Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/ZcGQatQ6AJ-EsYo0rfDTyI-y5KI.roa
File: ZcGQatQ6AJ-EsYo0rfDTyI-y5KI.roa (raw, json)
Hash identifier: S2vlkJsBxuqP+5DEiQxttJ9UPjEpAYcy373BKpr9uOk=
Subject key identifier: 65:C1:90:6A:D4:3A:00:9F:84:B1:8A:34:AD:F0:D3:C8:8F:B2:E4:A2
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0183A249C3A12964B5C8ECEB8D9C96F1E139
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/ZcGQatQ6AJ-EsYo0rfDTyI-y5KI.roa
Signing time: Tue 04 Oct 2022 09:18:06 +0000
ROA not before: Tue 04 Oct 2022 09:18:06 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:182:3f1d:a803/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:183:50b3:5643/128 maxlen: 128
2001:67c:64:ffff:0:183:5f81:ab13/128 maxlen: 128
2001:67c:64:ffff:0:182:7cb2:99d4/128 maxlen: 128
2001:67c:64:ffff:0:183:1279:659d/128 maxlen: 128
2001:67c:64:ffff:0:182:383f:6b78/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:a2:49:c3:a1:29:64:b5:c8:ec:eb:8d:9c:96:f1:e1:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Oct 4 09:18:06 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=65c1906ad43a009f84b18a34adf0d3c88fb2e4a2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:03:ed:dc:77:2b:3d:4b:54:e2:fd:0c:d6:73:
55:4f:f7:dd:91:2f:fe:7d:37:0e:2e:ce:f0:00:a4:
f9:1c:5f:ae:df:22:ab:82:35:12:54:3f:20:25:c6:
62:ce:48:30:c4:a0:8d:f7:7f:ba:f4:02:c4:66:3c:
b9:a4:61:8f:14:46:51:8a:ea:ad:8c:82:9f:da:ce:
b8:2c:05:c7:c2:1d:f6:63:02:db:36:eb:13:1d:de:
1b:84:16:53:9a:84:f3:17:bb:ef:e4:a9:f9:c9:a8:
f1:bd:1c:6c:0b:6f:7f:6e:0d:87:90:39:54:64:1b:
25:dc:ad:dc:43:aa:0c:41:7b:b7:b4:c2:58:1f:8d:
58:a4:71:49:5f:4b:ce:2a:0d:c3:0d:ba:5b:e2:81:
15:a1:b9:25:f5:23:2d:78:4e:27:ae:0e:d2:fd:ed:
df:58:56:44:f7:17:9c:cb:e0:70:e4:3d:56:50:77:
8f:4c:30:d8:0b:4f:95:6a:d8:9e:76:dd:53:06:2c:
c4:b2:55:84:95:70:63:ff:8d:33:35:26:a9:3f:45:
84:a8:47:80:4e:3d:fb:4c:9f:e0:ef:c1:2c:af:50:
6b:35:bf:89:8e:13:ab:bc:50:d5:f2:40:38:7f:0b:
94:54:5f:a6:67:e6:47:8f:4f:bd:ba:ce:a2:09:3a:
3a:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:C1:90:6A:D4:3A:00:9F:84:B1:8A:34:AD:F0:D3:C8:8F:B2:E4:A2
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/ZcGQatQ6AJ-EsYo0rfDTyI-y5KI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
a2:a3:9d:7f:cd:e2:cc:77:4d:27:18:eb:47:8d:f1:4c:8f:8b:
c5:41:ad:d3:15:08:5c:28:69:9f:04:9f:77:20:9d:db:b7:27:
74:62:2b:47:fb:b6:0f:09:25:f6:2a:d1:b8:30:e6:77:2a:ee:
e7:3d:19:80:63:71:1e:fb:19:a3:41:94:f2:fe:f1:ab:b3:5d:
51:ca:14:33:78:81:23:ac:0b:ce:fa:06:18:82:82:37:39:06:
5b:9a:f6:e7:13:54:08:09:19:c4:2e:9e:f7:8e:bd:0f:90:49:
9f:00:cd:b1:86:5b:b6:e1:64:a8:bc:bc:56:0f:44:ff:30:d8:
63:a7:ae:7d:94:7a:44:ab:ec:d5:4c:4b:3e:55:ae:4e:2a:14:
d5:02:2f:58:90:6d:df:da:cc:71:8a:6a:d0:b4:a4:f3:b4:45:
cd:a6:24:91:e3:35:34:33:ea:29:63:19:67:cc:97:9b:3c:29:
e0:85:40:32:a7:51:ef:ae:7b:b5:d3:8c:90:8d:e3:97:77:fe:
57:fd:1f:33:59:fe:46:47:f7:80:5b:eb:4e:6b:50:dc:77:48:
3d:ff:da:d5:f8:16:8d:09:f1:87:b9:9c:82:30:09:74:db:71:
ec:b6:73:5b:3f:56:be:cb:7b:f1:8b:be:37:03:2f:a1:3d:73:
8a:7b:b7:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 2 12:33:26 2025 by rpki-client