Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/Zepot-n_EvO-Q8vdv1Qf4zROJH8.roa
File: Zepot-n_EvO-Q8vdv1Qf4zROJH8.roa (raw, json)
Hash identifier: yRxGF5ZkmO7K8ImICXCtojd2b3NPWWXDGukeGNmX8mA=
Subject key identifier: 65:EA:68:B7:E9:FF:12:F3:BE:43:CB:DD:BF:54:1F:E3:34:4E:24:7F
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0187047D360F6F63A7414CF3D7AA310E76FA
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/Zepot-n_EvO-Q8vdv1Qf4zROJH8.roa
Signing time: Tue 21 Mar 2023 14:05:27 +0000
ROA not before: Tue 21 Mar 2023 14:05:27 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:187:47c:4fbc/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:04:7d:36:0f:6f:63:a7:41:4c:f3:d7:aa:31:0e:76:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Mar 21 14:05:27 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=65ea68b7e9ff12f3be43cbddbf541fe3344e247f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:93:37:36:de:d1:31:98:6c:37:48:ef:a7:90:
b8:fa:0b:83:38:d4:70:99:3e:d6:72:9e:f2:54:93:
5c:98:5f:76:9d:bc:b6:77:de:b4:2e:62:e5:12:2e:
c2:cf:85:1f:82:f0:f3:07:db:c0:84:e9:02:c4:c7:
0d:4c:39:ee:31:d3:46:63:fa:cc:80:26:77:e1:98:
8d:9c:51:90:2b:13:4e:80:3f:96:5f:71:8c:fe:72:
de:c3:b3:1b:52:b7:bb:dd:b2:d9:47:c7:6a:69:a7:
bf:55:d4:ad:33:57:88:e4:47:e5:98:67:9b:85:52:
4d:2f:c1:3a:d1:bd:0d:bc:49:74:65:2f:88:5a:30:
45:f9:40:9e:70:fc:18:d5:1b:a8:2f:81:a6:ee:a7:
37:94:40:97:94:a0:bf:82:3a:9f:79:ee:7d:51:f1:
38:ef:6c:21:16:91:d3:1c:08:99:04:c6:a4:fe:49:
1b:5f:8e:71:9c:df:56:7a:03:b5:bc:59:7a:3c:26:
e0:75:30:31:a5:73:93:3a:1b:4d:18:4a:b2:73:88:
3f:33:a5:6c:fe:95:a6:bc:55:60:14:26:79:a7:75:
ff:70:74:14:3b:3e:fe:e1:ef:bf:0c:d6:7b:0c:53:
ca:85:24:02:6c:23:39:05:d5:fb:1d:90:33:15:01:
64:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:EA:68:B7:E9:FF:12:F3:BE:43:CB:DD:BF:54:1F:E3:34:4E:24:7F
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/Zepot-n_EvO-Q8vdv1Qf4zROJH8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
aa:cd:69:45:c2:ed:8b:af:f6:83:6f:d4:af:c6:a7:cd:f2:a6:
6c:d4:ee:71:fa:25:bf:e7:72:36:e8:7e:22:7e:45:f3:7b:4d:
f8:12:cd:91:b6:b9:15:4b:13:92:5c:58:b9:39:8f:ed:63:02:
a1:91:84:03:65:ee:bc:77:2a:9c:bd:e7:2a:e0:26:d9:c4:67:
ab:29:05:b9:f7:33:79:a0:e9:fd:b0:e8:b9:c1:62:96:ed:e1:
c9:08:e1:2c:5d:89:4a:d1:4f:e3:aa:05:1e:99:11:d1:01:9a:
91:c9:63:d6:5a:14:58:4b:9d:d8:e2:3d:b6:cb:b0:dd:83:ca:
f0:a8:35:91:3f:99:a1:8b:36:9b:17:69:d9:32:99:8c:ff:2c:
8c:5c:b1:fe:23:e5:a5:6a:94:d2:15:6e:be:64:3a:1d:98:99:
a1:fb:a3:fb:21:a8:9e:68:48:6b:43:89:6c:ab:54:54:5d:74:
1e:db:86:f0:4e:8e:69:b6:fc:29:ee:36:bd:a1:cc:0e:d9:16:
e4:9f:75:12:de:22:e1:cc:a0:b4:6f:88:1f:7e:a7:72:b7:39:
db:fd:5e:64:5b:d2:96:f6:f9:a5:3c:a3:75:a2:b2:a6:ce:48:
9b:f5:f5:3d:2e:f5:aa:6c:33:27:54:0f:4d:87:a8:54:5b:2b:
75:01:47:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 2 04:46:33 2025 by rpki-client