Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/RZOsvGasORJ3bP9RL_B37e5Y1d4.roa
File: RZOsvGasORJ3bP9RL_B37e5Y1d4.roa (raw, json)
Hash identifier: u6UfgzfluBMHFb8JSttnGtqi5EgbVKLusMLla1P/ZZI=
Subject key identifier: 45:93:AC:BC:66:AC:39:12:77:6C:FF:51:2F:F0:77:ED:EE:58:D5:DE
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0189B47559C73FCDF7FF8174EA7A9059800F
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/RZOsvGasORJ3bP9RL_B37e5Y1d4.roa
Signing time: Wed 02 Aug 2023 04:15:36 +0000
ROA not before: Wed 02 Aug 2023 04:15:36 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:188:7858:a003/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:189:a0e4:5c7d/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:b4:75:59:c7:3f:cd:f7:ff:81:74:ea:7a:90:59:80:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Aug 2 04:15:36 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=4593acbc66ac3912776cff512ff077edee58d5de
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:08:4f:7f:17:d2:b2:f1:37:85:88:6c:1e:86:
b6:1c:91:22:e8:d3:31:e5:06:b9:71:e1:0a:f2:84:
6f:d2:8b:5c:3d:31:2e:15:b8:fd:dd:ad:38:10:f2:
79:1f:70:2b:c3:f1:3d:f0:fb:f2:86:28:fb:8f:6a:
6e:d0:d9:a4:45:26:63:dc:8c:74:d0:e5:5f:7a:4b:
e3:0f:01:8a:fc:fe:1c:23:68:54:bf:25:3b:63:5b:
cf:52:93:ce:df:2e:01:ad:42:a9:28:61:0d:9a:b1:
3b:2b:85:90:5b:a6:e4:58:a7:b0:55:f9:1e:8d:0b:
e9:9a:b2:46:30:cb:e8:98:b1:1d:29:83:a9:bc:ec:
f3:25:8e:0e:74:0d:8c:e3:e0:39:d0:83:43:ea:da:
72:0d:0f:95:5b:1a:99:1b:0c:7a:4e:87:ca:ef:f2:
5b:1a:26:47:31:27:f0:c3:28:57:97:ee:d9:96:b4:
54:e8:7b:6b:f1:13:53:42:47:09:cc:aa:13:77:e6:
96:8e:32:4c:f6:2a:81:0e:c1:b0:c1:1a:e2:03:37:
e6:1b:83:b4:ee:b1:d5:99:07:92:3c:d6:69:ee:24:
97:11:de:d3:78:d8:2d:e5:d8:47:fd:3d:7b:3f:9a:
31:1f:b6:87:52:f0:a0:d2:0e:43:45:9d:61:45:b9:
10:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:93:AC:BC:66:AC:39:12:77:6C:FF:51:2F:F0:77:ED:EE:58:D5:DE
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/RZOsvGasORJ3bP9RL_B37e5Y1d4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
9a:6b:96:a3:eb:4c:07:06:2c:5e:ea:76:08:49:42:4c:96:8b:
f7:74:04:9d:5d:3e:30:5f:be:e0:2a:9d:a1:19:cd:bb:64:6e:
00:27:0c:65:15:3d:1e:25:67:0a:6a:4d:11:52:cd:c0:4b:94:
69:12:4d:cd:b2:56:3b:fa:a9:5b:ba:e1:c2:87:13:3c:df:4f:
dc:42:cd:06:85:9c:db:d1:84:a2:2f:a5:ab:23:96:9c:a2:d5:
8d:19:04:07:95:b9:44:0b:4b:18:ce:f8:8b:46:30:d4:4d:25:
68:6b:ed:6d:29:00:6d:1b:20:1c:c8:5c:1b:a1:ef:f7:6a:e2:
3d:35:6b:b1:7a:1f:6c:9d:9e:5e:1c:77:ba:fb:4f:89:1f:72:
7b:a3:ed:a9:c7:95:fc:02:94:2e:fd:ec:64:70:31:c2:23:99:
7e:81:d4:6f:f4:3b:35:ac:ab:8b:8f:54:a0:05:8b:04:5b:53:
1f:43:eb:fb:70:ed:6a:01:91:0e:04:d4:cf:b5:50:8f:75:c3:
4e:19:89:8f:42:fc:bf:76:2d:74:65:78:47:47:94:24:61:a8:
e4:ad:9f:a1:c2:1c:b2:47:56:cb:07:75:41:2b:23:3c:33:64:
da:7a:b0:27:b5:76:c8:0e:92:aa:13:84:26:cd:c6:c3:46:d5:
29:0e:f2:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 22:23:30 2025 by rpki-client