Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/ZX-6jdFTD0v6gJVTxwUSdFmc8Gs.roa
File: ZX-6jdFTD0v6gJVTxwUSdFmc8Gs.roa (raw, json)
Hash identifier: t1aNGUFWg9NCQHo7/xSN15rE8i6TL8pwgbfRgtgZ1X8=
Subject key identifier: 65:7F:BA:8D:D1:53:0F:4B:FA:80:95:53:C7:05:12:74:59:9C:F0:6B
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 01897A4BFA0341A4938CB80D2C62D088B4EC
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/ZX-6jdFTD0v6gJVTxwUSdFmc8Gs.roa
Signing time: Fri 21 Jul 2023 21:12:26 +0000
ROA not before: Fri 21 Jul 2023 21:12:26 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:188:5fe2:b396/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:187:4695:a68a/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:188:7858:a003/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64:ffff:0:187:fa9a:b088/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:187:b2b8:a7dd/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:7a:4b:fa:03:41:a4:93:8c:b8:0d:2c:62:d0:88:b4:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Jul 21 21:12:26 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=657fba8dd1530f4bfa809553c7051274599cf06b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:2e:af:e6:0a:4f:9c:e0:4c:1f:a5:a9:e5:79:
4e:32:ba:48:c0:6b:db:46:b7:2e:aa:d0:bb:e0:c3:
30:c7:6d:48:39:47:8b:a2:b1:62:86:b6:b6:3f:80:
14:73:f8:a3:ae:4a:d2:12:62:2f:dc:8d:f8:ba:17:
c3:f3:d8:32:86:54:4f:cc:d7:3d:08:9d:69:c7:8e:
cc:08:1d:cb:2a:9f:81:84:cb:b8:a4:c2:e5:e8:03:
80:8f:60:bf:18:c0:66:13:20:6c:ac:10:f0:a5:bb:
21:0d:df:32:83:b8:a9:21:1a:09:cf:b8:ad:38:e7:
7e:54:4c:0f:44:e0:aa:af:06:ff:e6:b3:63:e8:f2:
03:0b:da:c2:01:27:1f:0c:34:8f:e9:ce:1c:cd:3b:
ac:78:65:52:c8:93:70:0a:7f:c0:2a:ae:54:a1:e9:
41:0b:8f:b2:d3:84:20:92:20:f4:9c:42:da:50:2b:
fd:d2:dd:cb:79:d7:35:4d:77:8e:f9:f2:36:35:e9:
af:ec:bb:de:a4:08:c7:71:76:8a:c0:85:7d:e4:3c:
85:b3:39:4c:81:20:58:6e:25:1d:88:d0:05:55:2e:
ed:92:17:ae:82:a7:1c:3a:ee:f9:95:89:bd:16:44:
be:ae:7c:ca:1e:9f:0a:92:32:2d:b0:d3:b9:24:e1:
0d:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:7F:BA:8D:D1:53:0F:4B:FA:80:95:53:C7:05:12:74:59:9C:F0:6B
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/ZX-6jdFTD0v6gJVTxwUSdFmc8Gs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
75:39:87:ac:95:fa:dd:5d:5e:ea:42:24:f5:92:f3:b7:ff:26:
7f:07:d7:75:9e:66:44:1e:04:60:bf:4b:72:71:56:6f:da:53:
f4:b1:98:0d:c2:69:36:4f:3f:cb:d4:ec:9b:49:0d:1f:7c:a9:
9c:2d:6b:0f:bd:a5:12:f3:a0:8b:1d:95:b0:71:f3:ae:db:81:
19:4b:d3:f6:af:78:b9:74:3e:b0:ba:35:7e:4c:79:43:1c:11:
f1:14:45:0f:26:d1:37:63:15:a3:60:e7:7a:91:92:6e:fb:1f:
36:b7:7c:a9:ee:6e:42:b7:5c:0f:eb:d6:f0:95:be:2e:e7:3a:
7e:fe:9d:0f:66:ec:40:aa:aa:a9:9b:6a:52:59:ee:2e:71:4f:
ba:a8:d8:76:a2:72:8f:6d:a1:8a:66:11:a7:b9:15:65:ef:a7:
f6:81:91:04:c0:4b:94:5a:8e:27:39:76:35:66:74:e0:ff:3b:
e9:bd:d4:24:ca:b5:2d:25:90:31:d4:44:4f:1f:14:7c:59:d8:
ab:ac:d8:4b:5e:f0:bf:3f:20:b2:5e:e8:50:b9:9f:ca:b0:78:
3d:71:ad:41:e8:72:55:f9:b5:c1:16:ad:35:6e:3d:2d:69:39:
05:c3:a8:c0:d3:11:10:fe:8d:fd:10:b0:10:6b:78:67:b7:b3:
27:d2:16:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 22:56:26 2025 by rpki-client