Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/CZx1RDHGge2ZXnyb7iJa0Mu6VlQ.roa
File: CZx1RDHGge2ZXnyb7iJa0Mu6VlQ.roa (raw, json)
Hash identifier: y2MXe6Q7bGxO7Z2IxvX+zCZrsrxASEnL8hefdLAr/uw=
Subject key identifier: 09:9C:75:44:31:C6:81:ED:99:5E:7C:9B:EE:22:5A:D0:CB:BA:56:54
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 7696F371
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/CZx1RDHGge2ZXnyb7iJa0Mu6VlQ.roa
Signing time: Tue 29 Mar 2022 03:10:43 +0000
ROA not before: Tue 29 Mar 2022 03:10:43 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:17f:1bf4:40b5/128 maxlen: 128
2001:67c:64:ffff:0:17f:20ac:a2bd/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:17f:87e3:2531/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1989604209 (0x7696f371)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Mar 29 03:10:43 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=099c754431c681ed995e7c9bee225ad0cbba5654
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:89:50:1a:3b:7c:9b:11:7d:af:db:5e:a9:c0:
88:2d:3e:cc:67:af:ba:f7:8d:32:5a:80:c3:47:31:
99:ad:d1:a6:bf:45:b7:84:33:4a:ed:d5:34:0a:b1:
28:23:09:aa:4c:d9:8c:d3:65:50:75:ef:e6:11:02:
fc:fb:9b:5b:72:89:a4:6d:11:9f:25:8e:31:40:d9:
0d:79:5a:b9:03:8d:df:58:2d:01:0f:64:00:04:40:
9f:8c:ec:3c:b2:27:ef:03:b9:e1:cc:bd:ff:5d:3a:
36:ac:5e:50:b9:25:6a:4b:e2:a5:64:f5:9c:1b:1c:
9c:92:26:10:fd:1c:80:73:20:b9:e2:72:51:7d:e0:
df:91:fb:0d:5d:8e:78:ce:8f:ba:8e:3c:80:da:38:
2b:53:6f:bd:d3:c7:62:23:82:a5:1e:ae:d2:8c:06:
50:ae:f2:16:d4:2e:4c:aa:42:4f:ed:af:c8:ea:01:
7b:6b:dd:d6:04:a3:fa:03:c8:d4:0b:9a:e0:4d:2b:
97:25:ab:60:c7:1c:37:b3:c9:79:59:f9:6b:23:62:
3b:ad:14:e9:e2:0b:d5:a9:e3:84:6d:c6:f5:c0:56:
c3:62:bd:8d:56:be:ac:62:32:83:d9:b4:6a:a7:6f:
98:c0:da:27:91:66:c9:c4:8e:8d:9e:ca:f8:cc:0e:
8c:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:9C:75:44:31:C6:81:ED:99:5E:7C:9B:EE:22:5A:D0:CB:BA:56:54
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/CZx1RDHGge2ZXnyb7iJa0Mu6VlQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
2f:12:09:fa:24:30:1d:16:3b:51:8b:0f:5e:ad:e1:fe:35:b2:
5b:d6:9f:de:05:98:e0:7c:b1:99:82:f8:89:a7:1c:f9:13:a9:
fd:09:1b:f9:27:42:9d:64:0b:9e:92:45:56:ce:51:2e:76:76:
92:a8:3c:e7:be:9c:f3:07:77:9a:c2:53:38:10:7c:95:b3:ad:
21:5b:c1:51:b0:b2:60:07:4c:ca:50:ed:c8:05:85:f1:6c:6d:
90:40:de:fd:c1:21:38:56:94:1c:e8:22:69:d3:58:47:50:c9:
0f:c4:46:f0:f6:68:8f:17:a5:c3:04:ff:70:16:ae:2d:3a:00:
b7:6c:ca:58:99:2f:12:ef:1f:50:1f:29:0d:29:36:68:cd:01:
1a:66:f7:00:1f:34:b6:fe:ab:9a:70:9c:08:06:f4:ea:f6:6d:
c4:00:92:1f:92:49:e8:1e:49:87:d7:86:94:ab:ef:31:98:a3:
51:38:ee:eb:e0:ba:6e:a8:d2:9e:80:bf:81:0b:a2:59:9a:74:
f4:44:c6:2b:c4:39:ed:8a:5a:7f:ed:eb:07:8b:c8:39:1d:93:
5b:ae:57:80:b4:21:db:ac:ca:a8:94:2a:2f:b5:75:5f:0c:4f:
49:80:2d:ab:13:48:14:54:6f:2e:42:2e:b3:fc:5d:1d:76:81:
90:bd:c3:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 13:57:21 2025 by rpki-client