Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/Z6Ry1tLdJOi8XrlstByycnr6gIU.roa
File: Z6Ry1tLdJOi8XrlstByycnr6gIU.roa (raw, json)
Hash identifier: mtvgRIgjkUtMJDejiMPg3onvqKlpjhvrpapIiQK8Qj8=
Subject key identifier: 67:A4:72:D6:D2:DD:24:E8:BC:5E:B9:6C:B4:1C:B2:72:7A:FA:80:85
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 67535CCE
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/Z6Ry1tLdJOi8XrlstByycnr6gIU.roa
Signing time: Wed 02 Feb 2022 23:04:39 +0000
ROA not before: Wed 02 Feb 2022 23:04:39 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:17e:a0dd:2f5b/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:17e:bcae:cd83/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1733516494 (0x67535cce)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Feb 2 23:04:39 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=67a472d6d2dd24e8bc5eb96cb41cb2727afa8085
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:80:16:3a:3c:9c:2a:75:7c:9f:78:2c:ae:39:
c6:d1:83:f9:00:f9:e6:ce:6a:4b:cd:a3:1d:1b:37:
f4:ac:d5:0c:95:4b:a4:38:50:f8:ce:82:d2:b2:05:
7a:66:94:70:50:d8:78:be:56:ed:46:0a:5f:d8:c2:
7d:db:ff:f9:e7:52:ef:39:47:e6:6d:de:98:be:a4:
f6:6c:8d:2e:fa:b6:5a:e0:06:a4:4d:37:f3:18:88:
15:c1:e6:6d:07:74:5a:72:9b:d6:0a:63:57:46:da:
6d:cb:14:98:89:dd:b1:7b:b4:f1:58:10:21:c5:04:
e8:af:27:c7:89:f1:78:fa:94:64:50:39:23:55:2d:
1d:1b:d2:53:ab:f7:78:b7:0b:08:58:1c:b1:56:37:
04:c5:1f:3b:06:55:8c:e0:07:87:44:a2:6d:45:2b:
33:a3:d7:fc:e0:ef:5b:ca:01:2a:5d:5d:ca:ed:b1:
47:c6:38:a1:6b:fe:ca:ee:97:18:01:bb:b8:4e:53:
ba:54:15:f4:3d:d5:4d:09:ec:d8:8c:29:7c:b6:ed:
73:83:43:b0:97:7b:c4:31:cb:01:80:84:9b:ae:23:
55:dc:28:90:3f:9d:3a:da:29:c3:24:45:37:b6:b8:
32:18:11:61:1d:70:6d:62:14:70:cb:68:69:52:0d:
40:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:A4:72:D6:D2:DD:24:E8:BC:5E:B9:6C:B4:1C:B2:72:7A:FA:80:85
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/Z6Ry1tLdJOi8XrlstByycnr6gIU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
0d:77:5f:69:75:eb:da:48:39:60:bf:df:8b:9c:e8:ce:ad:05:
29:3f:49:96:1a:09:02:f6:36:c8:8f:36:37:d6:71:e5:cc:27:
a3:c9:fe:45:fc:33:34:07:89:ab:39:87:d7:b1:6f:53:68:cd:
c6:b3:c2:0e:71:2b:88:e0:d2:02:ec:f9:a3:0f:84:bb:a2:0f:
de:63:93:dc:04:aa:b3:da:ba:7b:c0:9d:7e:12:92:7a:82:37:
2e:3f:cc:56:f6:b0:35:1f:0f:ac:6d:22:86:a2:74:ec:75:37:
65:6d:31:c9:15:4e:44:69:6b:f9:ea:02:2b:29:04:62:19:f1:
b2:94:21:f4:45:03:03:b6:54:e6:c8:2c:1c:4d:cc:c6:da:4b:
8b:96:66:ba:e0:c7:2d:7b:d0:4c:f7:df:c9:23:3d:d3:fe:12:
c5:a3:3b:51:76:e2:eb:f4:61:72:0f:b7:3e:44:f4:0e:f1:33:
40:e9:ac:83:70:90:81:f0:1d:89:0e:be:41:e9:76:54:d9:17:
ba:2b:4b:5e:aa:1a:66:76:fb:15:55:1c:6f:1e:a5:fd:f6:2d:
d3:69:74:94:ef:eb:9c:22:6d:9b:14:94:64:1a:61:bb:28:4d:
1b:f7:c9:e9:c5:c8:2e:24:fa:6c:bc:f9:12:7a:ed:5c:00:a6:
9e:3f:dc:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 19:49:20 2025 by rpki-client