Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/ZFc1b21kcW4CvyEOYSK1UCMfdJc.roa
File: ZFc1b21kcW4CvyEOYSK1UCMfdJc.roa (raw, json)
Hash identifier: JMqV29AGN/pIpomd7lm+PrtDRPZUHa1hOZm17cDRy54=
Subject key identifier: 64:57:35:6F:6D:64:71:6E:02:BF:21:0E:61:22:B5:50:23:1F:74:97
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 7A951EEF
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/ZFc1b21kcW4CvyEOYSK1UCMfdJc.roa
Signing time: Tue 12 Apr 2022 03:10:51 +0000
ROA not before: Tue 12 Apr 2022 03:10:51 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:180:457:1e3f/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2056593135 (0x7a951eef)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Apr 12 03:10:51 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=6457356f6d64716e02bf210e6122b550231f7497
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:67:d2:f5:fa:ce:32:ba:67:da:ad:75:10:aa:
0c:62:96:a7:f8:4b:7f:da:c1:4c:83:ed:a1:13:7e:
cd:af:9a:d5:3f:95:4e:b8:fd:e4:36:77:46:6f:f4:
09:a7:64:6f:a8:bf:c1:28:0f:58:3f:7b:66:b5:3f:
f8:50:57:b8:c7:15:44:4b:b0:29:87:37:a5:cd:3f:
ad:41:bc:2c:7b:df:8f:d1:7c:9d:a8:09:2b:13:2a:
91:56:70:9b:46:a8:60:67:62:42:0f:dc:61:8a:68:
12:9d:c2:0e:7b:6f:b7:5e:10:0f:a9:a7:2b:ef:36:
d8:5c:0d:79:d7:a8:ac:c5:14:2e:ef:c1:de:cc:00:
06:25:61:f5:e9:15:d4:a6:8c:f6:d0:6b:3d:63:bb:
55:2e:e6:1a:de:8e:4d:63:37:fa:38:b6:d5:7f:6e:
b7:e9:8c:e1:62:b6:d6:ec:b2:d1:43:69:4d:18:44:
d0:c5:c5:1d:6b:13:cd:1b:ee:c9:e9:9e:60:7e:2f:
36:5f:24:03:12:37:62:6f:ce:ab:b3:10:53:9f:6e:
b8:2c:8f:ad:a4:4f:67:c5:67:04:98:3a:cd:c9:82:
10:23:86:74:39:e4:26:36:85:ff:59:ea:98:86:60:
40:c8:33:b8:67:e1:be:ef:fe:2e:75:0f:3b:2d:10:
b5:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:57:35:6F:6D:64:71:6E:02:BF:21:0E:61:22:B5:50:23:1F:74:97
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/ZFc1b21kcW4CvyEOYSK1UCMfdJc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
77:cb:99:03:da:e2:2f:b1:da:d7:ac:0d:4b:29:75:95:55:59:
57:76:7a:3c:c2:09:aa:17:4c:ae:49:17:5a:ed:ea:99:39:70:
7c:ed:77:b5:29:bd:de:50:15:a3:bb:f9:e3:c0:a2:9b:67:2b:
d7:74:9b:07:b7:f0:22:ab:5b:ac:f4:5e:45:16:55:67:6b:16:
fa:c6:8f:3b:54:e8:7b:43:c3:ca:89:40:ff:0c:ca:2c:84:c8:
04:97:91:85:a2:21:d0:57:d8:e5:f9:22:1d:6a:da:63:89:3c:
21:74:96:3c:a2:28:c6:83:4b:df:26:46:41:b0:82:a4:d3:5a:
44:7d:d6:41:1a:80:c6:0b:9f:4e:03:d1:c9:f7:ac:cd:63:a5:
a2:ba:ff:2c:60:d3:88:dc:e7:06:aa:c3:7f:d2:ef:86:46:02:
5e:59:6f:e8:d8:3e:e8:4b:14:61:0d:a7:35:cb:fd:4b:19:d4:
72:85:14:c7:21:37:3a:31:fd:04:87:46:85:bf:c2:ed:16:72:
b2:26:de:b0:ef:c3:76:ec:03:1b:8c:fe:67:35:79:12:5d:eb:
be:57:a3:a1:33:5c:aa:5c:5a:22:ce:68:97:33:20:a1:6a:83:
9f:ea:0f:83:20:87:e6:94:d9:e6:eb:6b:4f:2a:40:91:dc:c5:
37:42:4c:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 17:38:48 2025 by rpki-client