Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/bZN7WSsjyzxzwy_2bkGE85PEi00.roa
File: bZN7WSsjyzxzwy_2bkGE85PEi00.roa (raw, json)
Hash identifier: vHUaZPMSFzc7vy0qpLFGlUztBPmM9RZy/IjZQym3up8=
Subject key identifier: 6D:93:7B:59:2B:23:CB:3C:73:C3:2F:F6:6E:41:84:F3:93:C4:8B:4D
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0182E53BAC2821E94059A4E13DEF65A86C6A
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/bZN7WSsjyzxzwy_2bkGE85PEi00.roa
Signing time: Sun 28 Aug 2022 16:14:29 +0000
ROA not before: Sun 28 Aug 2022 16:14:29 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:182:3f1d:a803/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:182:7cb2:99d4/128 maxlen: 128
2001:67c:64:ffff:0:182:383f:6b78/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:e5:3b:ac:28:21:e9:40:59:a4:e1:3d:ef:65:a8:6c:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Aug 28 16:14:29 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=6d937b592b23cb3c73c32ff66e4184f393c48b4d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:68:7f:42:95:cf:e1:f1:46:20:70:dd:c1:cd:
b7:90:00:94:77:3f:fc:3b:51:80:1d:d7:f8:41:ba:
27:59:fc:7d:56:05:78:97:1a:2d:ec:95:75:fc:a9:
97:c0:39:e0:4b:97:c8:08:62:a0:4d:a9:80:68:97:
37:39:4e:18:df:00:47:b8:17:bc:4a:ad:2b:e3:1f:
c2:a0:e0:90:b6:de:65:b6:da:b7:cc:da:75:5f:4b:
62:7c:d6:5d:b5:b9:8c:15:39:58:de:e8:13:a7:e0:
eb:85:7c:7e:08:99:e1:2e:67:98:e0:a8:51:30:f1:
cf:72:6a:60:8c:10:cb:99:af:9c:75:e0:3f:16:03:
7c:b1:f6:f3:e8:db:f3:b8:4f:8d:86:b2:0e:9c:2c:
32:68:88:21:8d:a7:46:8d:8f:f9:c9:fd:0a:89:2b:
15:51:c8:d0:e0:c1:2b:ef:9b:d8:14:3f:fb:e2:fb:
55:80:f4:2d:a7:80:78:61:bc:70:df:df:cb:35:79:
6c:2d:02:87:4c:56:08:30:0e:6d:4c:0e:70:e7:b0:
60:f7:d4:07:7f:58:65:8c:4b:6c:6f:93:4f:6f:e7:
c6:c7:8d:ea:20:23:41:31:44:4d:60:bd:4a:e2:25:
c1:49:9f:e2:65:d0:5e:a5:1a:dd:7b:3c:1c:ff:7b:
f9:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:93:7B:59:2B:23:CB:3C:73:C3:2F:F6:6E:41:84:F3:93:C4:8B:4D
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/bZN7WSsjyzxzwy_2bkGE85PEi00.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
20:25:f8:00:f3:03:0c:a5:b5:4d:49:40:87:cc:24:d4:01:fd:
63:cc:d6:97:1a:9d:8a:65:4b:a8:75:bc:10:9e:91:12:74:48:
ff:49:30:34:7f:85:e6:fb:cb:95:66:74:f4:39:7c:a2:52:48:
dc:c3:0d:55:b7:32:55:65:b7:d5:13:6a:32:07:bf:ad:0b:59:
1a:25:cb:8a:e6:ea:ca:c2:69:9d:b1:32:67:82:1a:f9:1a:00:
e7:59:e0:40:9d:d4:f0:f5:1f:34:21:63:44:a7:5d:4c:94:f2:
71:f4:76:3b:a1:7d:15:fb:47:45:fc:ee:d8:01:b0:c0:af:3c:
14:32:ce:e7:9a:b2:05:3a:72:d7:5a:46:2b:dd:00:ae:2b:d9:
c9:12:ff:1c:7a:d1:cf:e8:3b:e9:f7:a6:85:36:5d:ab:19:af:
dc:3b:1d:d5:91:e7:64:e9:87:1c:b8:4a:e2:3f:05:3f:85:b5:
2d:9d:30:94:5d:0f:ce:ae:e2:29:d5:e1:04:14:6b:69:a5:45:
ac:e4:2b:8c:e9:db:7b:a6:70:13:e6:03:f3:cb:54:25:24:05:
64:cb:a0:d8:e6:01:00:fc:d2:88:ef:69:5f:b5:42:7a:5d:be:
a9:3d:01:60:b6:3d:96:52:64:c5:6f:87:f7:66:a1:c9:7c:6d:
ad:22:7d:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 4 05:37:22 2025 by rpki-client