Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cE0Z3J8Zwxgj3wwLtRTNRBBdiZY.roa
File: cE0Z3J8Zwxgj3wwLtRTNRBBdiZY.roa (raw, json)
Hash identifier: FsFzMw0oFEW8pvDaFJkYo8/Llm2kTQJcbgduiKIMCv4=
Subject key identifier: 70:4D:19:DC:9F:19:C3:18:23:DF:0C:0B:B5:14:CD:44:10:5D:89:96
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 018448C60E7FE7FB6C2E7CD68598AF02A36B
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cE0Z3J8Zwxgj3wwLtRTNRBBdiZY.roa
Signing time: Sat 05 Nov 2022 17:10:50 +0000
ROA not before: Sat 05 Nov 2022 17:10:50 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:184:3fbd:71f7/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:184:4250:a4df/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:48:c6:0e:7f:e7:fb:6c:2e:7c:d6:85:98:af:02:a3:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Nov 5 17:10:50 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=704d19dc9f19c31823df0c0bb514cd44105d8996
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:47:6c:09:69:51:20:d1:49:ca:22:ff:d1:d7:
fe:73:b0:b8:50:6f:ea:14:9f:c0:f3:1b:d4:8b:56:
38:e2:65:64:f1:c6:ef:9d:c2:af:3c:5b:fc:14:91:
ef:83:f4:b2:eb:19:60:59:b2:74:df:df:63:3a:a8:
bb:73:ed:b9:2c:43:eb:9e:c0:38:aa:da:c2:cf:e7:
15:66:3b:de:b1:8c:5a:ed:b6:3a:93:77:00:d8:44:
07:99:53:64:15:78:42:57:a0:11:79:e1:bf:69:85:
e5:76:54:50:19:da:bb:06:71:06:bb:62:24:98:91:
8d:07:bd:69:73:20:9e:cb:f6:87:8c:13:ad:15:6c:
d8:e4:c5:fa:9b:64:a8:61:fe:77:12:cc:f7:2a:d6:
6b:b1:fb:d0:ba:9f:71:c2:56:17:a2:36:f4:f3:e5:
fe:b5:5a:7a:57:be:f8:50:11:06:71:03:d7:f5:98:
7d:63:0f:96:50:cf:5e:8b:61:fb:c9:7e:ef:f1:29:
38:8f:76:ff:1a:6f:31:28:bb:8c:98:85:ff:ce:c8:
f9:98:06:b8:00:a5:cf:3e:8c:e2:43:ef:8b:54:64:
ab:08:e7:49:ef:a5:f3:d2:3c:83:ea:ef:91:f7:93:
cf:19:39:ac:90:66:40:d0:73:1b:66:3a:11:60:25:
0f:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:4D:19:DC:9F:19:C3:18:23:DF:0C:0B:B5:14:CD:44:10:5D:89:96
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cE0Z3J8Zwxgj3wwLtRTNRBBdiZY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
37:28:a0:1f:e8:31:0c:5c:7d:a6:a8:36:c1:1f:3e:f3:6e:1e:
a4:6a:fb:81:41:07:94:60:a3:b8:60:b1:ef:79:c5:3f:12:9b:
49:af:bb:2f:59:6f:f0:7d:a9:c9:49:34:71:17:7f:9b:84:48:
ba:67:37:ea:22:57:a7:d5:bf:1d:77:fa:b2:ed:84:b2:fc:10:
7d:5a:cb:05:74:bb:f5:67:e4:05:a8:c7:ab:ae:35:a9:56:d5:
f4:50:8c:9a:10:d8:81:68:d1:41:4d:98:08:7e:bf:95:1b:8d:
4c:8f:f7:e5:77:5b:0b:a0:c7:60:23:a1:03:0d:e4:d9:73:17:
32:ae:b1:c6:0a:7d:95:47:55:55:f4:29:35:1d:8f:bb:3a:00:
ba:08:5d:f1:fb:7a:2e:5a:e2:c6:2e:ce:0e:d2:f4:44:b1:2d:
a5:5e:02:a7:f4:5a:6e:35:3b:d0:a6:f2:6f:8a:a5:78:61:76:
c8:0f:d8:1b:a3:b6:95:ea:20:da:e6:be:38:ba:ec:25:5f:b4:
d4:5d:45:3d:54:58:eb:93:d9:05:23:26:32:22:2a:91:7d:2d:
39:65:06:0b:22:b2:7a:59:9e:95:01:6a:82:b3:60:c8:a1:9c:
98:fc:10:7b:52:0a:9c:a4:3d:f6:8a:ab:5c:63:29:90:d5:c8:
24:5a:6f:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 18:01:48 2025 by rpki-client