Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/Z81DJpJjN5hM4BVfn7dTaP3CI5I.roa
File: Z81DJpJjN5hM4BVfn7dTaP3CI5I.roa (raw, json)
Hash identifier: tibJBXvltfmTjJQzMbZcPV6DX2ZwRYPYw0qOfkvSdUE=
Subject key identifier: 67:CD:43:26:92:63:37:98:4C:E0:15:5F:9F:B7:53:68:FD:C2:23:92
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0186DA008897ACD02D41072A808ED8888120
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/Z81DJpJjN5hM4BVfn7dTaP3CI5I.roa
Signing time: Mon 13 Mar 2023 08:05:13 +0000
ROA not before: Mon 13 Mar 2023 08:05:13 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:d9ff:de42/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:da:00:88:97:ac:d0:2d:41:07:2a:80:8e:d8:88:81:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Mar 13 08:05:13 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=67cd4326926337984ce0155f9fb75368fdc22392
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:03:49:9b:8d:5f:46:03:b6:72:fc:2e:fe:d6:
c1:94:3e:32:30:a5:43:dd:6c:83:b0:ff:e7:a6:89:
4c:4b:ce:32:ad:0d:68:6e:bd:21:2d:9a:75:4b:cf:
0d:fe:06:0b:6c:f6:c1:6f:8f:51:11:b8:c8:1d:84:
91:cc:d0:b1:d5:da:44:ca:fc:67:37:fa:12:24:be:
2e:e5:63:00:9a:b2:4d:12:16:68:a3:80:e2:90:b2:
f3:37:b5:e6:82:d5:6e:fc:93:e3:98:52:bc:ef:32:
f6:ae:ba:4e:3b:79:a2:5e:8f:02:9a:c0:df:49:bf:
f3:7e:98:52:65:30:a6:0a:95:8d:38:5e:e4:7a:43:
11:6d:1a:0e:7b:ae:6d:b8:ee:60:82:30:61:7b:27:
55:00:8b:12:92:e1:94:14:ae:13:eb:4f:fb:5d:dc:
34:13:bf:93:35:6d:01:0f:a9:26:80:f5:9a:50:fc:
1c:18:5b:93:12:a4:74:88:26:66:92:d5:14:cd:c6:
5f:3a:95:dc:5b:41:d9:3d:2a:f7:3d:2f:4b:e3:b3:
80:74:5f:03:55:0f:41:3a:cb:ae:c8:7b:d4:88:bf:
79:fe:09:24:9b:af:a0:27:23:ea:ec:69:ee:23:e1:
3c:9e:7e:f5:36:a5:47:f5:43:f8:ad:f2:26:7a:c6:
dd:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:CD:43:26:92:63:37:98:4C:E0:15:5F:9F:B7:53:68:FD:C2:23:92
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/Z81DJpJjN5hM4BVfn7dTaP3CI5I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
4f:5e:3a:ea:88:fb:97:eb:7e:83:07:c6:b9:e8:bb:18:d1:b5:
58:83:6a:be:92:33:f3:86:a0:53:37:cd:1f:64:9d:33:3f:62:
30:8e:47:7c:7d:1e:cc:a1:da:0c:ec:6c:65:c1:1a:14:df:da:
7f:35:06:12:84:32:9d:cf:13:86:ba:05:18:25:72:54:b4:12:
03:c5:0a:7f:d9:75:db:20:bb:b8:50:5e:c7:37:ba:79:89:b8:
e3:5d:58:b0:42:ef:62:9a:53:2c:2e:0a:7d:ae:11:cc:32:8a:
4e:45:f2:0d:b0:92:55:c3:22:8c:66:49:b6:84:b8:f7:44:2b:
14:c1:c3:de:57:5f:db:f2:f7:52:bc:df:aa:ee:fb:ba:73:85:
07:00:db:34:c7:ae:a8:59:36:b4:1f:12:08:08:e7:31:32:9b:
fa:d8:8c:5c:fb:46:96:73:83:25:37:23:11:d4:96:73:6f:c0:
2a:c1:70:3d:54:66:da:f7:4a:20:7f:66:57:4d:89:00:ee:2b:
97:5b:d4:0c:dd:b7:92:06:9b:6e:e8:ed:99:87:fe:5f:ba:4b:
14:cb:94:55:9c:fd:f3:dd:52:71:9b:b4:9f:c4:fb:00:7e:9f:
a6:3a:f3:a8:d5:f5:c0:0d:49:5e:ef:dd:c0:6d:b2:83:05:bd:
e4:08:c7:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 11:15:26 2025 by rpki-client