Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/ZJegaog7v-h8xIME_IoKBi-068Y.roa
File: ZJegaog7v-h8xIME_IoKBi-068Y.roa (raw, json)
Hash identifier: 8bOGF6rbhYcOii/BzmbDHD+3/sXhBzFK4urzL/sTw30=
Subject key identifier: 64:97:A0:6A:88:3B:BF:E8:7C:C4:83:04:FC:8A:0A:06:2F:B4:EB:C6
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0187A1CCBBA01C76DACA397C02AC5BC6425C
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/ZJegaog7v-h8xIME_IoKBi-068Y.roa
Signing time: Fri 21 Apr 2023 03:12:41 +0000
ROA not before: Fri 21 Apr 2023 03:12:41 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:187:4695:a68a/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:a1:cc:bb:a0:1c:76:da:ca:39:7c:02:ac:5b:c6:42:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Apr 21 03:12:41 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=6497a06a883bbfe87cc48304fc8a0a062fb4ebc6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:6a:74:51:d8:52:8a:e4:e9:1b:56:ea:e9:0d:
a1:a1:a3:9a:53:4c:7e:75:da:c2:fc:b5:44:f6:6b:
16:3f:68:98:bc:e7:6b:8c:96:4e:22:09:98:03:e7:
1d:50:75:eb:f5:10:f9:a6:98:a3:09:b3:44:61:c9:
f3:48:e7:88:7b:71:10:4e:a8:93:64:46:0d:1f:8d:
a8:73:69:c8:cc:ab:e3:69:0b:2a:92:f8:10:7b:a5:
42:60:f8:a1:48:6e:99:e1:9e:df:c7:fb:05:6a:09:
c7:ff:94:41:6c:c7:83:92:22:96:24:d0:37:f5:38:
6f:9c:97:c0:ff:9b:f6:71:bf:22:9c:49:e6:da:65:
d1:67:d4:c7:16:74:95:0f:aa:34:ea:00:e3:26:e3:
0e:4b:de:4a:fb:48:b4:d1:dc:10:95:0a:31:b9:44:
0f:9a:3e:ad:64:b0:56:97:64:33:6d:f8:39:22:79:
6b:35:a8:8a:5c:8c:f3:dc:a7:e7:8b:ae:45:b4:b7:
8d:e2:90:ca:92:a9:bc:82:e4:7c:69:f9:ef:26:c7:
3f:93:cb:94:b5:11:a8:2d:16:92:91:73:13:b0:be:
16:c4:d5:70:3f:ef:b8:ff:7c:9a:f0:c9:a2:80:e7:
4f:19:00:5e:8d:7f:bd:12:7f:20:97:e1:65:67:b3:
68:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:97:A0:6A:88:3B:BF:E8:7C:C4:83:04:FC:8A:0A:06:2F:B4:EB:C6
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/ZJegaog7v-h8xIME_IoKBi-068Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
a4:cb:c8:2f:2c:5b:fc:b4:27:07:77:16:2f:61:93:f5:87:dc:
c3:18:3c:44:31:bf:fd:e9:e0:c3:2b:cc:a2:df:29:bc:b5:d4:
2e:2e:40:58:83:1f:bb:28:9f:fd:33:3c:3e:e1:7a:a2:b9:64:
5b:ba:40:c1:3c:5b:4d:91:b1:1d:20:99:85:52:bb:e3:77:91:
4f:fd:ef:bf:c2:b4:d4:86:3f:d9:80:b3:66:2f:81:ce:3e:f6:
00:f0:31:b4:d4:1f:d8:a4:50:fa:2a:2e:03:37:fa:1f:e1:1e:
cc:71:84:88:57:47:bc:d3:20:d6:a9:e5:ed:b0:97:2f:8f:65:
24:0a:4f:e2:6d:de:64:a4:77:7d:5e:8c:db:59:f5:64:e3:64:
a5:3b:7b:89:c5:a4:6c:4e:ae:97:0b:d9:7a:53:65:78:2a:28:
32:07:c5:d2:d1:df:d8:5b:6e:84:91:d7:9a:dd:c4:04:10:9d:
0a:ef:17:e3:c6:23:5c:8e:27:4e:00:ff:37:4b:5a:ad:ec:7d:
8b:d9:22:e3:20:db:ac:64:bb:09:6e:2f:17:80:99:2d:aa:62:
fe:b4:5f:e6:ce:88:68:01:45:fd:9d:56:4f:51:f6:a8:05:8e:
55:c5:97:78:2f:76:23:28:bc:b3:c2:80:5c:50:ef:37:5a:f1:
30:6b:52:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 15:34:20 2025 by rpki-client