Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/zRZlMUAxN1z57KT7xFUFlY6rre4.roa
File: zRZlMUAxN1z57KT7xFUFlY6rre4.roa (raw, json)
Hash identifier: p11YKfWK/3TXGqypk78WaiGLgbrqHKmuaX8OCHurRDY=
Subject key identifier: CD:16:65:31:40:31:37:5C:F9:EC:A4:FB:C4:55:05:95:8E:AB:AD:EE
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0185E7FB70ABAFD801BB0110BEC6E6850ED8
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/zRZlMUAxN1z57KT7xFUFlY6rre4.roa
Signing time: Wed 25 Jan 2023 08:11:33 +0000
ROA not before: Wed 25 Jan 2023 08:11:33 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:e7:fb:70:ab:af:d8:01:bb:01:10:be:c6:e6:85:0e:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Jan 25 08:11:33 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=cd1665314031375cf9eca4fbc45505958eabadee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f0:21:ea:9a:1d:4f:a4:68:5c:9c:b9:53:00:6e:
29:38:ce:19:4f:34:56:57:cd:d7:ce:40:b9:eb:f8:
1d:88:c2:13:7e:72:d2:08:dc:f8:57:94:65:d9:5c:
d3:9f:5f:41:90:62:c5:82:a4:10:c4:5d:ff:00:d8:
6f:a9:c9:45:5d:fb:39:9a:3e:17:da:14:c4:54:c2:
df:38:ce:db:c3:64:34:fc:bb:68:42:32:3b:f0:b7:
43:01:21:76:8c:35:b2:16:78:b2:9b:4a:ac:93:05:
02:bc:65:a6:e2:f3:fe:60:6f:7b:12:24:e7:73:e0:
59:ff:af:9e:f8:04:76:48:da:16:68:75:84:02:55:
20:79:8d:ce:7a:56:41:a0:cf:b4:2b:0b:71:43:5b:
55:f5:76:e8:eb:06:40:58:36:44:8e:cf:3f:c0:c8:
75:79:90:a2:c4:10:61:4b:32:16:f9:c1:c6:0f:34:
05:49:de:81:1a:3e:78:31:a1:7f:da:6c:78:09:eb:
1c:d4:fb:07:a0:2d:4c:90:fe:5e:0e:31:f9:ed:09:
2e:c0:7f:fd:07:a1:aa:91:c8:1e:79:45:93:d6:04:
c3:5e:76:76:99:c6:c6:05:9a:5b:03:4e:7c:87:60:
6e:e3:68:5b:db:39:14:23:99:62:91:02:e1:5d:52:
2a:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:16:65:31:40:31:37:5C:F9:EC:A4:FB:C4:55:05:95:8E:AB:AD:EE
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/zRZlMUAxN1z57KT7xFUFlY6rre4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
a2:be:e4:ae:48:f2:30:26:1f:cc:05:1e:a3:b0:3d:c0:b0:17:
03:81:12:7d:86:83:cf:52:f9:cd:49:ac:c5:ce:cb:f5:6c:66:
c7:93:2d:bb:4c:a1:d7:08:41:30:11:ee:b9:06:71:32:a2:a4:
a7:eb:f3:e6:47:24:4c:73:63:ad:38:ef:ae:86:a3:1a:71:46:
ff:25:2d:b7:3f:c0:c2:c9:e4:5a:27:46:c2:27:ac:51:93:16:
93:bb:48:30:5d:d5:49:c5:1e:eb:56:d5:25:85:8e:0c:7a:f4:
9f:a6:91:de:20:92:d7:eb:96:2c:c1:3e:82:06:8c:d9:4a:ac:
0e:f8:01:6d:7b:b3:05:aa:84:2c:d6:4f:77:23:78:09:4f:92:
fc:19:9f:d8:17:d8:65:8c:b9:12:3a:ae:87:54:71:55:52:9d:
aa:db:4a:40:5a:ca:2c:cd:60:4f:3a:f7:5f:6f:21:d6:9b:08:
f6:7c:62:e2:03:9c:ef:49:7e:a4:f9:b5:bc:c3:2b:b8:e1:04:
ff:bd:5a:b1:4d:47:70:18:b8:c4:1e:b1:32:a4:f2:09:9e:77:
13:f1:d9:5b:49:8a:19:42:8f:52:aa:f4:5f:52:c6:ca:c4:2e:
91:f8:dd:e9:9a:ed:2c:0a:ef:a0:44:56:45:bb:43:61:dc:9d:
04:48:1d:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 06:10:53 2025 by rpki-client