Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/z1uUzBf3FpS-SjuHvHmV3GBSRlo.roa
File: z1uUzBf3FpS-SjuHvHmV3GBSRlo.roa (raw, json)
Hash identifier: xWVmSDHYU0LRxh4933BERlm0ZZwJyXpvxZQ5d+0n6VQ=
Subject key identifier: CF:5B:94:CC:17:F7:16:94:BE:4A:3B:87:BC:79:95:DC:60:52:46:5A
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0181E9F3E282095CF063DA4327B82C80105A
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/z1uUzBf3FpS-SjuHvHmV3GBSRlo.roa
Signing time: Sun 10 Jul 2022 21:11:23 +0000
ROA not before: Sun 10 Jul 2022 21:11:23 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:81:e9:f3:e2:82:09:5c:f0:63:da:43:27:b8:2c:80:10:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Jul 10 21:11:23 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=cf5b94cc17f71694be4a3b87bc7995dc6052465a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:2e:ee:61:1f:f9:5d:ab:73:64:5b:31:9a:53:
4c:0d:c9:7f:f3:4f:ee:18:8c:96:e8:d2:f3:7d:73:
7f:4c:83:6a:f3:1e:ce:bb:2f:c6:27:43:4e:a9:f9:
4a:34:a5:34:03:19:fc:65:89:03:a0:60:09:60:7c:
73:10:20:29:2a:94:4d:e3:aa:7a:1a:bb:c5:df:23:
36:ec:f8:a4:0a:dc:c4:bf:3e:e5:7e:6a:23:c8:50:
f3:8b:90:30:fe:af:81:da:07:a7:44:9b:6b:98:c4:
43:27:65:b3:0b:1b:5e:c6:a1:c4:c6:cd:dc:fa:90:
75:e7:ad:fa:8f:79:28:db:d7:a1:ef:cc:d3:0b:35:
ff:7d:75:ae:11:69:cf:73:9e:12:12:dd:5a:a3:b1:
97:2f:22:13:32:a1:b4:10:33:27:b5:8d:b9:13:8a:
bf:11:5f:87:73:eb:85:64:de:45:66:ca:5c:c5:9f:
c9:b4:ed:30:39:66:e3:72:4f:a4:02:ff:3c:1c:ed:
ed:10:20:01:9c:ed:73:d0:df:36:df:1d:07:2c:19:
71:87:e6:28:c6:00:41:4d:9b:2d:e5:59:ac:de:59:
85:8c:e9:c8:f7:4d:29:4e:c7:4b:b6:bb:34:b8:fa:
f6:c0:68:d4:d2:ee:28:29:25:f3:21:2d:87:49:32:
4d:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:5B:94:CC:17:F7:16:94:BE:4A:3B:87:BC:79:95:DC:60:52:46:5A
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/z1uUzBf3FpS-SjuHvHmV3GBSRlo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
88:ac:d7:67:d7:af:59:c0:28:40:59:1d:61:4a:e6:b5:a4:59:
e6:77:58:e3:49:d9:68:1c:d2:30:79:19:48:9b:62:62:ea:9e:
b2:d2:16:d1:66:ce:f5:24:51:54:68:b7:ad:c5:2a:a7:a2:f6:
95:a9:4c:78:d5:38:8b:05:8c:eb:67:a9:a4:7b:6a:34:ca:b1:
02:4c:6f:7e:fd:ca:6b:cd:b7:79:db:01:57:fa:5e:f6:5e:a7:
7c:36:09:2e:0c:99:50:f8:bc:e6:c3:86:8c:67:ba:75:85:d2:
59:77:6b:b0:da:59:9d:8d:46:b6:89:5b:ca:04:e8:07:68:c4:
35:f9:b1:cf:30:de:f8:b8:a9:de:ed:44:aa:4f:dd:3a:80:cb:
52:36:e0:0b:02:37:ab:83:18:a6:fc:81:16:fd:1f:24:39:07:
3e:5a:16:a4:97:6c:fa:29:d4:61:19:eb:9a:c4:d5:e0:27:05:
78:cf:1f:81:b6:51:ef:c0:6d:d4:f4:a1:5e:66:91:cd:09:5d:
02:96:d8:e1:94:ec:0d:0b:23:81:85:f3:5a:f0:b2:bd:2f:19:
f1:cc:81:d0:9d:9e:3d:cd:09:58:f9:2a:dc:99:d8:f9:bf:94:
88:97:4b:95:17:e2:f0:d1:6b:c8:f5:6c:18:a3:3d:e5:d1:e1:
63:65:21:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 12 06:28:32 2025 by rpki-client