Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/Z3VQEKDB_gNKexTQTyewedmn9O0.roa
File: Z3VQEKDB_gNKexTQTyewedmn9O0.roa (raw, json)
Hash identifier: 4DA2WDjVGhwFLfxJrDNuSXn0L4Y6oZC8hNDtOooJVvg=
Subject key identifier: 67:75:50:10:A0:C1:FE:03:4A:7B:14:D0:4F:27:B0:79:D9:A7:F4:ED
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 01825B79773804D407AF7C5B5497E96E28F5
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/Z3VQEKDB_gNKexTQTyewedmn9O0.roa
Signing time: Mon 01 Aug 2022 22:14:23 +0000
ROA not before: Mon 01 Aug 2022 22:14:23 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:182:3f1d:a803/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:182:383f:6b78/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:5b:79:77:38:04:d4:07:af:7c:5b:54:97:e9:6e:28:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Aug 1 22:14:23 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=67755010a0c1fe034a7b14d04f27b079d9a7f4ed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:c0:b1:df:63:78:85:68:8e:74:15:fe:80:4e:
95:1b:96:a9:68:88:e7:99:52:c2:c8:90:c8:63:f9:
53:31:9c:fe:65:02:6d:ad:c1:a7:f3:4d:d8:b4:98:
5e:42:c7:58:33:83:94:f1:8b:24:f3:a3:53:06:32:
b1:cc:4a:9d:13:6a:86:d9:3b:01:06:ab:b7:78:6b:
dd:74:72:82:fa:4e:6f:31:a3:59:63:16:31:2e:37:
89:e5:20:66:b2:fa:94:50:f7:68:20:35:6f:eb:19:
a2:ab:2d:60:b6:0a:4c:9d:a3:f6:d0:c1:64:ad:5f:
64:ed:d3:dd:09:e4:35:92:bc:0d:c2:93:c6:21:bc:
4a:dd:a3:41:12:ec:de:d6:95:89:a5:41:ae:72:38:
89:ce:47:85:b4:0d:1c:5b:16:36:2d:cf:64:a3:1d:
b8:b4:5e:b5:66:00:94:3f:e6:f9:ea:0d:61:5a:fd:
d8:2b:1b:21:81:85:48:ce:ab:90:8f:94:03:a6:76:
9f:7e:15:ed:63:48:11:60:06:0a:bf:b7:38:3a:69:
4c:13:5c:cb:53:29:83:d5:2c:75:df:77:ed:48:da:
50:cc:a8:39:33:47:cb:9e:b4:76:3e:d3:26:70:67:
9c:45:b9:ab:67:9b:eb:12:b1:09:cc:88:83:a8:98:
29:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:75:50:10:A0:C1:FE:03:4A:7B:14:D0:4F:27:B0:79:D9:A7:F4:ED
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/Z3VQEKDB_gNKexTQTyewedmn9O0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
45:03:f8:ef:c0:59:37:a6:11:94:e0:d7:30:3c:15:59:e1:dd:
9f:d6:c9:70:47:4b:d9:73:fa:c1:63:de:eb:be:83:a8:e5:73:
55:ac:73:ad:2d:f0:65:69:c2:1a:7f:1d:bd:ae:b1:3c:bc:ad:
52:cd:7c:36:71:b0:50:13:92:f5:bc:36:0c:65:e4:e0:86:a4:
27:54:61:cd:10:a4:e2:fb:41:19:47:24:92:93:58:34:55:19:
cf:8f:e0:31:96:6d:1d:c8:24:ea:85:11:13:1c:36:df:51:38:
b3:b1:59:63:c9:13:20:49:20:3d:c3:0e:ac:69:85:9c:bc:2e:
f4:ae:c3:60:cf:39:a4:aa:e9:0b:08:af:60:50:4b:7d:d4:7d:
5c:37:ab:71:7e:a9:72:c1:e5:dd:58:fc:e0:4a:cf:af:a5:25:
09:1f:99:62:99:3b:02:e5:9a:f7:30:95:9e:d6:48:df:72:93:
0a:22:63:85:13:e0:51:32:e4:d1:23:19:0f:99:5a:6b:a5:3e:
c2:59:5a:95:40:83:26:08:cd:0d:82:b4:ac:b7:21:ee:06:2a:
72:4f:a8:5d:8d:d2:41:af:5f:32:c9:30:bb:26:81:5e:77:07:
e0:b6:0d:8a:cb:d8:92:e4:e8:a8:41:5e:c8:42:d4:54:b6:70:
a6:0e:13:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 17:38:05 2025 by rpki-client