Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/ZEZz1pNgdMeWVvYeo48sYiekcC8.roa
File: ZEZz1pNgdMeWVvYeo48sYiekcC8.roa (raw, json)
Hash identifier: 9Q7YI4jB91qZMJIqQPShzEgBfR1H8ODut0vDuqUIqGA=
Subject key identifier: 64:46:73:D6:93:60:74:C7:96:56:F6:1E:A3:8F:2C:62:27:A4:70:2F
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 875E2652
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/ZEZz1pNgdMeWVvYeo48sYiekcC8.roa
Signing time: Thu 26 May 2022 12:10:13 +0000
ROA not before: Thu 26 May 2022 12:10:13 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:180:ff9c:1e7a/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2271094354 (0x875e2652)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: May 26 12:10:13 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=644673d6936074c79656f61ea38f2c6227a4702f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:12:5d:4f:e6:7a:02:32:1c:f5:40:5b:85:79:
75:df:15:73:05:22:80:27:3d:1e:c6:b8:fe:e5:93:
a9:b2:c2:2b:ee:b2:fc:0b:f8:93:27:03:52:91:aa:
f8:a0:ae:a4:43:e3:b7:01:96:d7:42:d6:b8:cc:0a:
5e:9a:12:68:15:37:fb:c7:38:c4:07:1d:90:d9:62:
e8:9c:f8:77:fd:65:c0:80:46:54:0d:1e:af:8b:8a:
2a:92:91:07:51:f3:f6:95:0b:6e:94:c5:a9:d1:bd:
0b:7b:78:d4:72:ec:02:a3:e7:3f:37:f9:8e:5d:7f:
f1:bb:c3:8e:52:b2:36:e6:e8:da:a8:6a:54:c3:21:
a6:4a:84:92:f6:85:c7:aa:7e:0c:b1:cb:76:04:2d:
f5:8e:28:48:26:7d:43:8f:ca:d5:48:d6:b7:43:46:
b1:4f:5e:36:ac:85:df:0e:40:54:55:79:cd:53:5e:
fa:7f:a0:82:96:a6:32:7c:5d:16:0d:0f:55:7f:dd:
0a:00:13:2c:26:82:62:92:df:94:01:76:5a:e0:48:
68:03:96:c1:49:40:b9:fe:f3:12:58:fb:79:07:8b:
d2:20:f9:4e:c0:eb:b2:2b:5d:48:b9:d5:c4:91:2b:
17:b0:fd:56:27:a9:d1:d6:4e:5a:e5:b7:0f:06:d9:
26:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:46:73:D6:93:60:74:C7:96:56:F6:1E:A3:8F:2C:62:27:A4:70:2F
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/ZEZz1pNgdMeWVvYeo48sYiekcC8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
9d:27:d3:9a:23:e0:62:b4:82:b1:d4:5d:e3:89:22:4c:2c:8e:
dc:6b:c6:4a:7b:b3:15:b9:5f:12:57:36:5b:a2:22:04:23:66:
a7:f9:c3:7f:21:e1:dd:e5:9f:12:14:8a:3f:2c:61:67:51:f3:
bd:00:3a:41:8b:23:62:c7:3a:74:ac:33:d3:36:e4:60:89:2b:
67:66:b3:68:62:66:81:af:b4:34:6d:42:89:d4:13:35:c6:63:
41:49:c7:eb:f9:a4:34:ad:d5:36:81:71:bf:9d:6a:84:6b:16:
69:c6:c5:28:af:7f:4b:ce:a5:59:ce:bc:ab:d5:ab:09:3b:77:
73:a7:73:05:5f:f7:49:75:05:2d:f4:73:d5:3f:d3:e5:e8:a9:
3a:aa:a8:5c:15:7c:bf:22:98:63:90:85:59:98:76:51:5c:da:
ce:09:b2:df:65:29:92:2a:c6:6f:e9:66:77:f0:91:f1:20:dc:
15:29:ee:b6:25:82:88:28:97:d3:08:be:bc:5b:df:39:51:27:
89:ba:c8:2c:3f:06:14:dd:82:2e:b2:41:69:e7:b5:86:07:21:
2b:02:41:8f:5b:e6:2b:a9:c8:0e:be:b9:d7:f5:2f:ea:3e:14:
0d:73:5e:88:79:13:9f:2a:a3:69:e0:ba:a0:87:9c:32:f4:9a:
ad:8b:8c:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 10 02:23:40 2025 by rpki-client