Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/ZJnSlAnq2GvYZ4rEGoOx_J0-M9E.roa
File: ZJnSlAnq2GvYZ4rEGoOx_J0-M9E.roa (raw, json)
Hash identifier: v53cmV1Qc6qHK0KuA8BANmwlWmJ4uaPhW9J/V4mLxck=
Subject key identifier: 64:99:D2:94:09:EA:D8:6B:D8:67:8A:C4:1A:83:B1:FC:9D:3E:33:D1
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0189A4C20B4A9A3958F00E7F0C24BF48CA5D
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/ZJnSlAnq2GvYZ4rEGoOx_J0-M9E.roa
Signing time: Sun 30 Jul 2023 03:05:27 +0000
ROA not before: Sun 30 Jul 2023 03:05:27 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:188:7858:a003/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:189:a4c1:72b4/128 maxlen: 128
2001:67c:64:ffff:0:189:a0e4:5c7d/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:a4:c2:0b:4a:9a:39:58:f0:0e:7f:0c:24:bf:48:ca:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Jul 30 03:05:27 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=6499d29409ead86bd8678ac41a83b1fc9d3e33d1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:fd:f0:34:3b:be:cd:cd:b9:92:59:4b:53:82:
3f:78:2e:a2:95:ef:e2:87:8b:59:8d:71:8c:76:c1:
26:2a:4d:98:4d:74:aa:c6:77:4a:93:12:c2:cc:26:
8c:05:f1:d7:43:ef:d5:43:6e:43:15:e1:76:7a:d1:
1d:12:e5:a6:d8:1a:dc:99:3a:a6:44:1a:60:46:9d:
61:d0:de:2c:91:95:eb:80:2a:2a:79:47:10:c2:bf:
34:95:12:1d:47:01:bf:6a:03:30:be:79:95:60:14:
9b:77:4c:19:7d:35:a9:ae:de:06:b2:44:d3:49:f3:
ca:95:d8:f7:9d:85:a8:75:f2:38:d5:10:c8:45:58:
d3:9c:85:83:06:53:57:ca:17:68:91:80:68:d2:aa:
8a:c5:50:b1:c4:df:6a:1e:0f:c8:4d:31:27:63:17:
61:7e:11:73:32:94:fd:1b:14:bd:06:f9:9a:45:2b:
07:65:16:be:4a:46:c1:93:37:2b:85:01:57:a8:f0:
51:82:ec:64:b1:c1:be:f8:39:93:74:63:4c:2b:e5:
1d:79:5b:f1:e2:be:cd:39:6b:96:20:aa:6c:1e:93:
08:d2:44:d9:3c:62:72:3f:4d:6c:73:14:28:f2:39:
6a:2f:38:15:bf:4e:0c:75:ca:37:bf:5d:0a:33:45:
ba:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:99:D2:94:09:EA:D8:6B:D8:67:8A:C4:1A:83:B1:FC:9D:3E:33:D1
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/ZJnSlAnq2GvYZ4rEGoOx_J0-M9E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
8c:3a:73:06:bd:d9:52:de:90:eb:b6:11:d0:6d:ac:1c:e0:0b:
12:2f:79:7c:8d:71:a1:cd:98:28:36:7b:42:91:79:8f:76:5d:
4b:4b:41:70:c9:26:37:da:f6:66:1c:bb:a1:ef:e4:94:0c:04:
63:36:91:21:88:07:fc:bc:01:0e:c0:ad:27:d7:10:c8:c1:a5:
e3:90:88:a1:7b:e0:30:eb:9d:05:e7:21:e5:00:9b:42:ee:b3:
8d:63:18:94:30:a4:39:0d:c9:8c:62:a9:70:90:30:d9:1f:a2:
83:25:a5:13:2c:74:b3:e9:23:d6:21:26:57:7e:11:5b:09:af:
6c:3a:a2:29:8b:41:49:ca:54:a7:b4:d4:22:45:87:2e:e0:e8:
a3:5f:3b:3f:56:03:3d:5c:e8:f2:1a:61:67:19:35:5f:85:1c:
35:c3:77:59:2a:59:6b:22:19:4c:e4:7f:cd:13:60:56:45:d6:
e1:22:96:7d:a6:c3:ed:1f:36:89:30:33:76:1e:c9:f2:76:97:
11:d2:1c:29:c3:55:ef:30:ea:c3:56:7b:8d:67:c4:75:5e:07:
81:92:75:c8:8e:ca:29:70:84:b9:12:5e:9d:a8:d0:5f:68:66:
66:4e:aa:1d:a0:dd:c8:58:26:eb:d5:ec:fb:9d:51:32:2c:34:
34:58:5c:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 10:19:00 2025 by rpki-client