Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/Z5qWfWfH94R_CKTrqfMM994QJLw.roa
File: Z5qWfWfH94R_CKTrqfMM994QJLw.roa (raw, json)
Hash identifier: FVzoEd3AmpVACscRlg2w4Y2sfBMBd8gxZwCpTWoczs8=
Subject key identifier: 67:9A:96:7D:67:C7:F7:84:7F:08:A4:EB:A9:F3:0C:F7:DE:10:24:BC
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0186CA55F69D932B8C1B856DC801478EE0D1
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/Z5qWfWfH94R_CKTrqfMM994QJLw.roa
Signing time: Fri 10 Mar 2023 07:04:36 +0000
ROA not before: Fri 10 Mar 2023 07:04:36 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:ca55:c140/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:ca:55:f6:9d:93:2b:8c:1b:85:6d:c8:01:47:8e:e0:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Mar 10 07:04:36 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=679a967d67c7f7847f08a4eba9f30cf7de1024bc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:4b:43:23:7c:8c:38:df:be:11:73:d0:b1:b9:
07:c0:af:fd:09:55:f0:0c:23:fd:42:da:df:9e:b8:
dd:1e:8f:f0:38:64:27:c6:0f:57:c3:5b:e2:12:89:
03:ec:6c:d2:aa:d3:d0:70:4b:34:d6:98:54:b0:a6:
b6:db:70:4e:e6:2d:f4:60:92:8a:d5:c4:12:67:a1:
bd:bd:be:b9:98:be:35:88:57:0b:58:44:9c:74:93:
59:1d:e4:b7:15:d2:f2:b2:af:0e:05:50:1e:60:49:
93:5c:8c:62:4d:1e:e8:d4:09:ba:29:24:51:36:27:
56:cc:3b:5c:da:42:74:7c:63:06:cc:bc:bd:e5:d6:
83:4e:7a:da:5a:4c:9e:ef:15:00:21:ac:84:1c:ec:
de:55:61:b1:3e:f9:0b:54:1a:46:1b:13:dd:7c:69:
46:19:32:2b:0f:22:d6:97:68:86:7f:5c:29:d3:2b:
2c:a0:f7:72:80:d3:dd:32:6d:29:14:00:52:49:2a:
be:f0:97:2b:bb:92:0b:8a:37:a1:29:a7:80:9b:d2:
8d:80:87:c3:10:11:3e:89:2c:b7:36:b2:8a:ab:df:
bc:9f:d3:d6:55:dd:b3:1f:d8:ca:1a:e8:00:fb:07:
8f:62:73:16:da:30:b5:47:4b:a5:70:7d:f3:5b:fa:
f7:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:9A:96:7D:67:C7:F7:84:7F:08:A4:EB:A9:F3:0C:F7:DE:10:24:BC
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/Z5qWfWfH94R_CKTrqfMM994QJLw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
08:e0:f1:ed:3e:55:43:ca:bc:56:da:27:1c:fb:02:6e:f3:62:
e2:b5:22:94:b1:62:b8:29:b0:11:e1:06:8b:9b:ae:2c:6c:24:
27:7c:d8:d3:2b:1a:f8:6a:fc:d2:f7:36:e8:83:64:94:01:b6:
da:87:24:b5:fa:ae:91:95:d1:cb:bd:2b:7d:e9:e7:bb:e3:7e:
2a:21:53:f9:b0:a4:ae:fa:07:af:38:92:39:b2:2c:d7:dc:67:
5a:5e:07:f5:4e:ce:36:19:49:8d:fe:6c:ee:3d:ad:f6:46:29:
bb:ae:01:b7:c0:49:b3:71:4d:d5:e4:9d:26:06:ce:7f:1a:f1:
81:b2:82:e9:85:9d:d6:39:b1:a7:3b:f4:5c:6e:ae:be:2d:2c:
d4:b8:6f:48:88:99:2e:98:92:91:a1:2b:e6:99:95:68:33:65:
ac:38:f2:a0:73:82:c3:a7:0d:77:1c:c9:17:4d:d6:2a:d6:5a:
20:20:15:c4:b1:ac:16:d2:57:49:58:53:a1:f2:f9:12:85:04:
77:d0:7d:bd:64:98:5c:52:56:13:44:30:09:a9:91:de:58:af:
e4:bd:c6:da:0e:c1:04:83:48:f9:91:d8:0e:6d:64:e8:9f:c8:
83:3c:2d:e0:de:0f:d6:36:84:f3:98:2c:3c:00:e8:d2:0f:68:
5e:c3:51:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 10 15:29:35 2025 by rpki-client