Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/ZKSZnwIqIKWB5m7dwvIJfJm1wgk.roa
File: ZKSZnwIqIKWB5m7dwvIJfJm1wgk.roa (raw, json)
Hash identifier: Wb2wbp0vB0iV8YijrKEFdqxJKlOB+aKmZWRCjD6uzFw=
Subject key identifier: 64:A4:99:9F:02:2A:20:A5:81:E6:6E:DD:C2:F2:09:7C:99:B5:C2:09
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0187D95CFDE1B2F55521248116D80900B726
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/ZKSZnwIqIKWB5m7dwvIJfJm1wgk.roa
Signing time: Mon 01 May 2023 22:09:22 +0000
ROA not before: Mon 01 May 2023 22:09:22 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:187:4695:a68a/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:187:b2b8:a7dd/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:d9:5c:fd:e1:b2:f5:55:21:24:81:16:d8:09:00:b7:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: May 1 22:09:22 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=64a4999f022a20a581e66eddc2f2097c99b5c209
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:ad:02:2f:3c:fd:af:d6:2e:a4:3d:55:f3:91:
7b:62:94:2d:2a:f5:d6:46:59:ba:01:47:92:75:09:
c4:5f:1a:e3:a3:bb:cd:e2:02:22:34:12:37:e7:73:
ef:11:af:4d:d9:7b:fe:0f:7f:83:84:95:95:f5:6f:
b2:58:06:7d:89:6a:26:77:2c:7c:8b:fa:1f:3c:99:
99:33:19:0e:64:be:50:b1:73:8b:66:50:ac:fb:c2:
2d:da:46:da:b2:9e:ab:39:b0:12:42:f9:67:19:23:
a0:89:26:86:67:e2:68:2b:0a:fb:e1:14:92:1f:ef:
c6:2b:ba:11:6b:17:a9:e7:60:da:b5:d5:25:28:b0:
b2:67:9b:b5:95:00:04:06:fa:93:2a:b2:1c:80:f7:
02:93:65:9a:ac:6a:e2:da:3e:9a:4f:d9:eb:d2:43:
cf:58:00:7b:cd:f4:73:57:70:cd:c0:0a:a1:3a:65:
64:31:15:bb:48:0a:d2:e5:ac:6b:02:24:53:7c:b5:
93:87:a7:ba:31:21:31:75:0f:0e:ef:65:2a:5a:2e:
0d:6c:49:30:8e:c7:16:be:48:7c:86:f0:af:d2:1a:
d7:93:c0:37:e9:50:3b:0e:8e:58:51:0f:60:48:89:
db:fb:9d:fe:9b:0a:42:a6:44:8b:42:98:cd:27:42:
26:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:A4:99:9F:02:2A:20:A5:81:E6:6E:DD:C2:F2:09:7C:99:B5:C2:09
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/ZKSZnwIqIKWB5m7dwvIJfJm1wgk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
47:2e:ef:8a:21:54:44:01:01:35:9e:3b:75:cd:a1:45:a8:bc:
1a:eb:f1:a2:6b:25:66:9b:22:ab:a3:11:71:8c:10:40:ca:c7:
7f:3c:70:47:9d:bb:fa:03:ad:c9:cc:48:fc:d2:c3:c2:fb:52:
23:e5:54:a8:87:52:42:5d:19:d2:c6:53:b0:e0:67:4a:1a:f9:
e1:42:f3:1d:eb:94:7d:8d:2b:e5:a8:57:fa:74:95:e0:6f:f3:
5b:0b:c4:60:c0:29:57:7c:6c:80:1a:63:3b:0f:8f:1d:84:82:
d2:84:a3:58:dc:25:49:57:41:5a:a6:dc:d9:bb:f4:9e:0f:a8:
f0:40:62:25:23:7e:2d:d0:0c:40:87:79:ae:e0:70:54:ea:e8:
80:62:53:5e:c0:e7:58:aa:0c:48:b3:13:18:dd:04:2f:07:be:
91:ec:1d:92:3e:f1:6e:57:a3:d9:fc:e6:f3:8c:89:bf:f0:6f:
9d:22:b6:8e:a0:b9:67:9f:0e:3e:25:67:4c:7b:3c:6c:81:b2:
5d:52:5e:e0:6f:d2:9c:59:e9:2f:ef:cc:9c:e4:48:77:70:ef:
6f:7e:d3:0a:1a:3e:9a:ed:44:f3:70:cd:48:ac:ec:92:4e:71:
db:68:55:b8:03:d2:2c:79:00:09:8a:22:f4:19:d9:fb:ff:0e:
7c:fc:5a:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 3 20:43:13 2025 by rpki-client