Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/ZUQwrEEHbw5rZ03QjEb2WRibbEo.roa
File: ZUQwrEEHbw5rZ03QjEb2WRibbEo.roa (raw, json)
Hash identifier: 8kfmeaoLalGlJlA9j3ZbnEqE9Ruu56cNInMl+DoLDkI=
Subject key identifier: 65:44:30:AC:41:07:6F:0E:6B:67:4D:D0:8C:46:F6:59:18:9B:6C:4A
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 01824E61BAA812137025305146E31CB3250D
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/ZUQwrEEHbw5rZ03QjEb2WRibbEo.roa
Signing time: Sat 30 Jul 2022 09:13:23 +0000
ROA not before: Sat 30 Jul 2022 09:13:23 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:182:3f1d:a803/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:182:383f:6b78/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:4e:61:ba:a8:12:13:70:25:30:51:46:e3:1c:b3:25:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Jul 30 09:13:23 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=654430ac41076f0e6b674dd08c46f659189b6c4a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:2f:b7:f7:53:47:df:83:86:f7:95:0c:26:86:
6a:ec:72:7b:11:3b:9b:e8:02:a4:7e:70:b0:bf:f7:
a4:91:92:52:ea:dd:95:ae:6d:59:f9:df:75:70:9c:
8a:08:db:7f:85:11:89:69:7e:e6:ba:e7:e9:be:1f:
d1:11:90:bd:dc:78:02:33:80:22:1f:54:9b:56:dd:
8d:d5:a1:c9:d9:b3:47:6a:6c:96:8b:a4:8c:4e:6e:
ce:ec:d5:4d:5d:66:2c:9f:12:49:7c:c1:e4:c6:fb:
94:25:7e:c4:64:2f:c2:a8:c7:8a:99:51:3b:7d:0f:
69:61:ee:01:35:49:d1:dc:be:99:2e:8f:7e:12:8b:
01:32:d0:12:c4:25:0d:97:20:83:4e:5c:7f:19:c5:
b1:35:b5:b3:bb:92:f1:d6:a8:fa:e9:b0:19:db:fe:
74:21:95:47:3f:38:15:5f:bf:49:08:e3:1d:43:01:
b8:02:b7:62:a0:14:1d:47:cc:40:f9:7c:68:66:a9:
d4:3d:15:59:23:82:1d:6b:25:c0:97:89:b5:29:ca:
d1:94:a1:6a:83:a7:3c:64:54:2b:d6:a2:34:88:64:
9c:19:e2:af:8e:1f:a1:cc:e6:fd:4c:e8:72:c0:5b:
d3:1f:c8:a8:b7:43:12:d1:3d:71:c9:f1:36:03:b8:
11:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:44:30:AC:41:07:6F:0E:6B:67:4D:D0:8C:46:F6:59:18:9B:6C:4A
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/ZUQwrEEHbw5rZ03QjEb2WRibbEo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
20:6b:65:64:7b:0c:90:4f:04:ee:c4:e5:14:7c:ef:96:62:b1:
26:d4:6a:b4:88:fc:b2:60:58:80:08:6a:d7:08:eb:db:50:17:
37:62:4d:2f:0a:60:f2:23:c0:1a:99:8d:d1:bd:de:24:57:59:
77:68:64:3b:50:26:84:12:0a:68:ff:d9:d2:f5:ed:53:aa:55:
13:58:54:89:cf:a5:28:fb:0a:a4:8e:e3:87:83:59:1c:85:00:
bd:64:5c:fe:0b:75:9f:ae:1a:51:2e:f7:4e:2e:a6:0e:a7:bc:
13:58:c1:2b:90:1d:ff:2e:27:40:08:55:ca:30:b3:06:09:e3:
ea:cd:54:3d:f2:55:23:39:8f:76:fb:d1:86:86:f4:82:a7:72:
e6:46:26:bc:af:6b:1a:59:81:b0:57:27:c9:84:f0:95:70:b3:
7e:16:67:dc:ba:aa:ff:5e:7e:c8:54:4b:2e:9e:31:07:8c:99:
0c:01:43:4e:96:ba:62:44:35:f8:c0:24:18:0b:6e:d5:57:9d:
8d:2c:06:d4:f5:c5:99:fb:54:f1:42:a1:36:86:e3:06:56:3d:
8e:d2:ab:7f:be:21:93:ef:ac:f8:ea:15:d5:de:e4:08:87:23:
1a:42:2c:73:46:f4:db:e2:dc:51:48:48:fb:66:1c:61:de:09:
92:27:ef:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 10:01:54 2025 by rpki-client