Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/zL3zPxzQEVIoTbUnzNw0Yjy3dqc.roa
File: zL3zPxzQEVIoTbUnzNw0Yjy3dqc.roa (raw, json)
Hash identifier: 6b+PPaWpE2ZbtBk1XtvipV6f1g6FzY0MuG12iD536c8=
Subject key identifier: CC:BD:F3:3F:1C:D0:11:52:28:4D:B5:27:CC:DC:34:62:3C:B7:76:A7
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 018849D0DCCDC7F196C49AB03EB997D39C95
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/zL3zPxzQEVIoTbUnzNw0Yjy3dqc.roa
Signing time: Tue 23 May 2023 18:13:24 +0000
ROA not before: Tue 23 May 2023 18:13:24 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:187:4695:a68a/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64:ffff:0:187:fa9a:b088/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:187:b2b8:a7dd/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:49:d0:dc:cd:c7:f1:96:c4:9a:b0:3e:b9:97:d3:9c:95
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: May 23 18:13:24 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=ccbdf33f1cd01152284db527ccdc34623cb776a7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:43:88:6c:f3:56:09:82:85:63:84:27:fc:85:
da:95:b5:cf:7c:cf:a9:ab:0b:88:8c:78:1c:46:c6:
5a:6b:ab:a0:87:b6:2d:25:0a:f5:c9:4a:86:1c:8c:
6c:46:9f:29:40:4f:73:ff:92:c8:22:37:62:be:f3:
30:0f:86:a9:39:7e:4d:e2:6e:08:7b:d2:aa:81:e7:
69:50:e1:b6:5c:9e:df:e7:c7:06:1b:c1:ee:38:79:
37:9a:4b:a4:13:a2:8d:aa:be:f6:92:d6:56:f5:06:
e3:7b:3a:eb:ce:71:56:bf:c5:2b:e7:1d:41:3e:bf:
34:d7:9d:be:88:7f:66:bb:06:38:e4:00:f6:a0:30:
b3:6a:72:b6:06:41:97:c3:3f:58:98:69:76:94:be:
0b:78:a6:cc:97:61:5a:d5:e1:74:a9:df:d6:ab:9d:
2c:0b:33:68:49:4e:6a:dd:e1:66:29:01:50:2e:ca:
5e:36:69:93:f9:ef:94:e4:1c:2d:d6:52:48:f1:4a:
1a:02:50:57:94:65:70:dd:3c:57:3f:52:75:e4:89:
7a:61:b6:8b:0d:4b:f2:ee:ca:c8:12:2d:ce:51:74:
1b:54:cf:21:b1:ce:82:4c:8e:eb:38:89:64:4c:98:
64:da:4e:1a:7b:5c:42:c9:a7:8c:22:4a:f6:98:7d:
3f:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:BD:F3:3F:1C:D0:11:52:28:4D:B5:27:CC:DC:34:62:3C:B7:76:A7
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/zL3zPxzQEVIoTbUnzNw0Yjy3dqc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
05:eb:09:b8:11:19:21:9f:cc:c3:3b:dd:6e:04:6d:17:2b:dd:
77:e0:76:ba:0f:b8:ae:9c:bb:68:cc:55:3b:a3:d9:ee:d6:f1:
06:d1:0a:64:62:f7:e3:a8:29:f6:71:00:ff:d7:ab:3b:e3:65:
59:39:65:3d:f3:85:e4:08:42:3a:80:13:ad:e4:62:29:66:dd:
99:cb:d7:53:57:d4:6b:7d:1a:b4:07:b4:1b:60:5c:ca:b7:b7:
aa:69:27:d6:5d:1e:57:46:92:3c:c3:19:45:76:af:7a:93:40:
81:5d:b7:a4:be:3e:62:3a:64:f9:29:b3:ca:d8:9e:16:34:6c:
c9:2d:42:05:02:c0:7f:88:63:4b:7c:50:fa:fe:f2:fb:47:f2:
6a:70:9c:8a:32:19:c1:07:cd:cc:7d:43:2b:89:36:15:e4:48:
c5:ad:4f:47:81:9f:d0:e8:e0:1f:26:63:47:f4:56:56:7f:35:
87:67:10:c6:ef:82:2a:20:5a:be:52:ea:16:b2:e6:1d:93:a5:
a5:7f:cb:29:00:40:d4:b1:75:ad:77:79:79:d5:f7:2e:24:b9:
f6:ea:63:4c:01:46:0c:41:d5:d8:d4:bd:09:0b:dd:11:ea:fb:
f6:de:b0:58:76:05:14:b7:79:63:f8:40:b9:61:e6:77:dd:bf:
19:ba:f2:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 2 05:23:54 2025 by rpki-client