Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/ZbwNUQm-3faA_7zDIUHPZXiSTfo.roa
File: ZbwNUQm-3faA_7zDIUHPZXiSTfo.roa (raw, json)
Hash identifier: s6NU6VXlsw5X5XHOUzMPlFU+wwGfxZ60SF+Gd2ozTQM=
Subject key identifier: 65:BC:0D:51:09:BE:DD:F6:80:FF:BC:C3:21:41:CF:65:78:92:4D:FA
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 7D0DFC4C
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/ZbwNUQm-3faA_7zDIUHPZXiSTfo.roa
Signing time: Wed 20 Apr 2022 21:09:34 +0000
ROA not before: Wed 20 Apr 2022 21:09:34 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:180:466e:42dd/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:180:457:1e3f/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2098068556 (0x7d0dfc4c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Apr 20 21:09:34 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=65bc0d5109beddf680ffbcc32141cf6578924dfa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:42:31:b6:ae:fb:0c:d6:e6:20:ae:1a:72:80:
d0:d8:b6:a8:52:3b:8e:9c:29:73:0a:15:b4:3f:db:
fb:81:21:32:ae:0e:da:74:4d:49:16:55:4f:fa:90:
44:39:84:86:07:71:50:c6:b2:88:54:74:f0:86:3a:
ae:51:e9:62:08:85:bf:03:ad:e6:03:59:34:2d:2d:
9a:06:51:ab:b1:fd:87:db:f0:3d:8c:c6:d1:10:57:
97:0f:50:d1:bb:46:e7:63:85:66:1c:8d:d0:fa:2a:
e6:f2:a9:78:86:ed:a0:a0:54:43:5f:97:df:a4:79:
37:7e:0f:c7:bd:33:66:43:ed:13:45:08:06:e2:17:
73:b3:ca:26:4f:fb:d9:64:d2:15:20:33:a0:35:e9:
8f:e5:1e:71:d6:7b:eb:f1:48:eb:b5:e7:5e:96:af:
6b:f1:6c:15:04:a2:92:3e:84:c8:75:a1:ff:55:69:
c1:a1:86:8b:77:7e:97:15:1e:1a:b6:75:de:63:47:
c4:b8:16:bf:8c:cc:65:1c:b8:80:1e:61:9b:76:5e:
74:1b:e9:03:23:29:46:cf:00:e2:00:6c:ba:ac:1e:
62:39:42:2e:4a:64:70:5c:e2:d1:20:22:fb:5c:d1:
c8:2c:a0:b0:17:c0:9f:73:17:9e:f3:e3:5f:b7:04:
b7:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:BC:0D:51:09:BE:DD:F6:80:FF:BC:C3:21:41:CF:65:78:92:4D:FA
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/ZbwNUQm-3faA_7zDIUHPZXiSTfo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
13:76:a9:60:7b:8e:73:30:54:fe:aa:97:a8:ab:19:e6:05:a5:
dd:dd:a7:96:1a:80:6d:83:68:10:09:6a:94:e7:8b:18:0d:e0:
2c:20:13:66:2c:60:fd:6e:8b:0f:e9:9d:78:fc:22:f7:cc:fc:
35:5d:0a:fc:ad:8d:c3:3e:e7:92:09:a8:6f:b6:6e:e5:90:50:
6b:89:6c:e6:ac:66:fd:b8:4a:c0:bd:58:5b:f7:e1:4d:9a:53:
3b:dc:18:12:0a:a9:f3:d7:4e:b5:2d:fb:84:d9:fe:d8:ea:90:
27:d3:eb:5c:21:12:6b:40:5b:62:c5:de:2d:22:ab:d4:b2:1d:
ea:2b:6d:c1:f6:d3:56:d2:f3:01:fe:ee:72:ec:a9:b4:b7:9f:
77:ac:83:b8:59:62:76:27:af:a4:17:9b:a9:a7:17:e6:63:fe:
4d:d0:09:b5:2d:de:0e:bc:bf:bb:8b:ec:c6:9c:26:80:72:07:
11:c9:1c:17:95:2a:d8:e3:7e:d2:65:a7:1e:4c:bd:05:e7:f8:
6c:e7:9c:68:1c:c1:13:db:9b:ce:a6:d5:ae:80:2d:1a:c7:2a:
a9:91:95:8c:01:64:6c:5c:08:f0:37:e2:a1:a9:9d:94:96:26:
97:c8:14:e1:2f:a0:f5:da:48:5d:cf:30:17:0a:ec:e5:95:f9:
ea:7f:ca:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 00:10:33 2025 by rpki-client