Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/tz5Za_1ZWZTX5zSTEvUaAgFl-Y0.roa
File: tz5Za_1ZWZTX5zSTEvUaAgFl-Y0.roa (raw, json)
Hash identifier: Ch1dxjupRCTp3TeNhyQqhP7jUR0rxEAC2cRJrQORE4s=
Subject key identifier: B7:3E:59:6B:FD:59:59:94:D7:E7:34:93:12:F5:1A:02:01:65:F9:8D
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 01832FED9835BBEC7BD6435B8A89E040E897
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/tz5Za_1ZWZTX5zSTEvUaAgFl-Y0.roa
Signing time: Mon 12 Sep 2022 04:20:43 +0000
ROA not before: Mon 12 Sep 2022 04:20:43 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:182:3f1d:a803/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:182:7cb2:99d4/128 maxlen: 128
2001:67c:64:ffff:0:183:1279:659d/128 maxlen: 128
2001:67c:64:ffff:0:182:383f:6b78/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:2f:ed:98:35:bb:ec:7b:d6:43:5b:8a:89:e0:40:e8:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Sep 12 04:20:43 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=b73e596bfd595994d7e7349312f51a020165f98d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:e6:ac:92:93:78:05:b6:46:68:78:f3:14:36:
2b:aa:de:1c:55:6f:1f:52:dd:e5:70:d5:d3:ad:61:
27:86:b4:e1:e0:14:ae:3d:49:c4:e0:62:72:c7:a3:
13:89:32:58:a9:7c:ed:cb:9c:8c:e2:ca:8c:49:2d:
07:f2:44:9c:68:91:f5:44:9c:48:79:47:d3:94:b2:
47:9a:12:cb:15:dc:d6:4d:07:b0:1c:70:b8:85:02:
7b:f4:9c:79:03:62:a8:b9:bc:79:c9:50:b1:61:24:
66:72:b4:ed:6d:5c:c0:dc:8d:af:45:e2:d6:df:06:
82:ac:03:7e:54:2e:13:24:33:b4:2f:89:7f:f1:30:
42:59:50:75:28:0c:b4:5f:59:2b:15:a8:89:16:76:
20:e0:a4:11:d5:54:2a:71:22:f7:a9:89:64:c2:fb:
f1:96:6e:b7:c6:a5:de:16:d7:6c:8e:da:c5:2e:c7:
51:31:62:00:df:cb:d4:95:1a:1d:05:5e:49:cf:07:
b0:a2:12:6a:9e:4a:1e:00:7a:cd:59:74:fa:2d:91:
a7:0d:7f:c6:d1:96:ec:9b:50:87:ad:9b:e1:c0:59:
36:bb:4f:40:ca:ae:14:c4:79:b2:ff:08:2d:82:ef:
40:c2:ef:a8:c5:d4:49:94:b8:c8:73:d5:11:62:71:
2f:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:3E:59:6B:FD:59:59:94:D7:E7:34:93:12:F5:1A:02:01:65:F9:8D
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/tz5Za_1ZWZTX5zSTEvUaAgFl-Y0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
5c:7f:2c:91:96:6c:e1:45:a9:c1:2e:b1:d2:f7:68:df:24:db:
8a:eb:48:ee:0c:d1:c6:6b:cf:25:f0:3b:e0:f7:0e:62:b2:50:
de:a0:6a:bf:0a:9d:ec:d0:b7:d4:7e:2e:de:d4:ea:b2:a8:dd:
cf:be:3e:26:5f:45:89:90:63:d6:8b:e3:04:7f:3f:51:97:96:
e2:1c:0c:8d:60:c4:71:b1:1c:a7:79:62:17:28:dc:1a:39:04:
4b:6e:30:9a:dd:9e:d0:21:9d:de:c1:c3:18:e7:a9:5b:18:5a:
7f:ec:1a:df:9c:54:9c:3a:41:7f:83:71:40:7f:13:66:bf:1b:
29:f5:30:89:4a:cf:f0:75:b7:96:23:d7:41:fd:6e:75:36:dd:
ff:ca:bd:42:d5:ac:7e:25:e2:6e:67:5d:b6:ab:b6:75:6c:74:
41:8b:dc:0b:4c:3e:7e:55:40:33:9e:95:e0:30:cb:a2:2c:3d:
cc:f3:ec:12:73:7f:c7:c6:b9:b6:ff:13:15:9f:b3:4c:de:23:
82:72:7c:51:c8:3f:cd:72:bc:ea:8d:dc:3c:9a:a8:27:a2:5f:
72:24:76:6e:11:7f:a3:64:ba:67:41:c1:35:08:e4:57:2f:21:
83:4d:8e:54:73:64:04:1c:d2:ea:41:65:94:3d:de:bd:5a:00:
95:98:db:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 14:53:34 2025 by rpki-client