Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/z3E_idEcJKmA_2TO-AQbHiOxH_Q.roa
File: z3E_idEcJKmA_2TO-AQbHiOxH_Q.roa (raw, json)
Hash identifier: NRxlneXD3uvnKkBbp8E1JTeHuQ3gaKWMUp/LYXEc7Pc=
Subject key identifier: CF:71:3F:89:D1:1C:24:A9:80:FF:64:CE:F8:04:1B:1E:23:B1:1F:F4
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0187402EB213579B635F63B5A4964F7FE7E0
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/z3E_idEcJKmA_2TO-AQbHiOxH_Q.roa
Signing time: Sun 02 Apr 2023 04:16:54 +0000
ROA not before: Sun 02 Apr 2023 04:16:54 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:40:2e:b2:13:57:9b:63:5f:63:b5:a4:96:4f:7f:e7:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Apr 2 04:16:54 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=cf713f89d11c24a980ff64cef8041b1e23b11ff4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:36:18:ee:97:de:87:3e:65:dd:cd:0e:74:ac:
8d:96:69:9e:ff:c0:73:88:8d:a8:b2:f5:3c:f2:58:
0a:5d:ae:89:e3:d5:dd:12:e5:78:61:50:ec:42:8f:
99:b1:9c:4b:c9:37:d2:42:24:53:4c:68:5d:a5:dd:
1a:32:9f:df:ce:4e:8f:55:d9:b4:48:16:34:2d:0d:
36:72:cc:14:29:6a:21:76:d3:f6:12:bd:b0:5a:6a:
84:ae:e0:c7:3b:c9:8a:d0:10:58:63:b6:7c:0a:83:
f5:5d:93:37:f0:cc:da:e9:d2:c2:de:21:14:47:ec:
cf:1b:f4:b3:d2:d3:65:0f:2c:63:31:a5:e9:cc:57:
8f:77:58:34:b6:d2:e5:d0:c8:5b:87:7b:33:a4:c1:
ff:96:72:ed:aa:bb:dc:40:38:7f:c1:d7:ec:5d:6c:
70:c8:c2:ff:2d:d7:57:80:ff:3d:85:70:92:70:8d:
27:c1:49:d5:62:e2:a1:ef:2c:eb:56:7c:95:68:1c:
03:85:31:35:ec:d6:35:b4:5c:ee:76:5a:93:65:fa:
3b:a8:04:41:4a:76:9f:06:4c:07:70:01:b8:fc:cc:
f4:7c:45:e5:b4:8c:bf:1e:44:ed:82:96:99:78:98:
a0:a8:b0:83:28:00:21:07:17:ff:5d:5d:4a:33:d4:
8e:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:71:3F:89:D1:1C:24:A9:80:FF:64:CE:F8:04:1B:1E:23:B1:1F:F4
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/z3E_idEcJKmA_2TO-AQbHiOxH_Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
67:44:91:04:f0:39:69:b9:b8:0f:ce:1b:de:de:e7:ab:a2:47:
bc:5b:39:91:a3:64:26:d8:06:01:36:98:54:93:89:3b:d2:56:
88:39:0e:8d:b5:46:2d:9e:88:51:49:06:04:97:eb:bf:aa:e2:
41:b1:56:e8:38:4c:a9:3f:13:0e:fb:81:98:be:f9:7b:cb:e0:
17:d8:ae:90:6b:51:d1:f5:ae:aa:03:23:c9:bf:15:52:6a:0e:
4c:a7:fd:53:65:49:9f:77:43:fa:ce:5c:30:5f:f3:7f:2e:b5:
a9:38:83:72:1c:23:f2:8c:f0:93:3b:7a:28:28:8c:cb:d7:d6:
bb:7f:2d:97:69:4e:78:5e:78:a1:2a:48:9f:18:c2:4b:07:43:
04:0a:bd:39:99:1f:96:05:47:75:ba:3e:4a:21:b5:a6:dd:10:
22:fd:61:75:2e:0d:ee:07:ec:7c:6c:0b:19:1d:08:2f:9a:ba:
87:64:b8:45:db:e7:de:cb:b7:90:10:23:c5:63:54:54:5d:25:
21:fb:c5:90:a4:4c:89:48:82:1d:9e:31:0e:1e:b0:b4:b3:76:
45:b9:44:6d:4e:74:06:d4:32:79:cb:aa:1b:6e:29:69:b2:bd:
ad:4a:cc:53:60:2f:8d:94:ef:a0:a3:f5:dd:90:26:b1:7c:1a:
bf:9f:95:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 20:11:17 2025 by rpki-client