Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/ZdHj3L9D0FPk36CXiqw9SZQTVmo.roa
File: ZdHj3L9D0FPk36CXiqw9SZQTVmo.roa (raw, json)
Hash identifier: zgNibvdGaNcXWTL5NtpsRaC3w5KuvTezrcC5KYIP1X8=
Subject key identifier: 65:D1:E3:DC:BF:43:D0:53:E4:DF:A0:97:8A:AC:3D:49:94:13:56:6A
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0184CA96A42A35491D104C6425E16F57127F
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/ZdHj3L9D0FPk36CXiqw9SZQTVmo.roa
Signing time: Wed 30 Nov 2022 22:09:40 +0000
ROA not before: Wed 30 Nov 2022 22:09:40 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:184:ae77:4719/128 maxlen: 128
2001:67c:64:ffff:0:184:9f03:9814/128 maxlen: 128
2001:67c:64:ffff:0:184:bdea:9abb/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:ca:96:a4:2a:35:49:1d:10:4c:64:25:e1:6f:57:12:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Nov 30 22:09:40 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=65d1e3dcbf43d053e4dfa0978aac3d499413566a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:fc:ed:89:d9:0b:ae:20:18:fa:50:8a:60:7f:
f3:4c:a6:0b:96:27:9e:20:e4:74:15:b1:d0:63:05:
bd:2f:a4:db:d0:84:cd:22:9c:62:e1:c8:21:a7:f2:
00:ac:ec:07:08:c4:09:0d:82:81:28:04:50:91:2c:
b2:5b:c5:74:00:07:4e:6e:92:11:01:82:7d:58:a4:
a5:d2:fc:a5:d7:a7:3e:cd:d5:89:32:62:66:43:b2:
35:11:db:65:b0:7a:23:03:84:f1:6f:a8:89:e8:87:
65:19:d7:54:e8:ad:39:3f:2f:60:e3:be:cf:b7:e2:
58:71:df:06:1b:19:cc:95:6c:41:bb:33:94:cf:c5:
8b:29:29:64:40:e1:e4:80:b7:ab:f9:76:a7:74:da:
43:26:51:44:ab:18:67:03:6b:15:90:40:1a:d6:8b:
22:4a:13:65:47:c1:9a:54:1b:af:ab:51:50:f1:d1:
6a:2d:34:58:0b:ad:c6:13:d1:ae:53:6a:61:b2:a5:
c7:e2:83:30:72:bb:ca:b5:71:83:d0:9e:5c:51:ee:
8d:ef:0e:4c:b7:48:19:6e:70:e4:02:f4:fa:e8:e4:
0e:69:b4:a3:69:19:1f:53:2b:a4:ad:50:76:a2:e5:
2f:8d:de:65:06:e6:7e:25:79:4f:5c:ab:db:51:25:
7b:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:D1:E3:DC:BF:43:D0:53:E4:DF:A0:97:8A:AC:3D:49:94:13:56:6A
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/ZdHj3L9D0FPk36CXiqw9SZQTVmo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
27:23:40:83:bb:c8:7c:78:b2:0e:14:ab:e2:ff:2e:0b:7f:4d:
b5:78:f0:50:a5:9c:6e:24:9c:a7:62:39:d9:ca:da:02:a5:51:
91:a5:2f:bf:06:f2:64:8b:85:01:66:a0:ab:dd:c5:48:d1:12:
57:e1:4a:3c:f1:2c:0c:e1:01:d2:d4:da:24:d6:67:e6:ef:1c:
83:e2:07:4e:32:7d:88:e5:91:94:b8:7d:90:38:b3:e4:73:47:
e8:e1:a7:74:db:a4:f7:f3:2f:0f:2e:dc:63:6b:22:bb:47:2f:
23:a8:19:5c:dc:eb:02:58:5f:ea:e2:79:97:aa:f3:ae:0e:99:
73:fc:60:bc:ec:f0:d1:7e:e2:24:01:42:7c:cd:42:ce:b8:7f:
82:93:4b:d5:11:c2:a7:98:0a:32:4f:da:7f:c5:8f:8a:e3:47:
47:f2:d4:39:b6:0c:47:2c:ec:9a:49:6e:1d:c5:83:05:82:a0:
e0:08:d5:d1:d2:ab:31:b0:9e:3a:0f:e0:73:c1:a2:4c:37:54:
a0:03:2a:bf:f6:aa:97:a0:62:41:9d:d7:79:64:f9:8d:6b:ef:
43:93:8d:e3:45:63:54:6d:40:cc:d7:b0:a6:4b:8b:9a:13:dd:
d1:11:d6:76:6c:b4:3e:16:80:fd:b1:59:5f:1d:ca:a6:d1:33:
79:7c:34:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 12 14:10:04 2025 by rpki-client