Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/ZGF7igHCQoJK73lcH_Agbcl4ngE.roa
File: ZGF7igHCQoJK73lcH_Agbcl4ngE.roa (raw, json)
Hash identifier: SdVm/NIpHM6XshV45qemUzbuvD6ZAjVGRSpCSxlpAnM=
Subject key identifier: 64:61:7B:8A:01:C2:42:82:4A:EF:79:5C:1F:F0:20:6D:C9:78:9E:01
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0185C3BC5DA0843C100D5945D8F4BC7DF0EF
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/ZGF7igHCQoJK73lcH_Agbcl4ngE.roa
Signing time: Wed 18 Jan 2023 07:16:19 +0000
ROA not before: Wed 18 Jan 2023 07:16:19 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:c3:bc:5d:a0:84:3c:10:0d:59:45:d8:f4:bc:7d:f0:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Jan 18 07:16:19 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=64617b8a01c242824aef795c1ff0206dc9789e01
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:5f:9f:50:c0:ee:b2:39:f6:d8:cb:88:a1:41:
bd:88:2d:bb:93:f8:44:80:09:16:32:27:7f:7a:7f:
16:6a:45:06:a5:d4:02:ad:1d:06:55:44:2d:f2:91:
f4:22:d8:8f:fd:31:61:cb:5c:64:a6:5e:da:73:55:
e4:9b:7d:39:b6:b3:9d:62:bd:ec:c5:a1:47:42:e0:
21:45:d0:33:de:17:dd:73:39:80:e7:ce:b7:e8:1c:
d0:55:c9:f2:54:05:9e:bb:17:85:56:ad:66:e7:e7:
3a:ca:a1:3b:e3:9f:8f:5b:fd:f1:b5:e1:ea:dd:ee:
ce:3c:4f:db:ee:a8:73:ab:d7:78:a4:74:d6:8e:48:
a2:83:c4:2b:0f:6b:ae:0b:ca:8d:23:72:99:d3:59:
be:5d:07:dd:dd:11:15:4b:4d:80:c7:8c:c4:e4:d2:
78:47:f6:15:36:c1:34:09:aa:4f:a3:74:40:ad:e9:
4e:b1:1c:75:bd:4b:7b:41:8d:31:36:0d:43:3b:7f:
4a:6b:2b:c6:5a:ea:5d:0e:ba:e7:1e:ae:cb:9a:07:
f3:72:a2:7f:a2:db:38:35:92:2b:79:fd:b0:98:68:
fc:fe:02:9c:5c:5a:f7:b1:aa:0b:b9:e5:ac:b4:6a:
90:9f:53:82:22:b7:29:22:38:bf:49:41:c6:a3:66:
ee:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:61:7B:8A:01:C2:42:82:4A:EF:79:5C:1F:F0:20:6D:C9:78:9E:01
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/ZGF7igHCQoJK73lcH_Agbcl4ngE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
55:eb:b3:ca:f0:b4:39:fe:f5:02:25:f3:09:53:33:8a:e7:36:
e8:5f:5f:04:0f:e5:6b:fe:f0:33:1f:9b:55:eb:35:33:fa:bd:
19:31:23:fb:38:73:4e:aa:29:af:0a:da:06:9f:41:e0:37:9e:
6b:95:6c:6e:d3:a0:39:94:2d:be:8e:40:b9:e2:74:56:45:86:
07:15:02:71:ed:97:0c:cc:71:64:4a:37:2d:5c:49:4a:96:a9:
e7:39:9a:1a:e2:41:75:01:55:4e:cb:f1:53:b4:e8:ed:44:54:
48:40:ab:d3:3e:ce:ab:36:d0:1b:09:03:25:e8:e1:8d:fb:86:
8c:7c:bb:22:85:14:79:59:0d:75:33:17:83:ac:81:3e:b1:55:
c6:6f:33:df:ee:4e:9f:d7:7e:57:c9:22:9c:a1:e7:ba:5f:d7:
a1:da:35:53:7d:cb:d7:2e:fd:68:db:44:3c:cc:12:c2:8f:e7:
a0:a9:32:a8:ef:2a:62:f7:5b:d1:f7:0c:97:11:23:75:ff:14:
da:a2:45:bb:4b:4c:7b:95:bd:2e:8a:e4:85:ab:82:85:52:e3:
8d:55:25:0a:73:cd:19:24:f2:c4:09:44:58:62:53:55:6b:45:
1d:8d:1d:f8:3e:07:3f:4b:84:c2:6a:f7:7d:2b:5c:f2:52:58:
14:1a:df:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 18:13:37 2025 by rpki-client