Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/9ZEH7NjFZxau9RS32-A6JawTJSI.roa
File: 9ZEH7NjFZxau9RS32-A6JawTJSI.roa (raw, json)
Hash identifier: TpN+21sCrugymcoxUnmowGOP3tqZ3yPZL25MjgaWYSQ=
Subject key identifier: F5:91:07:EC:D8:C5:67:16:AE:F5:14:B7:DB:E0:3A:25:AC:13:25:22
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 018A0FDB4B51E0E68EA007068660BF4059C1
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/9ZEH7NjFZxau9RS32-A6JawTJSI.roa
Signing time: Sat 19 Aug 2023 22:12:24 +0000
ROA not before: Sat 19 Aug 2023 22:12:24 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:188:7858:a003/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:189:a0e4:5c7d/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:0f:db:4b:51:e0:e6:8e:a0:07:06:86:60:bf:40:59:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Aug 19 22:12:24 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=f59107ecd8c56716aef514b7dbe03a25ac132522
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:7c:1d:f4:ba:77:c2:da:67:6c:a0:f3:63:9b:
60:1b:8d:44:ce:d1:3b:3d:9d:49:11:a3:7e:8e:c7:
a2:a1:47:96:a5:7a:f5:45:47:18:19:b5:bd:6d:1b:
e3:7a:f5:2c:10:f0:89:53:a0:96:84:d0:89:89:5e:
fb:2b:33:27:1f:99:85:28:5c:33:f3:6b:e9:45:11:
4a:a2:37:a7:1d:c8:91:38:c2:ac:47:cf:0b:0a:64:
c7:4f:3e:b1:8e:d5:cb:3c:7b:0a:fc:b9:41:4f:14:
3a:38:23:9b:a7:03:0d:4f:cc:d3:5b:92:27:b9:32:
84:d4:1c:97:de:61:3e:7c:1b:07:7a:db:2c:8c:93:
0c:11:e1:5c:ee:7c:4c:fb:b1:0b:56:a8:e4:fe:dc:
b9:c0:4c:c4:74:ec:9d:95:20:dc:7e:3c:b7:23:0d:
a4:f0:eb:a3:63:48:9e:54:d1:7a:5a:dd:45:fd:1b:
5d:24:bd:4b:b6:e9:59:8e:e9:55:a0:93:1a:87:36:
60:ea:d1:47:b1:fe:ef:e0:95:3c:22:ea:a4:99:09:
e1:43:25:17:db:74:70:28:12:b8:a7:4b:2e:b8:d1:
46:32:40:e6:4e:eb:10:97:4d:28:d4:a6:d8:cd:d1:
74:f4:36:19:ae:03:7c:2a:46:0c:be:14:22:26:d3:
9f:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:91:07:EC:D8:C5:67:16:AE:F5:14:B7:DB:E0:3A:25:AC:13:25:22
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/9ZEH7NjFZxau9RS32-A6JawTJSI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
14:43:87:b2:39:c5:fc:3e:5e:27:45:4e:8b:69:fd:d7:3b:96:
7a:65:af:a5:b9:b4:54:8c:c7:95:6e:e1:8d:81:e0:cf:4c:0b:
f8:02:8e:80:dd:08:92:22:a0:8d:fa:bb:ff:69:91:93:80:8a:
c4:cd:35:aa:15:57:8b:8a:a3:92:4c:08:72:b5:d3:fe:6a:1d:
8d:43:c4:40:62:fd:d6:ea:7d:03:1a:aa:6b:a4:8f:17:87:20:
e4:19:c0:02:b0:82:84:37:b3:ee:88:a0:5d:2a:e8:47:d5:57:
f5:eb:b8:73:ef:87:af:a2:8e:de:ce:c2:42:4a:dc:f8:d1:f9:
58:dc:1d:7c:10:4b:16:fb:46:df:03:2a:48:29:1c:3e:cd:fd:
58:99:67:20:68:48:a7:e4:64:74:3a:00:7a:ce:2c:9f:37:19:
37:c7:96:a4:d2:dd:ef:37:0e:e8:f1:b0:49:c6:3d:86:04:91:
a6:2f:6c:ba:72:6e:f5:4b:c0:62:6a:1d:88:d4:2b:16:a8:53:
98:a0:4b:05:22:45:f5:7a:06:b5:a7:c9:1b:7f:0b:1b:d7:72:
6c:5f:a1:f6:43:bd:1c:cc:c4:ae:d5:c3:d6:8d:3f:91:fd:76:
73:68:f9:60:79:07:75:f1:dd:b4:20:40:a6:e9:1f:94:ca:e5:
4b:d3:fe:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 2 22:09:41 2025 by rpki-client