Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/zXp-2B4uitoF52NoOom-HwMLSh0.roa
File: zXp-2B4uitoF52NoOom-HwMLSh0.roa (raw, json)
Hash identifier: LYZj0O8kB6mKk02F5CI6oSBg0dGxwxwtnVPIPp0XO/4=
Subject key identifier: CD:7A:7E:D8:1E:2E:8A:DA:05:E7:63:68:3A:89:BE:1F:03:0B:4A:1D
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 01886130C0BAC4187A3BDD028381C4B67B96
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/zXp-2B4uitoF52NoOom-HwMLSh0.roa
Signing time: Sun 28 May 2023 07:09:24 +0000
ROA not before: Sun 28 May 2023 07:09:24 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:188:5fe2:b396/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:187:4695:a68a/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64:ffff:0:187:fa9a:b088/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:187:b2b8:a7dd/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:61:30:c0:ba:c4:18:7a:3b:dd:02:83:81:c4:b6:7b:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: May 28 07:09:24 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=cd7a7ed81e2e8ada05e763683a89be1f030b4a1d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:98:c2:11:42:6e:c3:07:0c:ce:73:e0:f5:91:
a2:2f:7b:7f:fc:b5:f7:cf:1c:3a:1f:6e:c5:02:04:
a4:58:8c:b3:61:3a:3d:34:23:3d:9f:de:2a:40:53:
0c:af:30:06:10:17:88:5c:0e:6a:3e:a5:c8:3f:fe:
d3:16:50:3d:9a:5f:14:5c:3e:9a:69:41:a0:e7:23:
00:fb:6d:79:97:2b:8e:7b:61:1c:95:5e:8e:18:22:
71:02:5e:e5:37:80:65:89:c3:34:d8:37:23:9d:65:
7f:80:3d:6d:ab:dd:87:bc:7e:eb:58:36:89:82:18:
f7:26:66:e1:71:81:46:aa:c3:62:2e:76:61:5f:7a:
84:61:09:ce:5b:1c:1d:4b:df:2f:24:ec:fe:78:c6:
d5:1a:e9:dd:fa:32:b9:99:7f:24:24:e0:bb:a6:aa:
81:54:92:b3:76:8d:12:80:e6:74:55:b0:bd:cc:f5:
34:9b:53:fd:9f:ff:f6:13:72:36:dd:6d:73:96:ca:
9f:f2:71:e9:3b:7b:5b:dc:a5:69:82:d6:4f:1b:11:
08:12:42:04:07:23:0d:7d:68:60:f9:ee:4c:c9:6a:
ca:3b:53:9a:96:1b:4b:ad:81:6b:5c:2d:71:4e:ca:
20:0e:9d:3b:42:77:2a:c9:0b:f5:f7:61:dc:37:d3:
e0:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:7A:7E:D8:1E:2E:8A:DA:05:E7:63:68:3A:89:BE:1F:03:0B:4A:1D
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/zXp-2B4uitoF52NoOom-HwMLSh0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
2f:8c:ec:00:3e:b7:cc:6a:e7:72:8c:39:db:5a:34:bd:73:af:
16:af:a2:e8:5d:e6:b4:fb:96:9e:b3:4b:2a:56:50:f3:b5:34:
1f:a9:cd:57:68:ea:4d:1b:b2:d7:e7:fb:00:ac:fe:ea:af:c7:
fa:f6:0b:db:98:67:46:06:62:17:e9:50:19:91:72:ec:f9:3b:
c6:14:04:1f:19:8f:a2:7b:38:9c:b4:a2:3c:97:e8:86:e3:ce:
6c:85:54:13:ac:ff:77:e9:55:2f:b2:18:cd:ec:de:8f:77:3a:
a3:ce:7a:d1:bb:21:33:80:e4:08:5c:c8:f6:7c:f9:22:66:4a:
b5:88:13:dd:c6:88:23:4c:69:d3:42:0e:50:02:a8:61:31:4b:
50:db:f2:a7:bc:29:45:07:23:8c:cd:d3:1a:45:45:17:9e:31:
1d:50:3f:3a:47:9b:94:5a:f9:50:3f:5a:56:08:31:24:07:98:
5b:a5:9b:37:d0:a5:88:15:20:ee:c6:6e:1f:93:42:df:5d:ca:
10:bd:cb:fa:e3:c2:c6:da:ff:ef:1e:ab:f8:83:c2:60:3a:6d:
f4:b0:06:de:45:6a:2f:09:7e:0e:97:aa:53:43:4f:93:b0:65:
1f:3e:1a:18:67:ec:fd:57:f6:29:15:ae:94:2b:83:4c:dd:48:
68:95:90:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 05:09:29 2025 by rpki-client