Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/zkdna2uoMFG4EjKmu4mA5jyi2J0.roa
File: zkdna2uoMFG4EjKmu4mA5jyi2J0.roa (raw, json)
Hash identifier: cE0CjuttAXsBQbh96UqJC+jDS13aLPSbzOMwUIV4Ah4=
Subject key identifier: CE:47:67:6B:6B:A8:30:51:B8:12:32:A6:BB:89:80:E6:3C:A2:D8:9D
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0186662182EE6C4FE5CA9CAA2F97A131F154
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/zkdna2uoMFG4EjKmu4mA5jyi2J0.roa
Signing time: Sat 18 Feb 2023 20:05:17 +0000
ROA not before: Sat 18 Feb 2023 20:05:17 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:6620:93ff/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:66:21:82:ee:6c:4f:e5:ca:9c:aa:2f:97:a1:31:f1:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Feb 18 20:05:17 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=ce47676b6ba83051b81232a6bb8980e63ca2d89d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:f0:7c:59:0d:3a:41:e5:63:92:7c:2f:ac:81:
ac:78:d9:21:1f:77:77:26:fe:58:52:24:b4:1d:a1:
e7:8f:d3:b2:2b:26:67:2e:00:32:74:64:e0:fb:fb:
fb:42:3c:1a:93:9c:37:08:c9:25:36:06:ab:bb:3b:
19:2e:72:82:41:2a:ce:c2:b4:c9:7a:bf:d0:d6:19:
f1:48:f8:c0:ff:d1:28:31:c9:2d:a9:1b:b5:e4:23:
3c:76:a3:dc:7d:34:e6:8a:14:17:69:1e:6a:c1:28:
07:50:06:7e:c4:fa:61:f1:ab:ab:63:e6:c1:fd:2c:
f0:60:dc:b3:90:0b:b8:ba:7e:5a:c6:0f:78:5a:34:
c2:fe:82:b6:83:31:bb:6d:6c:18:8c:78:48:2e:45:
0d:90:0e:66:6f:3e:e2:8a:13:5d:e0:c0:38:ae:bd:
7a:e5:07:2f:e3:31:d9:31:d1:f7:12:96:7a:09:35:
49:6d:13:03:4f:84:7a:69:c8:f5:09:d9:6c:1d:7c:
df:0c:40:90:fb:58:93:5f:23:4b:cf:47:e9:18:20:
a8:43:cd:6e:ca:0c:b5:a7:c4:ad:fe:17:f2:5a:e1:
a3:bd:ce:da:ac:52:cb:84:bd:87:bc:d6:c0:03:ab:
43:cb:0a:a3:61:48:18:c6:5f:bd:97:fa:9d:8c:a3:
3b:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:47:67:6B:6B:A8:30:51:B8:12:32:A6:BB:89:80:E6:3C:A2:D8:9D
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/zkdna2uoMFG4EjKmu4mA5jyi2J0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
91:22:82:29:c6:a6:c0:b1:7b:0b:31:8c:fd:6f:4b:06:3e:67:
4a:95:31:3d:bf:67:08:1c:f9:c4:3c:b0:4c:a6:8c:11:78:1f:
c4:6c:e8:45:fa:90:1f:7a:81:30:c1:a1:bc:42:dc:ff:1c:19:
dd:d4:9a:e6:f0:91:56:39:9a:36:6b:f8:d1:ff:ce:ad:be:11:
62:96:9d:5d:dc:a6:a1:d8:43:fa:b8:97:35:93:e3:7a:c8:34:
fd:17:90:1b:f9:92:a5:4e:df:21:eb:75:81:27:8e:2e:bc:91:
6f:c8:5d:b7:a0:07:13:be:13:6b:aa:84:98:d2:c5:e5:3d:cb:
af:e1:08:96:ae:fb:20:c5:f6:c7:e0:f6:9e:04:a4:ea:83:e0:
99:d4:9f:eb:8c:b4:58:06:03:d4:90:7e:e6:a6:f3:38:13:91:
1b:29:e4:16:0d:fb:5f:a2:10:c8:c2:75:19:4b:e1:c0:82:07:
f8:e9:b0:ad:6b:f4:df:6f:92:66:97:5f:0a:ea:a9:18:be:d9:
29:7e:4a:58:45:30:08:06:cf:13:88:e5:1b:84:d7:75:15:d2:
57:05:cc:0e:00:1a:69:e4:09:09:03:bb:69:b9:b1:7b:71:41:
51:d3:c3:3d:55:39:9a:91:bb:89:b8:5a:02:6e:9c:fa:ee:a2:
bf:f8:bd:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 00:21:56 2025 by rpki-client