Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/ZqbsY8ahF-YzVLRTQ-q3_CscG4g.roa
File: ZqbsY8ahF-YzVLRTQ-q3_CscG4g.roa (raw, json)
Hash identifier: Xj2Ox0wa2HqK3qKj99CPr+OK8MaNnE29rdmBeomE4cc=
Subject key identifier: 66:A6:EC:63:C6:A1:17:E6:33:54:B4:53:43:EA:B7:FC:2B:1C:1B:88
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0188D08DF679B3D54895FA556FA77BA8A33D
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/ZqbsY8ahF-YzVLRTQ-q3_CscG4g.roa
Signing time: Sun 18 Jun 2023 22:09:04 +0000
ROA not before: Sun 18 Jun 2023 22:09:04 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:188:5fe2:b396/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:187:4695:a68a/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:188:7858:a003/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64:ffff:0:187:fa9a:b088/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:187:b2b8:a7dd/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:d0:8d:f6:79:b3:d5:48:95:fa:55:6f:a7:7b:a8:a3:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Jun 18 22:09:04 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=66a6ec63c6a117e63354b45343eab7fc2b1c1b88
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:68:ce:a7:58:5a:71:f6:40:78:ea:14:7f:0f:
85:1f:a3:72:ef:04:e0:2e:85:39:34:b8:f3:29:87:
07:43:6d:e3:66:19:0c:b3:4c:e8:7b:42:70:da:98:
7a:17:f6:94:0a:49:c7:18:90:7e:5e:57:e5:ed:4a:
b8:4b:59:ed:d2:4a:a2:49:45:c6:19:f5:96:ca:8b:
75:66:40:85:17:ba:01:67:0d:09:d9:ef:09:2c:34:
a5:a5:82:f5:da:25:50:7c:41:9a:7a:f5:f8:01:6f:
ba:2c:7a:1c:85:ea:d6:7b:bd:09:b3:69:27:c5:ae:
c7:9c:c8:dc:74:e7:4e:42:9c:e0:0a:e1:2d:e7:11:
3b:4c:d7:61:07:8a:d8:9b:77:b4:b0:91:aa:ea:bf:
74:f2:92:92:89:92:7e:40:75:46:9f:b9:95:bc:8a:
02:b9:78:94:46:3e:4c:27:b5:54:f9:fa:72:a2:28:
72:33:d2:6c:51:61:8d:99:2e:17:69:91:37:06:8f:
39:1e:e9:ba:04:03:7f:b7:e3:6f:44:d9:b6:21:52:
95:ef:73:87:84:08:64:29:dc:e9:48:20:07:fd:2c:
ab:ce:4c:c0:b2:f1:e4:4b:66:c5:d6:e9:dd:95:05:
19:d2:d2:93:93:7b:ca:8b:8d:7e:26:b8:06:ce:5e:
8a:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:A6:EC:63:C6:A1:17:E6:33:54:B4:53:43:EA:B7:FC:2B:1C:1B:88
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/ZqbsY8ahF-YzVLRTQ-q3_CscG4g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
68:ca:b5:4a:8a:9c:3f:55:97:cd:a6:14:56:90:30:86:b3:fe:
28:ee:ec:32:10:48:48:8f:fe:32:74:60:6f:c6:64:8b:07:92:
cc:1b:5a:bd:b0:b0:1d:b4:b3:50:c5:7c:3d:b0:5d:ce:2e:80:
a7:fe:c6:6c:0c:55:dd:76:68:dd:bf:83:5a:5d:a8:01:97:cf:
14:a8:03:7d:20:5c:79:e0:b0:6e:79:73:04:9b:d3:2c:53:64:
59:58:a2:49:cd:74:f3:4b:88:2a:6f:e2:b9:f2:96:cd:ac:c2:
cc:5b:bc:17:0a:75:49:0a:e7:c1:5a:1f:23:51:3f:91:67:60:
c2:ff:0d:e8:a0:79:cb:2b:7b:dd:bd:3e:33:6a:c4:49:e1:85:
45:3e:e6:1f:0f:f4:06:5d:14:e8:a2:fb:6f:9b:f0:4f:2c:e5:
49:d8:13:35:68:49:dd:27:7a:f3:ad:0f:1e:95:7c:2b:48:83:
df:35:d8:0f:25:82:df:97:ff:22:e1:7e:83:f5:07:ee:8c:9d:
09:92:46:ad:d0:03:7e:08:81:63:9e:2a:9d:ee:89:4e:61:ba:
1b:4b:85:55:6b:8c:89:63:f7:23:b7:db:d5:ce:c6:7a:c9:6a:
ca:c6:c4:7c:ac:39:6d:91:f9:96:37:dc:89:c3:33:74:03:fc:
66:ba:41:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 06:13:28 2025 by rpki-client