Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/zCJJVP457NtNSNPS1z64BdsQ6yM.roa
File: zCJJVP457NtNSNPS1z64BdsQ6yM.roa (raw, json)
Hash identifier: IWMItR4DREAoao7owIHBJq8vV/F2q+kAxH+kxxr7Uwc=
Subject key identifier: CC:22:49:54:FE:39:EC:DB:4D:48:D3:D2:D7:3E:B8:05:DB:10:EB:23
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 018895552FA52AE0E109533D778474FC7032
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/zCJJVP457NtNSNPS1z64BdsQ6yM.roa
Signing time: Wed 07 Jun 2023 10:09:27 +0000
ROA not before: Wed 07 Jun 2023 10:09:27 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:188:5fe2:b396/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:187:4695:a68a/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:188:7858:a003/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64:ffff:0:187:fa9a:b088/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:187:b2b8:a7dd/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:95:55:2f:a5:2a:e0:e1:09:53:3d:77:84:74:fc:70:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Jun 7 10:09:27 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=cc224954fe39ecdb4d48d3d2d73eb805db10eb23
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:da:70:22:50:6e:11:d5:ef:90:da:81:66:4a:
a6:c2:c5:33:6f:d8:e1:a9:1b:36:6f:a1:5b:32:6e:
6b:6a:7f:ed:58:18:d2:95:fc:14:db:31:ea:a7:84:
97:53:09:62:ad:ca:ba:b4:8d:41:50:1b:44:22:40:
7e:80:06:7d:96:1d:2d:77:88:f0:9b:51:36:01:e9:
52:6e:2f:43:0a:69:e4:3e:c1:f5:92:3c:2a:23:72:
df:e0:ad:9d:f8:05:db:aa:1b:c4:57:8e:8b:c9:68:
f1:5a:44:15:43:70:ac:f9:56:73:48:d8:16:e3:18:
c1:64:aa:e1:54:06:22:6f:47:3b:33:95:fe:f1:1a:
c5:2d:5b:b1:98:28:55:25:94:98:f7:16:c1:64:55:
7f:1c:72:68:5f:8b:6e:6a:fd:4b:88:64:7a:f1:af:
10:3a:c6:23:93:ae:cf:7d:d2:ae:91:f4:a3:8a:99:
1b:99:23:6d:e5:b0:e2:cc:83:37:a1:f5:5f:15:a8:
36:52:2b:e3:fa:86:9f:9c:9e:e1:28:e2:1a:70:79:
22:34:ce:8d:af:37:ac:ef:04:ff:92:a2:21:ea:65:
4d:7b:73:6b:f9:8b:92:05:59:65:8e:56:7f:32:62:
81:44:b3:8a:36:ac:8f:ee:ca:53:97:4e:1b:fe:5b:
bb:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:22:49:54:FE:39:EC:DB:4D:48:D3:D2:D7:3E:B8:05:DB:10:EB:23
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/zCJJVP457NtNSNPS1z64BdsQ6yM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
24:03:69:d3:99:37:94:e3:2e:8a:22:56:96:24:9c:8e:90:86:
0b:12:09:5b:41:4b:2f:c0:f7:df:85:78:29:99:2f:f2:a0:b1:
7c:d2:94:58:59:f7:c6:eb:c0:20:f9:8f:96:3c:5b:4c:33:d1:
3e:10:2d:49:b7:22:d3:60:d8:3a:87:29:9c:fe:94:54:d0:00:
46:91:5b:f6:6b:c1:1d:0e:37:b7:8f:05:4d:f4:6b:64:72:5c:
56:34:56:09:5e:16:de:88:43:14:be:72:dc:55:ce:c2:a9:45:
7b:6f:8d:96:6d:17:06:94:70:cb:b1:db:ad:c6:07:a6:d5:61:
36:79:0f:b5:d5:04:94:d7:25:ed:f2:53:72:1a:b8:99:3b:6b:
0d:32:9c:5a:d3:17:2d:6b:99:ca:99:8b:0d:19:9b:6b:21:1e:
f4:33:f6:64:cb:e9:de:45:e4:64:14:9f:ab:cd:36:77:e3:ce:
1e:19:93:eb:67:7d:ba:96:2e:3f:57:2f:3e:97:56:ba:bf:08:
d7:85:41:2e:de:65:eb:92:d9:d1:ce:bc:7e:ca:95:56:a9:5d:
ca:bc:23:72:a9:c1:4e:b1:31:fd:9a:f4:09:63:e8:82:1d:8d:
dc:ed:c3:26:eb:71:96:51:2b:15:0f:aa:39:5e:07:ba:98:44:
56:8d:94:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 10 13:12:48 2025 by rpki-client