Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/Zsv_wl4eLgoUA6cZ068zYDgpeSI.roa
File: Zsv_wl4eLgoUA6cZ068zYDgpeSI.roa (raw, json)
Hash identifier: VCtYfCvlWVjbHoxfhqyO5SaVGopUQFfgdsIVZDKkW4Q=
Subject key identifier: 66:CB:FF:C2:5E:1E:2E:0A:14:03:A7:19:D3:AF:33:60:38:29:79:22
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 01864E56B5BC6E34D39D558209ABC065A33F
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/Zsv_wl4eLgoUA6cZ068zYDgpeSI.roa
Signing time: Tue 14 Feb 2023 05:12:30 +0000
ROA not before: Tue 14 Feb 2023 05:12:30 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:4e:56:b5:bc:6e:34:d3:9d:55:82:09:ab:c0:65:a3:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Feb 14 05:12:30 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=66cbffc25e1e2e0a1403a719d3af336038297922
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:de:f0:a6:ed:67:0d:31:82:47:b6:b8:d6:92:
b5:5b:80:56:32:89:8a:60:c0:88:af:6b:23:d0:eb:
a9:4d:96:01:d4:86:0e:35:45:0a:e0:ff:89:73:cd:
f6:a7:14:31:dd:4c:66:b8:b9:97:f9:63:7c:6b:f4:
98:43:34:af:90:2d:32:a9:31:72:98:73:63:8f:82:
4a:a7:8f:8a:98:25:38:4a:4c:10:82:2b:a2:6d:11:
59:61:d3:e7:3f:9c:d0:78:40:47:45:06:ba:6a:c2:
7a:2b:9e:65:b1:23:4a:ad:57:0d:24:8b:46:c2:87:
95:a4:53:f3:7d:03:2c:6d:ca:59:8e:fe:df:ff:59:
b5:e3:19:29:c3:95:69:9e:87:59:31:c2:c8:06:e5:
38:a5:43:c7:5b:00:2c:2f:0c:9d:dc:61:9d:d4:c2:
7d:df:da:eb:98:42:81:c0:e7:0c:f8:b0:4e:f3:15:
d1:a3:ce:55:7c:d5:84:e7:8a:12:3a:cf:75:bd:18:
1b:58:bf:b5:b6:b3:1f:8d:c2:b7:a6:73:f1:b9:79:
96:1a:84:5f:25:00:c6:02:e0:a6:30:28:1c:a5:31:
cf:a0:54:b2:b1:29:66:9a:c7:3b:25:c0:bf:0c:b3:
5b:35:27:81:8f:1c:08:d1:8c:45:a9:84:91:fc:b7:
54:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:CB:FF:C2:5E:1E:2E:0A:14:03:A7:19:D3:AF:33:60:38:29:79:22
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/Zsv_wl4eLgoUA6cZ068zYDgpeSI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
8e:fb:0b:37:16:41:86:7f:19:42:3e:2a:cf:28:e3:f5:b0:a5:
f0:b6:34:11:c5:6d:a3:fb:62:ad:b8:d8:5d:d9:39:76:66:03:
7b:aa:4d:7c:a6:ef:ce:ef:56:14:24:5f:e6:c0:08:03:c0:65:
e0:46:e2:18:33:42:72:76:30:bf:4a:cb:b7:23:3e:3b:20:d5:
12:80:44:29:1c:cd:79:6f:13:ab:63:bd:70:49:93:09:0a:43:
6d:09:e1:58:6d:35:c0:7b:58:4a:aa:67:66:a0:fe:6e:80:d6:
a0:c7:86:1f:b4:c6:45:77:fe:dd:aa:8c:43:46:4b:b8:5a:ba:
88:68:e5:62:d1:8d:9e:02:e7:24:89:d9:08:ef:e5:bc:db:fb:
f0:8f:81:54:26:eb:a6:a2:3f:b8:b8:53:f7:8c:fb:20:93:12:
11:08:20:77:9a:bb:91:10:34:01:c3:e8:3a:26:38:77:2b:1e:
be:06:a3:82:6f:f6:dc:99:d9:a8:f2:aa:9e:98:95:21:14:f3:
de:53:cc:85:b7:da:20:7b:66:d7:46:77:9e:4f:63:d2:81:2f:
2b:a9:d1:2d:b8:9d:a1:cf:3f:83:67:31:de:f5:79:14:63:94:
d7:55:13:89:90:e2:5c:f2:96:92:50:2b:a4:fb:cd:f4:11:9e:
a7:6b:bf:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 21:55:03 2025 by rpki-client