Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/ZxlS-fONTtQlXUlDFQVOl8rjA1A.roa
File: ZxlS-fONTtQlXUlDFQVOl8rjA1A.roa (raw, json)
Hash identifier: 7rTkR9+lqslAvakvbp9PF1MMTJZ8Ot8JLf7M0smrRXI=
Subject key identifier: 67:19:52:F9:F3:8D:4E:D4:25:5D:49:43:15:05:4E:97:CA:E3:03:50
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 018295D558EEF8F45B16C62081C9126AA02B
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/ZxlS-fONTtQlXUlDFQVOl8rjA1A.roa
Signing time: Sat 13 Aug 2022 06:12:43 +0000
ROA not before: Sat 13 Aug 2022 06:12:43 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:182:3f1d:a803/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:182:7cb2:99d4/128 maxlen: 128
2001:67c:64:ffff:0:182:383f:6b78/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:95:d5:58:ee:f8:f4:5b:16:c6:20:81:c9:12:6a:a0:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Aug 13 06:12:43 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=671952f9f38d4ed4255d494315054e97cae30350
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:1e:22:f1:e0:82:a5:a4:f0:db:97:8b:5c:5d:
3c:3b:ab:a9:e7:87:c5:f7:7f:f5:26:72:6a:5d:23:
1d:f1:b6:01:91:fb:53:86:c4:4c:93:48:aa:35:28:
d3:f9:ea:1e:4f:ab:69:07:92:cd:74:ad:7e:37:33:
61:2c:81:68:6d:8c:e8:a4:ca:3c:7a:b1:30:87:53:
8f:df:41:7e:70:ca:13:a7:2b:b8:24:fb:e9:25:25:
fc:14:8d:c8:b9:42:a6:a8:fb:24:a8:e2:b8:70:f5:
9a:11:7f:71:8a:25:f8:3e:36:50:8c:25:cd:47:ea:
bf:1a:1e:8a:e3:bb:b1:4f:91:fb:d0:6d:f8:f3:23:
5d:a4:01:82:e1:12:8a:e6:7b:0a:6a:fa:7d:e1:d6:
bd:7b:f3:57:c5:f8:19:44:a0:f2:05:59:fe:4b:6c:
07:b2:88:02:4f:8c:65:19:b4:5a:b1:58:b6:33:19:
2b:cd:08:4f:9a:fe:53:d6:8b:60:5d:19:da:47:4a:
57:27:34:b0:cc:d6:99:a1:07:8c:b4:95:48:73:46:
9d:17:80:08:99:97:e2:a1:53:3d:aa:5f:ae:6a:0a:
6d:6e:10:34:32:ca:e6:b9:47:54:60:7e:d3:dc:e6:
ad:90:a9:10:1c:32:3b:91:01:f3:e7:cb:75:12:44:
92:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:19:52:F9:F3:8D:4E:D4:25:5D:49:43:15:05:4E:97:CA:E3:03:50
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/ZxlS-fONTtQlXUlDFQVOl8rjA1A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
5d:97:8f:29:dd:9f:b7:90:e3:57:c0:80:47:a9:9b:b4:06:20:
d6:4b:5c:b1:c6:01:a7:0a:4e:ee:25:e6:14:06:de:6a:1c:0d:
65:ca:b6:07:9e:27:0e:08:35:6d:b4:88:6c:b2:a6:10:e3:62:
b7:ea:99:89:a3:c9:c2:fe:8e:43:cc:46:53:2e:ea:47:6f:4e:
54:5b:01:a4:99:a5:a1:55:e1:76:db:63:d6:66:4b:53:2d:e0:
71:c4:23:3a:20:67:c8:8a:98:c5:4e:fe:d2:65:6e:25:6d:b9:
23:fb:ed:1b:f6:03:2f:35:0c:29:a6:53:ea:3a:9f:48:d7:26:
06:ac:9f:d4:af:ff:06:95:f6:c5:16:7e:4e:61:91:2e:87:a3:
a1:5e:30:ea:85:f7:53:e3:b8:69:70:2e:eb:9a:98:09:7f:b0:
b9:14:fa:a0:08:16:4e:5e:2e:e5:26:a3:bf:40:4e:20:8c:40:
72:90:c3:16:61:dd:f9:63:e9:19:f5:19:7e:93:89:16:f1:00:
18:bb:43:63:34:62:1e:b0:2a:90:71:71:b7:d1:4f:18:9c:ce:
05:d8:01:91:68:8a:57:d7:87:1d:53:ed:83:fc:e9:9e:cf:3e:
04:86:22:17:11:87:f5:a2:ee:c9:fd:4d:63:9c:21:e6:9d:fd:
cf:29:26:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 13:37:52 2025 by rpki-client