Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/0_-znmj6Hq88O0jBWioRViAfU54.roa
File: 0_-znmj6Hq88O0jBWioRViAfU54.roa (raw, json)
Hash identifier: 1LcBq954f2kvM3HwEhfRMHIygyKpszOt54k7mLG4/TU=
Subject key identifier: D3:FF:B3:9E:68:FA:1E:AF:3C:3B:48:C1:5A:2A:11:56:20:1F:53:9E
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0186FE7A35588478668D945EDDEDECDC32F4
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/0_-znmj6Hq88O0jBWioRViAfU54.roa
Signing time: Mon 20 Mar 2023 10:04:27 +0000
ROA not before: Mon 20 Mar 2023 10:04:27 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:fe7a:2229/128 maxlen: 128
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:fe:7a:35:58:84:78:66:8d:94:5e:dd:ed:ec:dc:32:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Mar 20 10:04:27 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=d3ffb39e68fa1eaf3c3b48c15a2a1156201f539e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:17:92:9b:38:21:f7:43:27:99:01:4d:19:bb:
b7:02:e7:95:c8:80:07:c5:2d:c5:92:83:fb:e0:2a:
15:9a:70:27:a8:ee:03:c9:d1:38:44:a8:03:f6:5b:
6c:8f:d8:6b:04:56:38:43:fc:e0:12:e5:b8:3c:b2:
b5:69:c9:37:0a:89:4c:97:ce:59:30:81:e6:73:b0:
3e:51:f4:d6:27:da:bf:c3:66:03:cc:fb:b2:e6:fa:
85:98:2c:fb:8b:23:f4:6c:74:2a:73:db:57:5c:22:
ea:93:6d:03:a5:15:ee:a2:1f:07:42:83:98:0a:17:
7d:ae:3c:a9:c8:24:11:cf:2c:4e:e3:ad:05:68:44:
37:6e:29:94:66:14:13:77:df:cb:10:43:58:87:2c:
a0:28:36:63:3b:ad:9b:84:30:8c:59:5a:dc:b0:7d:
17:1b:5e:b6:9b:02:49:fa:48:40:5b:f5:d9:28:e3:
08:7b:3a:5b:b5:ae:4d:7f:52:2f:92:52:e9:6f:48:
21:f1:76:2a:2d:9a:c8:3a:b6:63:77:11:b2:65:1d:
7c:e9:9d:3c:11:e3:06:3f:d9:13:2c:a5:6d:47:0b:
29:b7:9a:d4:81:98:c8:4a:90:9d:49:cd:d4:6b:47:
f8:72:6a:f4:fc:50:7c:59:e5:5e:18:02:92:b4:5e:
a6:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:FF:B3:9E:68:FA:1E:AF:3C:3B:48:C1:5A:2A:11:56:20:1F:53:9E
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/0_-znmj6Hq88O0jBWioRViAfU54.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
9e:73:1a:1f:1a:44:2e:68:c2:73:ce:d9:6b:91:bc:93:3c:f2:
bb:ad:85:89:db:21:a3:a5:dd:11:ad:8b:36:e2:b4:8b:ce:47:
49:ec:fc:a3:8f:8e:30:f5:6b:02:ae:9f:f4:70:c8:15:b8:0c:
46:f2:b5:f1:b5:60:a6:e8:29:62:bb:5d:39:38:1e:49:b7:8d:
c9:0d:98:43:f2:f0:89:52:06:8d:cb:af:95:e4:e1:79:92:a7:
5e:70:80:b5:37:69:93:28:14:cb:5d:48:d1:f9:f4:c4:1d:c1:
dd:b0:b1:7c:fc:da:00:d9:af:c1:fd:09:9f:75:cf:1a:2a:2d:
c9:f2:76:b0:8b:69:20:f1:2b:1b:97:b6:c1:2b:ba:8c:5f:bf:
5c:0b:7c:b9:bc:00:c2:0b:65:e1:c6:fc:7e:30:3e:94:6f:bb:
87:24:20:3c:a1:a9:16:d4:89:5d:7d:ee:b1:2a:25:cf:ec:7b:
76:a4:d2:69:b5:88:ce:1a:e1:97:15:80:b9:2e:7e:da:70:12:
83:fe:d3:23:7c:66:f6:01:52:2e:ae:2e:04:b2:ae:69:7c:59:
2f:18:e4:79:84:06:23:de:fa:d2:a8:19:05:81:05:5f:5a:2a:
31:6e:f3:22:b7:96:e5:a2:20:c5:f6:8b:0f:22:2a:d9:a0:99:
ff:ca:c0:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 4 13:47:16 2025 by rpki-client