Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/1zgIyTMYI9uid4Jyn5ZWcKScaqk.roa
File: 1zgIyTMYI9uid4Jyn5ZWcKScaqk.roa (raw, json)
Hash identifier: SLO9SLapvdlwkWm3UHU+1Qjxqrq0XBYWvSzemEvf36A=
Subject key identifier: D7:38:08:C9:33:18:23:DB:A2:77:82:72:9F:96:56:70:A4:9C:6A:A9
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 01869AB2F8F3DB6AA862E425D9142534312F
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/1zgIyTMYI9uid4Jyn5ZWcKScaqk.roa
Signing time: Wed 01 Mar 2023 01:04:25 +0000
ROA not before: Wed 01 Mar 2023 01:04:25 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:9ab2:d691/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:9a:b2:f8:f3:db:6a:a8:62:e4:25:d9:14:25:34:31:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Mar 1 01:04:25 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=d73808c9331823dba27782729f965670a49c6aa9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:da:9f:c4:dd:ad:35:5e:07:30:26:b9:0d:6c:
61:69:2f:6b:9b:d3:42:f5:e8:48:d0:ed:c2:33:77:
f6:aa:f2:cf:da:d6:49:f3:30:c5:b4:94:d2:ae:a6:
89:e0:ae:01:c9:ab:7b:97:59:61:52:d2:0c:bf:6a:
92:54:2d:9b:df:e5:16:e2:f4:be:cc:a5:0d:89:07:
fa:df:4a:d8:56:cc:bb:e6:08:90:61:8c:3b:f9:a8:
25:0a:0c:f8:3a:db:b5:46:7e:7b:99:18:4a:48:68:
98:21:0b:aa:18:c7:36:52:15:81:d2:1f:5f:7c:d0:
94:c8:e3:d8:07:d9:db:e2:d0:a8:f5:5b:a7:f2:da:
c1:fa:70:68:fd:5a:be:4c:60:49:eb:5b:e4:ba:24:
bd:6a:bc:ef:a0:f6:3a:eb:ab:dd:ee:5a:74:85:64:
5c:4e:99:6f:b9:c7:a0:b8:5b:42:37:f1:9e:92:d8:
dd:9b:2b:d9:84:ac:db:ae:21:88:e1:63:64:cc:23:
a2:bc:c8:21:5b:69:d3:d0:c7:5a:03:7d:5b:7d:49:
ca:f8:af:74:69:de:b4:1d:91:86:24:9c:a6:82:70:
e4:f9:e3:c6:eb:cd:60:02:af:5f:9a:12:ad:e1:1a:
09:7e:89:83:06:18:4a:d6:86:8c:f6:f2:46:9f:f8:
8b:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:38:08:C9:33:18:23:DB:A2:77:82:72:9F:96:56:70:A4:9C:6A:A9
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/1zgIyTMYI9uid4Jyn5ZWcKScaqk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
89:93:ea:36:de:dd:9b:3d:e9:24:c7:3b:dc:30:2a:72:4d:16:
5e:94:f0:81:7d:73:23:1c:41:8e:f7:29:66:ba:27:33:09:08:
df:7f:c0:fa:99:39:b3:d7:97:98:2c:f0:f8:25:b8:9f:88:57:
59:fe:6d:d2:f0:13:79:b3:a1:bf:4d:68:37:df:de:41:95:6a:
02:ea:8e:12:6a:7b:b8:d9:01:2a:2c:ad:c1:c2:3f:64:00:b6:
6e:87:58:83:56:4b:3d:3d:cb:cc:bb:3a:af:12:3c:99:fd:27:
25:af:5c:00:8d:7c:fb:cd:25:24:97:d7:07:8a:34:2b:10:16:
12:87:e3:ce:bc:c5:20:17:4b:a6:67:bf:56:9a:a3:44:c5:4f:
a6:9a:27:4d:e5:d5:5d:d6:56:46:30:c3:53:3c:35:78:14:71:
d2:6d:59:3a:35:34:8d:75:6d:d6:8b:19:a2:63:50:cc:7b:3f:
42:25:8d:f6:70:56:03:9f:a0:e8:c3:bc:cc:68:26:00:43:f6:
0b:48:c4:6d:9e:9e:9c:e1:62:76:85:57:a1:13:24:c3:c2:ea:
65:78:50:49:1f:7a:53:fd:4a:31:1b:37:12:6f:c5:89:c1:90:
1e:d0:c4:be:1d:76:df:b1:1b:85:bc:96:a0:30:b8:fb:b6:fe:
df:21:00:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 03:24:17 2025 by rpki-client