Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/sznpMUI4H5xnZ2YT9KSESzMMHKo.roa
File: sznpMUI4H5xnZ2YT9KSESzMMHKo.roa (raw, json)
Hash identifier: EnCeyYu1S+/gFMQWkfeELSP+ZBYA/d2iW3uAJ4+5Wzk=
Subject key identifier: B3:39:E9:31:42:38:1F:9C:67:67:66:13:F4:A4:84:4B:33:0C:1C:AA
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 018418B94834D93092F8AC6A392004A760FA
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/sznpMUI4H5xnZ2YT9KSESzMMHKo.roa
Signing time: Thu 27 Oct 2022 09:15:06 +0000
ROA not before: Thu 27 Oct 2022 09:15:06 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:18:b9:48:34:d9:30:92:f8:ac:6a:39:20:04:a7:60:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Oct 27 09:15:06 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=b339e93142381f9c67676613f4a4844b330c1caa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:66:64:df:4c:8f:1d:7a:b4:e3:8b:83:ef:38:
18:68:0c:35:57:da:10:a5:0a:5f:a0:a4:20:47:89:
a1:4c:63:8d:44:54:e5:73:68:44:97:19:54:1b:87:
d0:33:3e:80:9e:cf:13:d3:48:af:49:36:59:9b:6d:
a5:ad:2d:b1:e5:dd:5c:53:af:b3:3e:e6:1c:ce:8c:
b2:18:28:46:ef:c1:71:98:fd:46:d6:50:44:3a:cb:
79:22:81:0d:31:ad:fa:63:34:11:2c:d3:aa:47:19:
4b:98:7a:1f:c5:b1:5d:45:4d:4c:67:d7:e7:40:5c:
ef:df:f7:94:8d:38:4e:3f:a6:17:43:a0:b0:9d:c8:
02:8e:22:9e:6e:1a:a6:c8:5f:ca:17:42:06:74:48:
5f:f5:76:91:11:35:4f:6d:c8:57:b6:07:d5:c5:a8:
3e:20:13:0b:35:9e:bb:52:1e:3d:40:1c:fa:5b:ca:
e7:99:cf:86:19:de:f2:e0:fa:0d:a5:6b:cc:8f:67:
d7:6b:4b:aa:de:75:c4:07:5a:96:7f:58:72:5a:82:
80:ef:a4:1c:bf:ec:56:f0:96:b1:1d:12:5b:0f:09:
ef:fa:70:aa:76:60:08:7a:69:8b:a9:29:61:06:b7:
da:f9:c6:ee:18:70:75:cf:bf:f4:5f:5b:69:22:0a:
f0:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:39:E9:31:42:38:1F:9C:67:67:66:13:F4:A4:84:4B:33:0C:1C:AA
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/sznpMUI4H5xnZ2YT9KSESzMMHKo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
4c:3d:23:8d:16:2d:56:8a:d8:9d:07:1b:20:58:03:a1:1e:ac:
8f:09:28:a4:69:e2:04:e5:aa:ee:02:5d:7d:61:b1:cf:22:57:
ea:7d:6c:7e:27:6d:1c:27:c7:66:53:35:b1:4c:e8:50:b1:7d:
51:ac:d4:c1:4c:c2:bc:7a:89:eb:27:a6:5d:4d:25:bb:b9:7b:
04:24:8a:50:7b:42:4a:92:3a:85:1a:77:51:ed:fe:42:c0:9b:
1b:3d:e0:20:41:ef:f6:ed:a2:17:11:da:ec:24:a5:16:9d:14:
80:36:03:56:08:a7:68:e0:d3:c6:d1:ec:a1:8a:16:15:bd:c0:
31:4f:83:0d:f1:af:50:bb:b2:ea:d5:89:83:15:a7:1c:2f:1a:
5a:2f:61:5c:8f:81:4f:7d:78:cf:ec:db:b9:26:81:82:c4:8f:
51:d2:61:fd:74:f3:64:7c:67:32:dc:26:86:a3:5b:df:07:d9:
bc:2f:74:e8:db:b4:bd:cd:97:83:c3:58:9d:1c:ed:1a:53:bf:
5d:45:7a:0e:e8:cf:63:dc:e3:54:eb:0a:81:77:6f:43:2e:6e:
8b:70:75:da:67:e0:fb:08:35:bc:84:b9:40:f1:92:ef:bf:df:
3c:ec:6b:b9:9b:a1:c6:75:01:c5:8f:f4:cf:3f:e7:b8:89:d5:
50:2b:5c:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 04:28:48 2025 by rpki-client