Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cZrIAABOKU-KqazShb9jQf3pwB8.roa
File: cZrIAABOKU-KqazShb9jQf3pwB8.roa (raw, json)
Hash identifier: O4uwei1gHrAGIxCWT3uYfVUUE0EVgFvnq+0gL9cOjog=
Subject key identifier: 71:9A:C8:00:00:4E:29:4F:8A:A9:AC:D2:85:BF:63:41:FD:E9:C0:1F
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 018528CB610FDB602C30E038F5564C78EDD6
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cZrIAABOKU-KqazShb9jQf3pwB8.roa
Signing time: Mon 19 Dec 2022 05:11:35 +0000
ROA not before: Mon 19 Dec 2022 05:11:35 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:28:cb:61:0f:db:60:2c:30:e0:38:f5:56:4c:78:ed:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Dec 19 05:11:35 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=719ac800004e294f8aa9acd285bf6341fde9c01f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:c4:20:ad:28:86:a7:0a:0c:ad:a8:74:bd:0a:
1e:39:e2:7f:08:c2:bf:e3:c6:9e:1a:e2:0b:3b:30:
2a:cc:05:9c:19:bb:31:24:98:86:e5:6f:a0:a1:fc:
d3:c9:d3:7c:47:e7:50:0c:3b:cf:1e:7c:22:02:84:
9d:7b:a8:97:68:cd:9c:28:34:91:0c:bd:fc:36:ce:
12:5d:51:73:b8:e0:4d:3a:ca:c6:c1:4b:19:55:c1:
8b:e5:29:30:db:29:61:f8:f4:80:94:b3:b0:97:8a:
da:94:51:cf:23:dd:35:03:b7:1d:cf:dd:66:6b:be:
76:b1:60:b6:21:04:53:5f:52:dd:dd:10:bb:10:9f:
0d:60:e9:18:ad:05:3a:06:8c:f8:3e:1b:4c:59:13:
8d:c5:58:e2:b8:87:69:7b:1b:b2:60:b5:1f:b6:08:
65:11:cb:4d:03:74:62:23:21:47:ab:86:c2:f4:c6:
a1:e2:44:28:4e:45:e8:25:0a:4d:99:af:23:1e:f4:
97:40:a9:2d:cf:fd:d2:7f:f7:49:5b:2a:7b:36:3e:
6f:1b:b4:ae:a4:e4:ef:4a:4b:2e:b7:7a:fe:8d:0c:
07:e1:2f:ac:00:b5:ff:78:91:68:a5:9c:67:c9:40:
01:67:43:ae:b0:08:33:07:7a:78:a1:43:1c:38:41:
d1:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:9A:C8:00:00:4E:29:4F:8A:A9:AC:D2:85:BF:63:41:FD:E9:C0:1F
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cZrIAABOKU-KqazShb9jQf3pwB8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
27:dc:14:2c:34:17:5a:eb:78:c8:16:a4:dc:dc:b3:d3:e6:af:
46:41:ce:52:45:a8:49:3b:13:b4:9e:42:f4:3a:e8:1f:e6:08:
41:06:c5:36:e9:c4:44:88:63:6e:fe:99:9a:90:5e:f0:b7:14:
da:c6:7d:1f:54:5f:ad:06:5e:24:19:c2:88:d8:e7:86:66:99:
95:da:7c:dc:5c:3d:15:c6:70:9e:ea:32:9a:6f:6a:b4:76:96:
9f:dc:b5:4a:72:ca:36:da:c2:cb:9e:28:dc:e9:2d:40:38:c1:
99:45:08:4b:a5:a9:d8:bc:1c:0f:6e:5d:f2:5c:ac:17:e3:ae:
ee:db:2a:f5:3a:82:57:a7:47:8b:9a:68:07:93:cb:60:47:27:
69:dd:63:c7:32:ec:ac:8b:c9:8d:1e:19:4e:98:43:a0:e1:77:
2c:e5:af:c3:aa:82:3c:47:f8:0a:be:42:fb:3e:fd:f1:f2:ed:
d5:2f:af:bf:17:41:2a:3a:30:43:9b:6b:86:f4:ce:f6:2a:6e:
32:d3:b2:fe:eb:0d:0d:6b:38:65:67:7e:b2:53:ed:4f:6a:a7:
c5:75:ea:ab:15:d6:8c:19:39:55:45:a1:55:b2:96:a0:93:de:
41:25:32:e1:4e:f1:40:31:16:41:c6:0f:db:51:6a:af:f4:75:
af:4e:0d:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 00:41:29 2025 by rpki-client