Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/ZS972PRJhrLGAP--DxPnJvDoAPw.roa
File: ZS972PRJhrLGAP--DxPnJvDoAPw.roa (raw, json)
Hash identifier: nua/p9KowP3Pwpd/AOq+gUGjM658qftM4cDZu85w7JM=
Subject key identifier: 65:2F:7B:D8:F4:49:86:B2:C6:00:FF:BE:0F:13:E7:26:F0:E8:00:FC
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 018697C29FD1C8E78EBC7114E86B64AB4445
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/ZS972PRJhrLGAP--DxPnJvDoAPw.roa
Signing time: Tue 28 Feb 2023 11:22:39 +0000
ROA not before: Tue 28 Feb 2023 11:22:39 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:97:c2:9f:d1:c8:e7:8e:bc:71:14:e8:6b:64:ab:44:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Feb 28 11:22:39 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=652f7bd8f44986b2c600ffbe0f13e726f0e800fc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:ab:85:9c:22:54:55:a6:b3:e8:57:ad:24:1b:
fe:31:a3:b8:fe:95:88:e3:7b:84:a1:67:30:25:f5:
6d:a2:aa:99:b9:b7:5a:ca:48:12:85:dd:e7:b6:46:
72:05:7a:32:a2:c6:e3:1f:07:92:71:35:98:16:b2:
3d:4c:7b:95:57:18:3a:10:e5:1e:7a:10:02:f1:96:
40:6a:31:90:33:b0:38:21:9c:0e:06:4f:57:76:ec:
ea:7c:28:83:80:97:73:38:5f:b0:0c:5b:0a:6a:41:
34:f9:90:1c:18:f3:42:28:b3:26:99:bc:72:1b:a3:
c7:aa:6e:32:7e:ec:04:0e:6d:ea:90:7d:64:9d:26:
ce:c5:12:22:79:02:55:35:13:a6:44:50:9f:7c:bf:
8a:bf:82:59:73:0a:3d:b0:31:5e:74:31:00:10:ae:
74:26:19:b4:76:f3:ff:af:3c:c5:18:84:48:08:f3:
58:b3:f7:f3:d7:12:02:4c:79:cd:5b:5e:59:a5:64:
c1:09:fe:dc:fe:0c:ec:e5:86:a8:38:7f:57:ea:a5:
b3:f5:a7:83:1e:06:3d:6a:13:a7:93:91:08:f5:07:
4a:43:e7:d2:e3:f8:50:f7:69:28:c5:f7:29:ed:97:
5e:70:3a:7b:14:fd:b5:e7:23:fc:8c:a8:00:53:5b:
e9:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:2F:7B:D8:F4:49:86:B2:C6:00:FF:BE:0F:13:E7:26:F0:E8:00:FC
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/ZS972PRJhrLGAP--DxPnJvDoAPw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
25:df:c6:e4:53:09:56:5c:0d:05:a6:5a:66:43:3b:da:82:8b:
f8:c7:15:a8:bb:a5:2d:f0:ed:96:23:2e:cf:81:c8:71:25:11:
5f:7e:ee:ac:45:bc:b7:d9:2c:43:6f:b8:9d:77:e7:6e:a5:82:
c3:50:fa:e7:5f:19:3c:29:95:95:4b:40:b7:47:70:6b:21:7a:
20:2b:5b:44:7b:6d:68:3e:9b:30:71:19:bc:7a:49:db:2c:cd:
3c:c7:eb:b6:ac:e5:c1:d3:86:11:a8:b3:b5:52:03:1c:0a:68:
7c:15:89:f3:46:78:41:d9:9a:22:f0:52:f6:01:35:b4:d4:ba:
f2:5d:fe:7a:b9:74:d4:ee:b6:54:77:9e:8d:1b:0e:46:ea:03:
b5:0b:d0:2e:4a:16:cc:68:9a:57:a0:e6:25:bd:73:47:1e:aa:
4b:f0:63:ae:5b:2e:3f:db:98:82:77:8d:6d:47:db:41:aa:20:
24:60:67:a3:34:73:51:22:3d:bf:9b:6d:f2:93:4d:d5:df:56:
d5:81:4c:33:56:53:7b:b1:0e:c1:40:41:fa:a5:b1:b1:3b:aa:
d6:d6:bd:83:f1:83:1a:03:c5:86:10:da:24:1e:01:c3:de:cb:
d8:70:80:93:52:c1:fa:28:c8:bb:d3:41:bf:41:52:b7:d2:e9:
8f:d5:5c:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 21:26:44 2025 by rpki-client