Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/Z8SwfFlCqPTUDMRqovs8F22cnDM.roa
File: Z8SwfFlCqPTUDMRqovs8F22cnDM.roa (raw, json)
Hash identifier: uHoQd9fsX5ura07RxpUffKI8CG0xEZCEsTbWsEf+eVc=
Subject key identifier: 67:C4:B0:7C:59:42:A8:F4:D4:0C:C4:6A:A2:FB:3C:17:6D:9C:9C:33
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 018460C9BE2321F651A89F4E0649975B642F
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/Z8SwfFlCqPTUDMRqovs8F22cnDM.roa
Signing time: Thu 10 Nov 2022 09:05:44 +0000
ROA not before: Thu 10 Nov 2022 09:05:44 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:184:51c3:ad7c/128 maxlen: 128
2001:67c:64:ffff:0:184:3fbd:71f7/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:184:60c8:e1fa/128 maxlen: 128
2001:67c:64:ffff:0:184:4250:a4df/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:60:c9:be:23:21:f6:51:a8:9f:4e:06:49:97:5b:64:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Nov 10 09:05:44 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=67c4b07c5942a8f4d40cc46aa2fb3c176d9c9c33
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:bf:4a:a7:11:93:c4:83:05:33:c3:db:75:96:
91:2f:97:84:03:31:22:e5:bd:ce:68:cd:b7:eb:4d:
77:3b:d9:93:d8:27:be:24:f1:f0:c3:34:56:32:c3:
2b:8c:ca:fb:e2:09:d7:f9:20:4b:64:03:40:36:91:
0e:21:c3:7b:19:62:46:02:1a:e6:86:d6:a8:84:c0:
01:75:b6:88:ce:ab:04:b0:be:8b:3e:71:97:c1:a6:
ab:c5:61:bb:7f:6a:e9:a6:44:a5:14:42:d2:57:75:
d7:c1:53:88:ce:41:6e:0f:f6:32:5a:31:e6:c9:2f:
a4:d2:6f:fe:bc:80:ad:c0:ab:7b:4f:19:27:0a:3d:
97:2c:ee:7f:c5:18:4e:0c:26:05:2a:db:82:88:14:
0a:70:bd:04:6a:8f:c1:3a:6b:92:f3:93:32:8b:42:
dc:7a:b4:33:64:1d:a7:48:18:4d:9b:ad:ed:89:a4:
6f:43:78:21:58:54:9e:11:b0:37:e5:41:f9:a9:e4:
ab:10:1b:2f:9c:74:f3:e7:25:36:9a:64:50:40:ea:
3f:e9:4d:ed:70:0e:b0:74:10:d8:e4:4d:86:48:fd:
04:bd:d7:e8:41:87:52:98:e4:43:a6:7b:33:6b:26:
ef:b4:f3:6a:b5:6d:f0:66:b6:52:dd:5e:f8:e1:1c:
a2:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:C4:B0:7C:59:42:A8:F4:D4:0C:C4:6A:A2:FB:3C:17:6D:9C:9C:33
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/Z8SwfFlCqPTUDMRqovs8F22cnDM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
14:f5:7f:e8:40:12:fa:53:57:10:e1:ca:56:86:09:24:3e:28:
d4:ba:5c:06:bb:76:e5:71:ae:f6:52:ef:de:73:73:0e:00:e2:
f6:00:78:7a:59:4f:33:29:d1:0f:ee:d4:f3:bd:46:a1:e4:7e:
54:55:6d:ec:76:3f:23:ed:1f:c7:f8:68:eb:5a:92:4b:12:85:
52:86:2c:8a:c3:f4:c8:cd:e6:db:eb:9f:fe:b3:40:da:af:14:
34:48:75:fc:56:d8:3f:29:6e:ba:93:0e:26:5e:ab:0a:e1:9a:
98:e1:c7:6d:75:da:95:16:b4:6b:30:87:f1:6f:68:c0:56:9c:
e3:f5:1a:af:27:09:04:30:ac:8b:51:c0:e4:26:5b:54:37:61:
0d:e8:5c:25:cc:ec:12:13:0d:00:db:a1:68:bd:43:b5:ce:72:
ce:22:6b:86:ce:83:28:84:9e:57:9e:f4:4a:9d:38:aa:5a:a7:
44:33:b7:06:6b:ba:2f:48:1f:ec:01:8d:d9:f6:b9:eb:cf:76:
91:98:33:68:5c:b5:1b:fb:04:5b:08:f8:6b:21:cc:4c:1f:cc:
b6:2b:2a:cd:1c:82:74:4f:45:b3:37:64:58:ff:cb:0d:b9:79:
9c:47:e4:b7:76:58:70:36:0d:93:92:3b:0e:ba:7d:6a:cc:96:
30:f5:b2:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 17:41:24 2025 by rpki-client