Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/ZVAnDfs4bl1kwRtTukLRLQuBhNc.roa
File: ZVAnDfs4bl1kwRtTukLRLQuBhNc.roa (raw, json)
Hash identifier: gic1/aD33zXc8a/agSbwKCkxWqEL1fW3kOcTB6x+GZc=
Subject key identifier: 65:50:27:0D:FB:38:6E:5D:64:C1:1B:53:BA:42:D1:2D:0B:81:84:D7
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0182230C46E7B498EC9B811EAD9A0BC92A4F
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/ZVAnDfs4bl1kwRtTukLRLQuBhNc.roa
Signing time: Thu 21 Jul 2022 23:16:23 +0000
ROA not before: Thu 21 Jul 2022 23:16:23 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:23:0c:46:e7:b4:98:ec:9b:81:1e:ad:9a:0b:c9:2a:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Jul 21 23:16:23 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=6550270dfb386e5d64c11b53ba42d12d0b8184d7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:3f:d4:38:88:43:6e:8e:a1:35:1e:51:21:ff:
6e:52:1c:c2:61:e9:c7:ef:e0:0b:70:cb:88:e9:48:
75:6b:36:e6:a9:93:a4:22:4f:e5:47:b6:7d:53:25:
df:b0:f3:25:41:45:35:ca:0f:34:c5:3e:9d:b4:12:
64:65:33:1f:81:05:69:61:35:20:b2:eb:0f:6d:50:
2f:54:8b:27:39:4e:49:37:21:7c:4c:65:2c:2d:36:
cf:84:b9:7f:8c:92:9c:0c:6b:a3:d6:0a:61:d1:30:
d9:af:ef:e4:8f:eb:63:c4:73:d0:4a:fd:d7:66:51:
ea:d0:bd:7c:e0:0d:8f:53:7a:7c:55:d5:bb:b9:c6:
75:38:f7:6c:e0:51:22:2d:00:b6:19:c7:46:3f:f4:
cf:ef:26:c6:49:60:36:75:ef:ec:c7:72:67:c3:57:
50:69:ff:37:ad:0e:21:f2:ae:3c:ef:1b:4d:90:14:
61:ae:6d:89:03:15:98:16:f4:08:63:4f:55:c9:a2:
2b:bf:a6:96:45:11:f1:32:14:fd:84:63:f0:40:96:
45:c1:41:c4:a6:4b:4c:a0:f3:fa:13:de:05:ed:88:
57:9b:b3:60:bc:e0:54:1c:a7:5e:70:bc:db:e8:9f:
70:61:06:09:cc:a9:c2:ff:38:ce:bb:59:cc:64:ae:
be:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:50:27:0D:FB:38:6E:5D:64:C1:1B:53:BA:42:D1:2D:0B:81:84:D7
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/ZVAnDfs4bl1kwRtTukLRLQuBhNc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
a5:87:dd:6e:ad:30:fc:47:cd:c5:bc:a6:02:83:66:a2:7c:23:
26:5d:a9:92:e5:96:4b:c4:ba:2b:f0:32:6e:2f:59:f5:c4:10:
d3:07:f1:7b:e4:22:b5:4d:57:d5:5b:61:d4:0e:e5:0e:62:53:
a8:44:da:0e:02:78:94:bc:4a:08:f3:01:87:0a:e6:4d:2e:ca:
9d:98:4b:4a:ec:64:17:b6:81:c1:87:7c:38:29:0b:73:8e:a0:
73:2f:7b:49:a4:6b:62:34:55:4e:dc:96:0e:bf:42:5f:58:9d:
d5:72:a0:e0:9c:b1:e8:35:71:62:89:df:39:e8:93:e5:67:ff:
f3:2e:fa:2e:d2:b3:ad:a2:5e:c4:ac:af:21:aa:6b:7e:51:50:
91:2f:c2:e8:89:a9:ed:6d:f2:f2:e0:fa:e6:ae:ea:82:4a:38:
bd:c1:a1:3e:05:a9:6e:2f:96:1d:37:1b:72:a2:95:6e:42:9b:
e2:b7:46:10:fa:7b:bb:08:a5:4f:bb:42:19:07:c4:13:00:b1:
c1:6d:cf:e2:f8:a6:f8:b3:92:95:49:50:52:a2:34:7b:30:32:
6b:9d:30:8d:63:16:a3:3f:85:9c:5b:f2:c0:cc:b2:f8:bc:a3:
d0:82:fe:3f:7b:c4:b3:7f:ed:7c:a3:70:b2:95:34:e5:ed:e7:
8b:cc:50:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 17:40:47 2025 by rpki-client