0jXJj4HM1aM8.roa
Signing time: Thu 26 Jan 2023 22:08:47 +0000
ROA not before: Thu 26 Jan 2023 22:08:47 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:f0:20:50:e7:f4:37:50:68:b0:66:f4:c1:ab:45:94:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Jan 26 22:08:47 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=cee477c728fb3bfb20bf47748d7263e0733568cf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:bb:53:af:9a:7a:4e:85:f2:4c:02:86:43:6d:
23:b5:8f:5d:bb:55:14:e2:ad:db:5a:a6:b1:3c:5c:
62:f4:8d:45:60:7e:02:f0:48:74:9d:b4:fb:83:e1:
e1:6a:a8:da:73:41:4e:92:5f:83:48:9e:a0:04:50:
bb:a5:f6:9a:91:d8:c0:32:72:20:df:02:99:d0:ec:
6c:1a:8d:e5:99:f0:31:a3:cb:3e:c6:88:f8:ad:bf:
ed:fb:0a:80:39:4f:64:a6:95:d2:9e:37:78:7f:9c:
d4:02:4e:58:b8:c7:06:54:7e:91:9e:46:29:84:27:
7a:06:df:06:b4:f5:6c:fc:14:2f:0b:28:ef:db:b4:
cb:c9:93:da:c2:42:b7:3c:32:d5:de:99:d0:94:c8:
91:8c:f2:ae:e5:f6:8d:00:3b:a8:34:52:a4:7b:ba:
31:80:b0:dc:a0:c8:c6:c6:fe:5e:dd:5a:2f:75:f6:
9c:bd:05:6a:f5:60:73:b5:8d:c4:62:6f:85:cb:0b:
45:c5:6f:5d:4c:d4:e0:d5:c8:94:bf:de:26:0a:41:
f9:41:4b:0c:3a:b3:21:f2:24:f5:83:1c:21:ce:1a:
57:87:53:1e:26:e7:93:fb:c7:06:d5:d8:72:86:cc:
4b:19:bb:9b:de:0b:0b:c7:b1:90:6b:e4:e0:9c:9c:
ce:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:E4:77:C7:28:FB:3B:FB:20:BF:47:74:8D:72:63:E0:73:35:68:CF
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/zuR3xyj7O_sgv0d0jXJj4HM1aM8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
1e:60:eb:ad:cd:58:2d:19:97:b6:19:dc:41:1a:c7:73:4c:d3:
af:b5:dc:9f:24:37:fa:8e:71:49:07:ac:ca:8d:54:e1:00:71:
81:07:50:87:ad:60:88:6d:46:5c:4a:b8:61:ad:18:c4:d8:a5:
ee:5f:09:75:53:02:84:30:b7:f1:d8:7e:cf:6e:5b:8f:5c:25:
a7:c1:25:81:f3:b2:3a:cc:29:24:82:86:1a:54:df:26:fb:d2:
31:d0:ce:5a:a2:c8:57:65:84:10:8b:4e:32:17:73:01:64:78:
1d:2a:61:bc:b6:f3:89:88:1e:f0:c5:71:db:e2:09:67:66:f9:
b7:2e:46:3f:c2:39:22:ce:76:99:aa:14:32:ab:3d:29:36:d6:
62:1a:63:2c:39:fe:a7:32:65:52:a4:48:74:52:e1:95:13:fd:
70:10:fe:37:58:ff:5e:7a:78:e6:e8:83:d5:f0:9e:12:65:18:
33:e7:6c:ee:04:2b:cb:12:d0:c9:e2:f1:52:55:68:47:54:0e:
c6:ba:f8:94:8d:76:e6:ed:c7:f9:c9:e2:5b:44:df:84:ba:33:
ff:73:dd:0d:17:c2:8c:0b:95:7d:71:da:d8:bc:dc:74:17:68:
99:00:03:bb:3a:e0:81:bf:a7:c4:fc:37:12:fa:0e:25:63:bc:
78:f6:f8:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 16:04:50 2025 by rpki-client