Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/ZhC4CCuElTTMKM8Di115ZhH001o.roa
File: ZhC4CCuElTTMKM8Di115ZhH001o.roa (raw, json)
Hash identifier: oeiBmEEEJjxpOtRR+pI7AC/ybAASisgeAkrSPYWDHrI=
Subject key identifier: 66:10:B8:08:2B:84:95:34:CC:28:CF:03:8B:5D:79:66:11:F4:D3:5A
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 018368C250BC87A779562354CB620A7B14BD
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/ZhC4CCuElTTMKM8Di115ZhH001o.roa
Signing time: Fri 23 Sep 2022 05:11:48 +0000
ROA not before: Fri 23 Sep 2022 05:11:48 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:182:3f1d:a803/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:183:50b3:5643/128 maxlen: 128
2001:67c:64:ffff:0:183:5f81:ab13/128 maxlen: 128
2001:67c:64:ffff:0:182:7cb2:99d4/128 maxlen: 128
2001:67c:64:ffff:0:183:1279:659d/128 maxlen: 128
2001:67c:64:ffff:0:182:383f:6b78/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:68:c2:50:bc:87:a7:79:56:23:54:cb:62:0a:7b:14:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Sep 23 05:11:48 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=6610b8082b849534cc28cf038b5d796611f4d35a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:70:a7:63:12:e2:82:04:a7:ea:3d:f6:25:ca:
68:4e:13:ff:5b:f5:33:32:4c:b2:45:bb:62:ed:11:
8c:08:4c:81:80:e4:7b:05:f5:29:d8:33:34:f3:5a:
7e:6a:ba:a0:63:4c:d2:11:4b:a5:08:c5:03:71:14:
7a:04:12:4c:64:f9:0c:f7:f5:16:2a:bf:c1:19:7d:
80:df:76:40:80:fe:2b:19:01:7e:2d:2e:17:66:5d:
df:db:b6:17:03:be:c9:38:be:48:62:d0:13:a5:5d:
18:80:2e:80:90:ac:4b:69:05:28:ca:73:fe:65:fb:
bc:90:e4:b7:a1:60:40:55:0d:dc:20:0b:b1:9d:4c:
9d:66:5f:79:1c:c2:c3:55:4e:1d:e1:fc:01:2e:3b:
84:82:a3:b1:a4:e9:cb:53:bf:d3:cd:f7:c0:09:75:
a6:10:d5:da:2c:81:b3:42:60:aa:57:a9:74:d2:b8:
4a:02:c5:62:e6:3e:62:c1:ac:c9:f6:52:10:79:a6:
a8:8b:a2:52:84:66:94:0f:1f:f8:52:78:e3:2b:3a:
a3:1c:96:c2:1a:7b:af:c3:80:69:90:49:e2:18:f3:
78:6e:67:d7:4b:1f:05:d3:07:1d:9e:b5:3b:c6:21:
46:e4:01:ae:06:9a:14:b7:df:6a:16:1e:22:fd:1b:
51:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:10:B8:08:2B:84:95:34:CC:28:CF:03:8B:5D:79:66:11:F4:D3:5A
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/ZhC4CCuElTTMKM8Di115ZhH001o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
b5:78:a0:5f:7f:91:17:fd:92:8c:09:9b:b5:4c:a6:28:52:32:
e8:cb:c7:35:0f:43:f9:ab:df:14:26:c3:72:6d:89:03:ec:0d:
dd:04:b5:9f:82:fe:40:39:45:66:eb:1a:82:a4:04:20:6c:f2:
27:b0:54:f5:ef:94:e9:09:52:d0:fa:f2:50:d5:44:6c:1b:84:
d9:aa:14:2a:f5:cd:c9:c0:5d:02:6a:8c:9a:49:00:4b:60:7e:
33:fd:c6:01:bb:11:9d:d1:59:04:fe:0d:7a:61:9e:20:e0:0b:
19:84:e3:cc:8b:7a:25:26:fa:98:1e:e7:e9:c8:c8:8e:64:36:
0e:13:94:dc:c4:29:7d:21:6e:33:c0:e5:8f:e9:f8:c5:f1:08:
cf:3b:c7:22:e2:b8:89:49:0c:47:67:eb:de:bb:28:a8:59:f5:
4b:5c:ed:10:e3:db:ed:7a:8b:e0:12:db:6d:2a:d9:f8:86:1b:
1c:ac:86:17:50:e2:98:d1:e6:b5:20:41:49:82:d9:79:40:b0:
26:f8:91:6a:3f:e0:c2:9a:d1:07:6d:77:ad:1a:45:1e:a0:19:
97:98:e0:00:1a:eb:65:88:c5:b7:3d:f8:5b:a4:05:40:88:64:
ce:20:1d:6e:8c:96:8a:64:96:2a:30:3a:cc:72:90:1f:47:c0:
36:0a:72:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 23:55:04 2025 by rpki-client