Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/_zHh1eyOO_1dTvUTJIXwq8-1SVI.roa
File: _zHh1eyOO_1dTvUTJIXwq8-1SVI.roa (raw, json)
Hash identifier: QwpJHx3GfG4mpSh+XlmsrUNUtjJsrTPfLd0e7hcx8os=
Subject key identifier: FF:31:E1:D5:EC:8E:3B:FD:5D:4E:F5:13:24:85:F0:AB:CF:B5:49:52
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 01855CB6308E4C1761C3AC801C1117179ABB
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/_zHh1eyOO_1dTvUTJIXwq8-1SVI.roa
Signing time: Thu 29 Dec 2022 07:08:41 +0000
ROA not before: Thu 29 Dec 2022 07:08:41 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:185:3dcc:d8f/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:5c:b6:30:8e:4c:17:61:c3:ac:80:1c:11:17:17:9a:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Dec 29 07:08:41 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=ff31e1d5ec8e3bfd5d4ef5132485f0abcfb54952
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:76:52:1e:5c:6e:7e:e4:03:18:d0:a5:e0:6b:
8b:e0:60:64:72:bd:6d:37:0e:ea:1e:3e:bb:1d:91:
c1:79:0a:dc:10:1d:6b:46:d4:bf:24:d9:dc:81:b5:
06:6d:a5:4d:a5:f2:5c:98:f3:94:a8:c3:51:63:68:
aa:64:f7:58:21:3e:30:e3:6b:8c:77:ac:11:82:2f:
18:63:80:f8:c5:d1:4c:5f:51:09:14:d8:fb:42:9b:
74:42:ec:fa:4a:62:4d:2e:39:af:22:59:10:6d:cf:
32:e6:da:6c:6d:26:78:c2:54:65:d2:80:17:28:25:
4f:aa:6e:36:b0:e2:6f:43:0d:c1:97:e1:5a:f3:3c:
a8:d9:c2:aa:db:77:37:b2:52:6f:66:ca:82:e4:13:
df:a3:8a:e9:b9:f3:bd:b9:a0:62:6b:a4:7e:8a:ad:
a4:00:44:d3:c9:90:d7:98:33:f5:f2:b8:2c:db:0b:
16:da:2f:29:62:29:a8:e4:14:88:84:c4:b0:5b:cf:
6c:a9:5f:d5:e7:ea:6b:40:44:fd:3e:5c:15:dc:ac:
4f:e0:43:94:57:76:b3:c1:ca:3a:66:54:ac:c9:9d:
74:16:43:32:57:7c:d1:e4:84:a7:01:45:98:17:f5:
01:55:64:14:64:69:a6:84:e5:15:e0:a5:f2:57:ad:
d7:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:31:E1:D5:EC:8E:3B:FD:5D:4E:F5:13:24:85:F0:AB:CF:B5:49:52
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/_zHh1eyOO_1dTvUTJIXwq8-1SVI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
9b:eb:f0:02:57:60:c3:3d:d9:50:2a:6a:92:8b:87:73:c7:7d:
1e:aa:6a:a9:33:f8:0f:8e:37:6f:7e:25:0b:f7:94:89:43:9d:
0c:2a:a4:27:a1:3f:ef:9c:15:c7:f1:fa:21:ec:41:32:11:6d:
d5:d4:dc:10:16:c7:df:5c:6f:c3:0c:8f:1d:03:b1:bf:a9:5a:
e0:14:bd:f3:19:cb:23:f8:03:30:72:f5:5d:8b:3c:6f:32:a0:
92:d5:c8:7c:c2:66:61:53:80:f0:fb:58:07:1f:d1:87:54:1e:
a6:4d:17:dd:2f:09:ee:8b:42:52:d1:03:08:38:a0:ee:ba:ed:
19:14:49:23:bb:be:d6:10:d9:c1:58:4c:a0:92:f0:50:7a:60:
f2:9d:e7:f1:d9:a4:5c:64:96:19:86:79:45:dc:5a:c7:b1:5a:
e1:da:60:7d:c1:ae:ca:ce:85:aa:ae:e9:7a:d8:20:dd:62:96:
e0:71:33:7b:d3:ae:69:09:83:7c:fa:ee:74:b2:41:ab:bb:79:
8e:6a:58:db:25:e4:0f:70:83:38:16:34:44:b2:36:81:21:e0:
45:eb:ed:07:42:b5:6e:2c:6e:77:1c:ec:9a:42:32:f0:70:cb:
e8:d9:42:b3:cd:b7:c9:f0:13:fd:ab:d4:11:99:62:89:b5:8d:
85:e7:4d:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 06:07:52 2025 by rpki-client