Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/Z2IUKLMT0gNTcWiRfTFocfaI9hE.roa
File: Z2IUKLMT0gNTcWiRfTFocfaI9hE.roa (raw, json)
Hash identifier: OCLorwu1s1HpP+2UzDXZK0R7Qu1iOvGb1Zm++ZIWxfs=
Subject key identifier: 67:62:14:28:B3:13:D2:03:53:71:68:91:7D:31:68:71:F6:88:F6:11
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 01830044F509ED63B91E0C16646DA8D4AC40
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/Z2IUKLMT0gNTcWiRfTFocfaI9hE.roa
Signing time: Fri 02 Sep 2022 22:14:22 +0000
ROA not before: Fri 02 Sep 2022 22:14:22 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:182:3f1d:a803/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:182:7cb2:99d4/128 maxlen: 128
2001:67c:64:ffff:0:182:383f:6b78/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:00:44:f5:09:ed:63:b9:1e:0c:16:64:6d:a8:d4:ac:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Sep 2 22:14:22 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=67621428b313d203537168917d316871f688f611
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:bd:33:c3:8a:87:07:a1:95:de:d3:c9:81:d6:
dd:5d:68:2c:fa:e6:01:db:98:33:bb:3e:71:46:35:
94:66:25:b9:56:6a:7e:a4:4f:0f:c1:a2:cf:46:e4:
23:9c:0c:af:ac:e6:c0:58:1a:ac:d3:75:43:ac:68:
f3:ba:38:66:c1:ca:24:75:4e:c4:3b:48:ad:52:82:
1d:bf:79:77:d7:be:64:32:de:78:25:63:19:fd:8e:
d0:37:07:78:23:fd:3a:28:45:5c:70:8a:f4:88:b3:
3e:62:fc:82:fa:4b:a0:3a:8c:2d:89:8e:7f:f9:69:
97:f0:ed:6a:1e:d9:de:8c:95:21:4a:e7:e4:f8:8a:
aa:f6:94:26:31:d1:90:18:98:d4:1a:08:64:7a:72:
4c:43:75:fc:cb:f6:e4:3b:5a:d1:ec:9b:2f:cd:c4:
3e:f2:24:cf:99:d6:43:e2:61:ee:19:ff:42:c6:45:
89:cb:cc:4d:36:a5:b6:4a:4d:83:92:2a:9e:58:e0:
7c:ec:0a:75:ca:33:8e:3b:59:a7:79:fc:77:bc:ce:
2a:9c:25:86:36:a6:e7:4e:ac:db:7c:ae:c9:4b:9e:
d6:81:11:53:f4:ce:49:f0:dc:49:d8:05:83:b7:19:
41:5b:d1:d0:82:78:27:1f:6f:7f:5a:55:15:63:d4:
b2:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:62:14:28:B3:13:D2:03:53:71:68:91:7D:31:68:71:F6:88:F6:11
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/Z2IUKLMT0gNTcWiRfTFocfaI9hE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
1a:87:94:17:c0:cb:20:3b:56:aa:40:61:c1:2f:f4:51:6b:b9:
be:1f:dc:1f:20:24:e2:bc:26:d7:7c:0e:03:7b:e5:49:13:7e:
79:c7:6a:a3:35:56:d1:ff:fa:12:6f:95:a7:41:37:cd:22:44:
b2:72:08:e4:fb:d1:6a:ac:a3:02:ac:3f:0b:e7:f8:c1:27:7e:
d7:17:ea:25:c6:b0:44:31:f6:8b:fa:74:4e:73:82:4b:41:63:
dd:53:76:04:ed:0a:6b:cb:55:6d:6a:dd:77:33:9f:1b:1e:51:
d3:f1:09:95:ba:86:70:08:01:fb:aa:ec:69:6c:ac:b5:a0:7c:
67:58:13:65:46:75:b3:99:7a:4f:2c:1a:0c:ef:6d:bc:02:1d:
3c:55:66:0f:60:ef:23:fd:97:30:7f:cb:ec:c2:11:6c:82:58:
ec:a1:01:66:6b:49:ed:87:26:57:cc:2a:48:c3:06:09:43:18:
69:9a:fe:61:c8:15:0e:9b:85:7c:e5:47:c5:2c:a9:1f:81:67:
3d:a5:e9:08:51:7e:36:b3:9b:63:bd:be:43:91:39:d3:4b:de:
63:97:f4:ed:dc:4d:0c:6a:5c:6f:50:ac:2a:90:17:74:d9:cb:
60:67:c1:18:0d:cb:fc:db:0f:fc:68:e0:01:cf:6b:67:f5:0d:
fa:5c:e1:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 02:42:46 2025 by rpki-client