Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/zwuvA10kw6g07ACrfZ2kSfJAc8Q.roa
File: zwuvA10kw6g07ACrfZ2kSfJAc8Q.roa (raw, json)
Hash identifier: Vlo8gigABcwZvFmfGRVe9YzjegdqR3U5BdvO0vJdUP0=
Subject key identifier: CF:0B:AF:03:5D:24:C3:A8:34:EC:00:AB:7D:9D:A4:49:F2:40:73:C4
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 6A23F4F4
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/zwuvA10kw6g07ACrfZ2kSfJAc8Q.roa
Signing time: Sun 13 Feb 2022 03:08:44 +0000
ROA not before: Sun 13 Feb 2022 03:08:44 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1780741364 (0x6a23f4f4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Feb 13 03:08:44 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=cf0baf035d24c3a834ec00ab7d9da449f24073c4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:9d:fa:e9:de:62:1a:bc:1f:8b:a9:bd:35:77:
0c:40:db:ba:7d:4f:46:e2:c8:78:98:45:b6:a5:81:
36:12:4b:3e:11:6a:79:12:f3:3e:0f:b4:4b:af:84:
68:09:ea:fb:c3:84:83:ea:5b:7b:36:aa:50:92:11:
16:e4:ac:7c:cf:0d:c4:86:0a:9d:a2:16:ea:12:f7:
cb:f9:8c:b3:1f:e2:bd:17:52:5b:1b:af:6f:40:4b:
22:ad:d9:ca:45:ea:38:54:89:e4:09:3f:de:e9:55:
7e:10:90:e2:16:9d:c2:7e:25:f7:ed:44:e5:b2:7e:
52:c3:70:b1:ea:ce:95:ab:40:1d:76:d0:db:a3:6a:
2e:00:fa:ab:d4:e2:a2:8c:a1:8c:b7:4b:99:bc:de:
23:a9:7e:25:e1:64:d9:dc:c9:58:1d:f2:3a:17:a3:
1f:78:5e:2f:e5:88:52:57:89:49:50:b4:67:19:eb:
1a:89:00:76:48:39:23:82:36:bf:8e:60:ac:84:22:
01:9c:38:9f:ec:33:48:32:bf:8f:a2:f7:d9:b1:f2:
98:52:40:7d:ff:65:05:41:ca:81:11:bf:dd:32:23:
31:29:6a:24:18:71:3e:1b:47:f1:8e:76:e9:f6:b4:
c7:23:3d:65:a9:70:f0:9a:7e:d4:b2:f0:3d:18:c5:
a2:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:0B:AF:03:5D:24:C3:A8:34:EC:00:AB:7D:9D:A4:49:F2:40:73:C4
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/zwuvA10kw6g07ACrfZ2kSfJAc8Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
14:a1:0a:fd:53:e2:b5:40:94:88:cd:8a:d4:ad:b6:0a:ac:7c:
05:02:f8:6f:08:d1:66:40:5f:95:3e:46:19:97:ed:3d:66:c5:
1c:19:64:14:af:19:8f:bd:56:04:d4:26:89:ca:be:b1:19:27:
06:04:b1:dd:35:b2:89:74:89:72:2a:c5:80:04:64:01:a8:0c:
e0:9f:e3:33:6f:8d:a2:49:9f:f3:9e:1b:de:d6:ca:fe:fa:bf:
d1:1e:56:35:78:2a:f3:d5:c7:ad:de:74:7f:d0:39:ec:d1:73:
e9:1f:dc:1f:b5:37:29:a1:bc:26:52:f7:ea:50:62:a4:92:ca:
99:fa:de:2f:36:9a:7a:c3:60:c0:f6:04:28:da:f8:b7:58:64:
08:e6:ab:41:1d:c7:62:2c:27:30:37:b8:dd:63:eb:98:94:93:
53:31:08:d6:b9:e7:25:2e:07:68:bc:c2:5f:3a:5a:e9:75:f0:
54:f3:a6:d5:cb:e0:44:17:02:35:2a:37:1a:e3:93:75:e1:41:
25:f4:b4:7a:3a:4f:21:e6:a8:6f:d1:85:ca:90:cc:b6:7f:4d:
d8:d5:3f:04:ef:d4:09:4e:1c:fb:71:10:96:b8:cc:46:d4:a3:
44:c3:61:d0:e5:b2:19:d5:72:d7:28:cf:ed:a9:0c:ce:74:62:
6b:88:66:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 10 19:27:33 2025 by rpki-client