Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/zEewn-RgY7FVjupC_vjd-GYHZeQ.roa
File: zEewn-RgY7FVjupC_vjd-GYHZeQ.roa (raw, json)
Hash identifier: uXBJq2bsLgukYMUm2M9lp3kuTlD4y5iDbrwe/KRqZfM=
Subject key identifier: CC:47:B0:9F:E4:60:63:B1:55:8E:EA:42:FE:F8:DD:F8:66:07:65:E4
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 721FBB64
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/zEewn-RgY7FVjupC_vjd-GYHZeQ.roa
Signing time: Sun 13 Mar 2022 07:09:42 +0000
ROA not before: Sun 13 Mar 2022 07:09:42 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:17f:1bf4:40b5/128 maxlen: 128
2001:67c:64:ffff:0:17f:20ac:a2bd/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1914682212 (0x721fbb64)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Mar 13 07:09:42 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=cc47b09fe46063b1558eea42fef8ddf8660765e4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:f5:8e:93:28:9d:ea:d7:c3:5b:50:77:f4:66:
35:c2:11:0a:81:3f:e1:9a:27:b0:ce:ae:44:5b:32:
9c:ef:d9:65:78:2d:14:2f:f3:d5:04:e7:68:6b:a9:
c3:59:da:94:7c:7b:c3:b3:72:71:1b:5d:98:5a:f2:
b5:93:39:f8:ba:4c:6a:0d:f4:4d:c2:fc:98:c3:2d:
be:d8:2c:22:4d:16:c0:90:f9:b0:e0:2b:22:15:83:
90:e2:37:0f:7f:ce:34:17:21:de:f3:7e:82:15:27:
0c:34:22:d2:f4:bc:cd:3b:5d:f9:15:c3:3f:00:ae:
cf:1b:24:56:64:6d:8d:27:56:59:54:88:36:46:4e:
3f:70:de:e9:54:fc:df:48:a2:54:e9:dd:33:f2:12:
46:c6:f6:59:89:f2:0c:26:0e:13:69:f9:fb:21:59:
2d:6d:b3:25:7b:01:44:05:87:f9:68:58:ec:37:6e:
02:bc:6e:cb:13:c4:f4:d0:da:e9:77:c0:fc:f8:40:
e2:58:ab:d2:d0:47:10:e4:9b:15:e0:c0:1c:cf:21:
4f:70:0a:46:66:cd:c7:10:f6:20:f4:8c:9a:3e:0d:
9a:db:66:95:fe:b5:b7:f3:e1:66:17:3c:54:19:88:
d8:09:aa:92:de:84:40:51:f7:83:18:61:9e:f5:7a:
ec:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:47:B0:9F:E4:60:63:B1:55:8E:EA:42:FE:F8:DD:F8:66:07:65:E4
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/zEewn-RgY7FVjupC_vjd-GYHZeQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
9d:ed:19:e5:e8:42:18:8f:3a:ef:d1:72:2b:5a:76:12:ab:59:
3b:6b:2e:e8:53:c2:c8:eb:2b:1d:72:0d:a7:15:77:4f:cc:6b:
d3:82:ab:95:ea:b6:5f:e8:af:e0:f0:e8:26:fc:89:0c:86:d3:
31:17:43:87:19:7b:0d:37:45:37:e7:b8:5c:6e:80:6f:8b:73:
69:00:7c:0a:2c:15:bb:00:f7:e1:e6:58:95:4b:d1:1e:b1:82:
93:df:2b:d2:99:cd:3d:bf:67:23:a8:a7:7b:33:11:c6:da:75:
e6:4f:0d:fc:d3:0f:ce:f8:5b:3e:29:c1:cd:0b:49:41:a7:77:
da:9c:8c:be:2c:d3:b2:13:9a:23:30:cd:de:60:bc:0a:87:a1:
d2:94:60:73:de:ba:3c:9d:7e:06:26:a7:c1:01:81:65:5b:ed:
b3:15:e8:e9:53:90:2e:b3:47:91:77:d0:ee:d1:df:ea:37:7f:
ff:2c:ba:9f:97:83:f3:b2:a0:b1:26:ad:76:19:41:66:20:d4:
59:a5:c3:4e:45:da:5e:1a:24:65:1f:da:c4:d2:30:26:4d:38:
93:ed:93:5c:5c:b6:d8:a1:29:70:bd:48:91:82:db:16:19:9b:
3c:6f:6f:00:ac:a1:44:20:3b:30:8a:3b:30:57:b2:43:de:9c:
55:b2:bc:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 20:11:47 2025 by rpki-client