Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/ZY5oBYnKcwez-7cL-X9EZnLwhS4.roa
File: ZY5oBYnKcwez-7cL-X9EZnLwhS4.roa (raw, json)
Hash identifier: 1kJBAYi7xhLwt1vIob2DcVZkb2LlCOMx87CYwTk5OvI=
Subject key identifier: 65:8E:68:05:89:CA:73:07:B3:FB:B7:0B:F9:7F:44:66:72:F0:85:2E
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 01863C1842C9802195A0E2E085A486FE2B63
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/ZY5oBYnKcwez-7cL-X9EZnLwhS4.roa
Signing time: Fri 10 Feb 2023 16:11:08 +0000
ROA not before: Fri 10 Feb 2023 16:11:08 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:3c:18:42:c9:80:21:95:a0:e2:e0:85:a4:86:fe:2b:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Feb 10 16:11:08 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=658e680589ca7307b3fbb70bf97f446672f0852e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:7e:21:65:b4:b4:33:a5:0b:74:28:58:93:c0:
7b:11:37:c1:8d:10:73:d5:33:ca:fb:a8:e6:a5:73:
90:4a:0e:b2:3a:1b:d4:72:86:29:33:14:8c:8e:aa:
f2:51:ed:96:af:ca:52:fd:26:14:90:7e:bf:c5:3a:
46:48:72:9b:0b:62:60:10:64:bf:74:1a:9c:83:73:
46:ff:62:d2:06:5b:d1:cc:e8:74:67:25:3e:ac:bf:
c8:6a:98:74:03:e4:d8:f9:df:10:0d:45:7e:c8:ed:
09:9c:33:b3:3d:98:0d:da:54:fb:75:34:7f:22:97:
f3:c0:dd:13:f3:b2:b3:98:db:af:a1:6c:d0:98:43:
54:95:68:45:18:63:51:67:70:7a:5a:aa:61:83:63:
33:a3:15:69:39:9b:8f:72:f6:92:cf:82:57:c7:0c:
02:d1:d5:33:82:dd:ee:f7:bc:80:c0:3c:9e:12:9f:
c7:4c:35:70:4d:52:e4:2e:17:90:5d:b3:58:0c:bf:
fa:e4:5b:cc:6f:5e:04:10:bb:05:13:89:cd:66:95:
bf:6f:ac:ce:18:15:77:d4:e8:09:68:3b:a8:2f:82:
72:74:b2:1f:b8:bc:a5:9d:6d:c9:38:6a:af:ec:4a:
8a:d2:75:cf:c2:b5:cc:11:3f:c4:64:c3:f1:29:0e:
b4:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:8E:68:05:89:CA:73:07:B3:FB:B7:0B:F9:7F:44:66:72:F0:85:2E
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/ZY5oBYnKcwez-7cL-X9EZnLwhS4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
6b:12:2f:20:6f:fb:91:07:4d:22:8c:cb:e5:69:6a:c8:e2:cc:
b5:92:4f:12:59:9a:ce:b4:aa:0a:03:74:94:1e:46:bd:6b:ed:
6b:55:ef:54:c0:47:8d:5c:12:ef:f1:0d:d5:4e:1e:c1:f6:fa:
bb:13:cb:11:21:29:14:1d:ca:fc:4b:9b:6b:ac:4a:98:f5:4f:
43:00:7b:68:7b:98:42:e6:4c:a6:81:ce:d0:25:50:3a:3a:b8:
13:d9:31:23:8f:62:51:7c:ea:ed:53:67:4d:39:76:e8:c1:9e:
0e:a7:20:0c:8a:35:af:2f:bf:36:9e:18:29:b6:fa:ba:dc:ec:
c1:4d:56:38:24:ae:a7:a0:1e:00:88:65:8a:82:31:89:ba:1d:
49:e1:44:e3:d8:1f:da:0b:af:13:fa:4b:d1:45:49:8a:d8:7b:
4c:42:cc:f9:27:f4:8b:24:79:0a:4e:27:1d:3e:44:cb:8a:90:
df:75:26:a3:d8:e4:df:e7:6d:c5:24:99:42:69:b4:cb:9f:0d:
75:af:e2:b8:3f:3a:f6:aa:c9:4f:20:9f:58:ef:82:40:07:82:
78:50:48:43:5b:11:47:70:b7:41:1b:be:02:81:d1:a9:82:05:
be:20:74:65:43:8b:7f:aa:74:1e:ba:1d:84:53:93:35:f3:aa:
c8:1c:09:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 02:05:52 2025 by rpki-client