Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/ZPWwhY2drDTHXzJjobWRJQD1nJA.roa
File: ZPWwhY2drDTHXzJjobWRJQD1nJA.roa (raw, json)
Hash identifier: NuAliMj2DBawAzy2omxSiU4QMJvfVJo5EoxaV5dkX2I=
Subject key identifier: 64:F5:B0:85:8D:9D:AC:34:C7:5F:32:63:A1:B5:91:25:00:F5:9C:90
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 01885B3169BA9F89EBA1B53D3ACE74D6BBCD
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/ZPWwhY2drDTHXzJjobWRJQD1nJA.roa
Signing time: Sat 27 May 2023 03:12:24 +0000
ROA not before: Sat 27 May 2023 03:12:24 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:187:4695:a68a/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64:ffff:0:187:fa9a:b088/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:187:b2b8:a7dd/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:5b:31:69:ba:9f:89:eb:a1:b5:3d:3a:ce:74:d6:bb:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: May 27 03:12:24 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=64f5b0858d9dac34c75f3263a1b5912500f59c90
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:67:9e:24:ba:9d:1b:d0:da:b1:ae:c4:d8:b2:
4d:75:10:e9:59:73:66:8c:72:45:93:19:de:65:86:
c1:63:2b:54:2c:ab:be:b7:bd:e1:28:a2:fe:66:cc:
10:8e:29:db:ee:d3:66:0c:1c:06:8e:81:e3:72:03:
2a:90:02:c0:4f:b9:d9:56:68:54:fb:31:25:de:7e:
c9:ad:1c:d8:3b:a9:a8:59:7d:c2:1d:56:9f:9a:2d:
2a:87:6e:5c:a0:41:ae:8f:69:51:fd:4e:82:47:ab:
6a:30:85:38:72:b1:2c:b8:ef:1a:1f:3f:7a:57:86:
7f:49:97:f9:c6:79:99:5c:c8:be:15:d8:63:c2:38:
99:a8:8d:19:cd:ed:1a:ae:66:da:ec:74:a1:c6:50:
d4:85:03:04:94:90:13:fe:56:94:49:4f:af:e7:c9:
01:4a:69:2a:5c:6b:4a:c4:59:fe:36:e4:ac:ab:84:
5f:0e:eb:cc:fd:c5:57:0f:a6:af:0c:7a:4e:f0:7f:
02:a5:48:eb:ea:e6:0b:e4:8d:62:4a:9c:10:17:a3:
ed:3b:15:2b:14:d4:1f:e7:ec:f9:2d:4c:dc:ce:17:
ea:4f:f2:33:70:58:9f:b9:b6:20:71:c0:1b:51:f7:
6e:b4:ac:08:1a:74:c5:68:f4:b1:6a:be:a1:02:1e:
8c:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:F5:B0:85:8D:9D:AC:34:C7:5F:32:63:A1:B5:91:25:00:F5:9C:90
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/ZPWwhY2drDTHXzJjobWRJQD1nJA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
ab:7b:cd:ea:27:cf:24:8b:9a:c4:23:1c:01:93:37:42:1d:4f:
bf:06:04:05:6e:52:1b:56:77:f6:3f:8c:ee:2c:07:a8:19:0d:
48:32:5f:b7:fa:a9:55:05:73:8a:b6:63:19:24:c0:03:72:0b:
75:72:4a:0c:db:0d:19:db:f4:d1:36:9a:12:99:9c:bc:28:d8:
ce:bf:2a:45:e6:b0:e3:5c:8e:7a:84:c2:41:92:db:0b:5f:7c:
4a:d7:79:eb:ba:6e:28:49:99:99:91:37:68:7d:99:a6:f3:54:
87:44:60:ac:a0:14:1b:47:b8:69:39:1d:c1:65:6f:2a:36:b9:
de:87:5f:4a:76:f9:c2:16:5a:c2:3b:10:df:26:cd:68:f0:32:
ea:32:8a:7b:c6:10:6e:e5:1e:e1:93:8c:57:0c:a6:f8:e0:ca:
9c:0d:30:f9:8b:ef:81:75:3f:46:bf:cc:a2:bc:2f:bc:52:52:
fe:ca:4e:22:98:8c:6f:bc:84:f3:42:32:58:87:66:3f:1a:bb:
5b:40:8d:57:f4:a9:21:a6:fd:db:57:14:7b:23:9a:b1:7d:37:
2c:48:15:3b:04:7c:4d:3a:25:46:d1:9b:18:df:35:7c:88:d6:
66:09:cb:6c:85:85:cd:35:d2:43:68:b6:ec:19:26:8a:85:d5:
70:b8:6b:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 17:11:15 2025 by rpki-client