Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/_ZkxgwaTXqcxGB8MV25k-qVMBXI.roa
File: _ZkxgwaTXqcxGB8MV25k-qVMBXI.roa (raw, json)
Hash identifier: ocBoAKtTVn0dbKylPzLoIkkXyv/QPtGXdBqMbGk+71E=
Subject key identifier: FD:99:31:83:06:93:5E:A7:31:18:1F:0C:57:6E:64:FA:A5:4C:05:72
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0187329F033458617DE7692D275C6F13A503
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/_ZkxgwaTXqcxGB8MV25k-qVMBXI.roa
Signing time: Thu 30 Mar 2023 13:04:54 +0000
ROA not before: Thu 30 Mar 2023 13:04:54 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:187:329e:6362/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:32:9f:03:34:58:61:7d:e7:69:2d:27:5c:6f:13:a5:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Mar 30 13:04:54 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=fd99318306935ea731181f0c576e64faa54c0572
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:4b:a9:85:0a:f2:80:a2:11:96:0b:2d:a3:7b:
00:70:17:58:c0:12:0c:12:d6:3c:e3:0a:eb:13:1f:
f6:7d:7b:8b:29:97:45:02:5a:82:95:7e:74:25:22:
1b:7a:eb:ac:d3:06:9d:05:75:b9:1a:cc:e9:73:14:
31:1a:a4:3c:3b:af:bb:14:02:a1:a5:a3:ff:a2:67:
1f:fc:5f:fc:25:b7:4f:23:41:b5:1a:12:81:23:f8:
74:e8:3e:fd:41:f9:3c:cd:f2:83:cd:46:84:87:6e:
8f:a4:76:86:65:e2:07:a1:c4:cd:4a:35:92:55:7b:
ab:aa:b4:94:d7:77:92:82:8e:5f:1d:89:0f:01:34:
9d:17:45:99:03:b7:73:bb:e5:85:75:cd:ab:1f:48:
b3:0b:f1:60:82:2f:49:61:1a:90:91:06:ed:ec:e0:
f8:07:09:5b:13:a4:bb:61:73:89:5d:d8:6e:a8:77:
b1:c1:74:ce:63:37:3d:58:82:12:34:e1:f3:c6:37:
4e:0d:f2:06:1e:bf:0e:56:e5:cf:c6:9e:79:02:bf:
58:10:bb:db:77:82:41:6f:95:42:b3:d4:fb:45:9c:
0b:ac:a2:74:00:a8:61:7e:81:64:60:32:48:60:64:
8b:84:b7:3f:0c:7d:d8:a4:e5:45:6d:45:14:1a:1e:
03:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:99:31:83:06:93:5E:A7:31:18:1F:0C:57:6E:64:FA:A5:4C:05:72
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/_ZkxgwaTXqcxGB8MV25k-qVMBXI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
41:1b:6b:df:13:2c:b7:90:67:34:d3:ec:a7:59:27:f3:b6:64:
5f:c4:ea:fa:96:69:17:fe:ff:69:78:09:1c:56:8c:dc:1f:6b:
5c:10:a1:26:5b:c9:3f:36:b8:73:b6:07:47:29:94:64:79:4b:
8b:78:78:58:9e:d4:91:6e:d5:d7:0e:f0:d1:fe:a3:75:6b:7d:
2d:9b:66:d2:54:dc:72:34:97:a6:f5:79:f8:25:e0:b9:3e:51:
b5:1f:36:01:96:03:4a:78:c1:84:3a:6c:50:22:8d:83:c6:ee:
3b:3c:ea:d6:81:06:f7:01:ef:28:04:f4:e8:d5:6b:a3:78:69:
0d:61:cf:82:3d:60:ef:e7:80:c1:ea:65:cb:75:00:ba:ce:8c:
ba:9e:13:9b:04:c2:7c:4f:f3:ab:0c:fa:f2:41:22:ff:88:c8:
19:aa:a7:ea:bb:f1:cc:06:90:89:3d:5d:f8:f3:44:1f:ac:24:
85:2c:ed:d8:dc:19:3d:92:63:ff:9f:08:b0:58:e4:c3:38:87:
fa:1c:cd:b5:26:55:18:fc:a2:fe:96:1f:64:02:be:40:c0:80:
77:4e:92:ff:7f:06:1f:bf:0d:47:f9:a0:4e:af:47:6e:82:35:
83:0c:be:7e:40:3b:5d:9a:3a:6a:8f:a2:a9:9d:c0:e5:92:8d:
a7:6a:22:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 11 07:38:09 2025 by rpki-client