Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/ZgYYjVra0Bi_LaIMmwn3earDLUU.roa
File: ZgYYjVra0Bi_LaIMmwn3earDLUU.roa (raw, json)
Hash identifier: kxdgqEInGbhQFRdeEy9IswjyCPWjYtl9vLunkOsBLIc=
Subject key identifier: 66:06:18:8D:5A:DA:D0:18:BF:2D:A2:0C:9B:09:F7:79:AA:C3:2D:45
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0186E2CC07A9B4ECD1F4FB04965A43341569
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/ZgYYjVra0Bi_LaIMmwn3earDLUU.roa
Signing time: Wed 15 Mar 2023 01:04:27 +0000
ROA not before: Wed 15 Mar 2023 01:04:27 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:186:e2cb:dbfc/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:e2:cc:07:a9:b4:ec:d1:f4:fb:04:96:5a:43:34:15:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Mar 15 01:04:27 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=6606188d5adad018bf2da20c9b09f779aac32d45
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:6d:f3:ec:3a:64:4c:51:f0:f0:2a:f2:b7:78:
39:21:ba:3b:63:52:5a:a2:46:05:f4:36:19:aa:d5:
0f:14:a4:28:e8:3a:bc:ed:80:ae:63:80:86:fe:f9:
f0:e1:57:4f:eb:66:d1:8a:8a:7e:11:96:c7:fb:70:
28:99:d1:70:f5:a0:ad:83:b2:ce:66:40:d3:b5:b5:
37:cc:9b:89:35:4c:3f:f2:65:5c:ef:10:8b:34:15:
83:77:62:35:a6:e6:5b:3e:46:54:7f:f6:fa:ec:b6:
af:44:c3:c6:96:c5:63:35:e1:eb:98:8d:dd:5f:0b:
1b:87:1b:c1:f1:6b:01:dd:06:e8:2a:d7:00:31:2a:
46:f1:a6:d5:28:4d:0f:c2:72:42:f6:9e:0d:db:9a:
53:e0:b4:d2:62:5d:b8:cb:e5:81:d7:8b:81:2f:68:
7e:38:b7:e8:ea:a0:eb:1e:db:d0:4b:95:47:78:73:
4b:7d:03:63:b5:f5:56:a3:ce:89:cc:21:8f:16:12:
fc:6e:66:b3:9a:ee:b7:b6:ec:c1:f7:40:78:17:bb:
b2:26:dd:7a:83:76:96:d6:bd:fb:b2:eb:6e:bb:ff:
f5:2f:e3:29:70:fb:c1:8b:f4:8d:d3:bd:b2:f8:02:
2d:81:bc:36:99:66:54:12:f0:91:cf:2b:e6:4b:e9:
d8:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:06:18:8D:5A:DA:D0:18:BF:2D:A2:0C:9B:09:F7:79:AA:C3:2D:45
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/ZgYYjVra0Bi_LaIMmwn3earDLUU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
36:5d:8a:2f:19:dd:f1:37:af:b7:96:31:06:e8:33:e8:3f:9d:
65:a5:03:30:ae:66:23:27:8b:28:cd:0a:44:a3:1f:4a:02:7a:
5f:9a:1b:8c:51:0e:46:75:93:fc:5b:6a:9f:69:e7:ee:4c:ca:
f8:7e:4c:82:16:a4:40:d2:c4:93:02:67:4d:ea:61:2e:ab:3d:
f4:71:e0:f5:de:fc:d4:62:80:17:f0:3a:17:a1:1e:ae:02:2f:
66:46:3c:05:8a:78:84:2d:02:ae:73:85:68:68:0f:b3:fe:86:
d2:0c:41:11:92:0c:cf:77:40:7f:68:d5:f6:fe:7c:95:67:79:
51:e1:a5:98:82:0b:35:94:8e:bc:55:f8:0c:49:43:ea:cb:aa:
a3:1b:82:71:bb:6f:17:8f:ca:88:85:8b:ea:22:c5:39:7b:3e:
8b:d1:d7:23:e9:4d:ee:04:14:3f:5d:36:d5:4e:72:8c:cd:6f:
2c:00:92:be:4a:c6:63:a7:ea:4e:95:6a:70:5e:30:03:30:62:
13:8c:c0:b1:11:dd:bd:44:47:96:5e:27:e1:b9:c9:c8:2f:c2:
00:1f:6d:88:07:7c:d9:ab:35:cb:bb:a1:bf:b4:52:cf:c6:f2:
14:19:77:81:a7:f4:3b:c3:ff:31:94:9c:1e:81:6d:85:78:0a:
05:19:18:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 11 09:07:33 2025 by rpki-client