Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/zQu-KwMj51rcz3lroeBiaMqBHAo.roa
File: zQu-KwMj51rcz3lroeBiaMqBHAo.roa (raw, json)
Hash identifier: 5yQhHdPuU3NBJ4kmtmVJNgM4b1WHq4AHtCeTCvtZrDs=
Subject key identifier: CD:0B:BE:2B:03:23:E7:5A:DC:CF:79:6B:A1:E0:62:68:CA:81:1C:0A
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0181CDA2C79DE9E353FBA080B5CDF03BBFD3
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/zQu-KwMj51rcz3lroeBiaMqBHAo.roa
Signing time: Tue 05 Jul 2022 09:13:25 +0000
ROA not before: Tue 05 Jul 2022 09:13:25 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:81:cd:a2:c7:9d:e9:e3:53:fb:a0:80:b5:cd:f0:3b:bf:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Jul 5 09:13:25 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=cd0bbe2b0323e75adccf796ba1e06268ca811c0a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:94:5a:49:af:d2:42:d0:af:54:9a:bb:03:5e:
21:03:0c:11:74:31:e4:78:9f:76:2e:28:26:60:2c:
37:3a:dc:f6:68:ac:4d:98:9f:ab:cb:e4:86:0e:4f:
26:42:67:6e:a7:06:f9:b1:3f:5c:f7:01:43:b8:2a:
cd:a3:b9:e2:f3:0c:c8:e8:1b:66:59:87:1f:af:dc:
64:22:4c:ef:d0:84:71:28:9e:ee:af:6c:df:ed:3a:
4b:a5:72:d4:b4:44:59:15:f2:b9:2e:7e:10:9a:62:
8b:75:f1:67:24:2b:f7:1f:b6:39:a0:1d:6c:b1:09:
b2:13:27:b5:a6:14:b9:a9:6c:e2:3a:9c:02:9f:5d:
0e:8f:cc:d9:65:f0:78:b3:ba:22:3a:fa:35:fe:1d:
9f:07:69:82:3a:99:eb:b7:8a:c1:f4:33:39:95:38:
00:c2:fc:6a:47:6e:ff:f8:a3:f2:44:17:c8:44:3b:
d6:19:ad:40:8a:92:a3:9a:88:39:98:4a:ac:38:6a:
04:5a:cc:71:a6:49:72:e9:2d:fd:1a:99:f5:bf:72:
fd:57:3d:da:a9:b2:c0:5e:a7:f8:64:bd:4c:d9:6e:
0c:86:e3:e6:6d:b4:f3:df:fd:96:5f:48:33:e4:90:
08:53:60:50:43:38:8d:14:31:cb:d2:d2:8b:f1:e4:
4b:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:0B:BE:2B:03:23:E7:5A:DC:CF:79:6B:A1:E0:62:68:CA:81:1C:0A
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/zQu-KwMj51rcz3lroeBiaMqBHAo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
98:2e:30:15:2c:7e:7e:45:af:b0:f9:4e:0f:97:85:d9:3a:c2:
8e:86:02:5e:cc:d1:8b:12:aa:e3:a1:ef:13:ed:cf:02:cf:53:
47:a4:91:87:c5:ae:1a:76:4a:0f:46:c5:9d:e7:ca:dc:42:af:
b2:39:70:d9:e9:25:97:c5:86:d0:79:e4:d0:10:23:55:a1:84:
63:70:e9:12:6d:70:11:4b:4c:d9:f6:b6:2c:f9:1c:b6:44:ea:
ae:78:72:f5:0e:c7:c7:f9:65:d3:b7:0f:7a:99:ee:3d:cc:9e:
2e:e7:2b:f6:31:8a:c3:7e:3c:03:97:02:15:96:7f:25:ea:5e:
20:4b:d1:ba:ba:e9:17:cc:71:68:db:9a:1c:45:74:97:cd:2a:
4e:13:0f:d1:eb:36:77:21:dc:67:08:8d:03:78:6e:90:01:5d:
be:a7:a6:8e:22:91:ad:a5:90:cc:7f:1a:f4:dd:4b:8e:ee:49:
f8:73:63:86:81:67:33:8c:02:11:e5:4f:ba:33:a6:e7:ee:58:
ee:91:a0:4e:8a:0d:1f:bf:cb:30:21:c1:9b:02:15:34:5b:63:
4e:03:fd:ae:bd:fc:22:9e:cd:80:6a:95:fb:b4:d4:f0:0d:5c:
6b:37:86:54:ae:e9:04:f0:94:c7:98:df:90:27:bb:51:eb:06:
48:7d:77:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 2 01:50:24 2025 by rpki-client