Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/ZSWIjp270Hq0_jaSE0jZS3yesi4.roa
File: ZSWIjp270Hq0_jaSE0jZS3yesi4.roa (raw, json)
Hash identifier: asraa5MEb6mO5JZu5vmB+Fw0yVv9iLW/nW+ty7+RQRU=
Subject key identifier: 65:25:88:8E:9D:BB:D0:7A:B4:FE:36:92:13:48:D9:4B:7C:9E:B2:2E
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0187996E65A6638E1CFC44898F0C04393E9C
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/ZSWIjp270Hq0_jaSE0jZS3yesi4.roa
Signing time: Wed 19 Apr 2023 12:12:41 +0000
ROA not before: Wed 19 Apr 2023 12:12:41 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:187:4695:a68a/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:99:6e:65:a6:63:8e:1c:fc:44:89:8f:0c:04:39:3e:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Apr 19 12:12:41 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=6525888e9dbbd07ab4fe36921348d94b7c9eb22e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:8e:43:70:8c:66:88:68:a0:a1:12:cc:f6:a0:
ca:a1:8a:0f:fb:f6:ae:8e:32:a6:07:99:c8:c3:32:
aa:ad:9f:a1:2f:27:a5:dd:21:d6:fc:ea:c3:a1:a2:
56:c7:24:08:3c:24:c1:f2:fa:c7:63:8e:b0:3a:1c:
e7:2c:02:90:aa:a7:19:e1:c3:45:13:0f:d2:74:18:
d9:62:0d:55:fa:99:44:ec:58:d3:73:15:ed:d4:f7:
8c:3e:a8:a3:cb:23:cb:1f:69:13:e4:e7:97:81:08:
e4:17:57:af:cc:1a:57:21:41:7a:a3:bc:12:ba:d5:
b5:07:49:11:5f:f3:5a:4a:b2:26:b0:67:7b:07:41:
5e:85:57:dd:d9:40:06:62:40:e1:8d:4f:9a:1a:46:
0b:f9:d5:d7:2f:8e:ce:b9:c4:4b:f8:78:4e:b6:8b:
1b:ae:fc:c9:92:1a:46:b2:10:c3:5c:9f:d8:df:f7:
6a:d8:4d:9f:10:71:c3:81:0d:64:02:2c:3c:2b:8d:
ec:a9:7f:ee:45:34:6d:4d:6f:b9:96:11:a6:6e:65:
90:11:75:21:db:43:57:eb:6a:35:ea:00:74:0c:70:
18:8d:89:e5:9c:2e:91:c5:6b:ca:b1:04:be:f7:33:
56:36:d0:71:8f:f3:af:e1:88:92:12:90:ab:16:56:
ec:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:25:88:8E:9D:BB:D0:7A:B4:FE:36:92:13:48:D9:4B:7C:9E:B2:2E
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/ZSWIjp270Hq0_jaSE0jZS3yesi4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
28:83:31:78:d4:f2:3b:ab:a5:e7:77:69:20:12:23:c2:d8:b1:
91:99:fe:53:3a:c8:10:98:e7:35:ca:cb:ce:9e:11:5d:28:fd:
af:39:33:42:94:e9:da:3b:e3:67:38:03:7f:38:9a:4e:f3:ca:
7f:bd:2c:a5:a7:db:cf:36:c8:52:c3:e8:21:74:1f:48:69:91:
59:20:f3:d2:b5:6d:9b:61:8c:ed:db:8d:49:ee:aa:9d:dc:02:
2d:e0:d0:9e:34:7a:75:03:a7:aa:89:1b:df:23:1c:34:67:99:
91:0c:0f:b3:39:4a:44:50:43:d5:69:f3:e8:f3:d3:ac:60:94:
13:1c:03:6c:f2:2b:42:7b:7b:d4:ff:7a:c6:37:8b:44:d5:4f:
b4:1c:23:20:18:ed:02:25:c0:fa:08:90:e1:49:6f:1d:1f:c5:
7c:2f:07:9c:10:77:ac:53:20:c1:fb:93:c3:b2:e6:0b:b1:e4:
93:7b:34:52:ea:55:c1:0a:76:69:47:0a:59:42:76:3e:00:26:
eb:3d:63:72:a0:9d:f6:36:9b:ae:2c:16:e6:fa:36:c6:f6:2a:
dc:d7:de:90:45:1a:6b:71:ea:15:67:78:32:84:f2:62:9b:0c:
3f:38:b6:24:9b:11:a5:33:ef:a4:4c:11:18:44:8b:61:33:0e:
24:24:fb:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 11 09:35:53 2025 by rpki-client