Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/zSbqelfMN8nGADG8Oyydt9PWddM.roa
File: zSbqelfMN8nGADG8Oyydt9PWddM.roa (raw, json)
Hash identifier: zpYJbw5P6StjdU/ASHg11RFm79jKSk94GPh3vslbn/Y=
Subject key identifier: CD:26:EA:7A:57:CC:37:C9:C6:00:31:BC:3B:2C:9D:B7:D3:D6:75:D3
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0182EC1AF79BF906A3CAB93C64DBDF8F92A5
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/zSbqelfMN8nGADG8Oyydt9PWddM.roa
Signing time: Tue 30 Aug 2022 00:16:06 +0000
ROA not before: Tue 30 Aug 2022 00:16:06 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:182:3f1d:a803/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:182:7cb2:99d4/128 maxlen: 128
2001:67c:64:ffff:0:182:383f:6b78/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:ec:1a:f7:9b:f9:06:a3:ca:b9:3c:64:db:df:8f:92:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Aug 30 00:16:06 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=cd26ea7a57cc37c9c60031bc3b2c9db7d3d675d3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:6b:85:ca:ab:ad:28:9a:00:b2:da:7e:c0:80:
67:b6:c2:f1:01:0d:b3:f4:51:18:ee:77:cf:06:85:
3f:b9:86:57:85:c9:cb:8f:85:a2:33:5d:5b:30:85:
27:d2:39:15:3c:63:12:65:3f:e2:52:1d:66:7e:b5:
ae:2e:a6:8b:ae:88:0d:ba:98:1a:be:74:86:ce:50:
2d:e6:85:ea:b8:3b:a8:2c:b4:79:6c:6d:a3:5b:6d:
18:48:ca:79:95:34:da:2a:a1:40:56:5f:d1:2a:cc:
16:b9:a4:94:58:6b:e2:72:bc:2d:ad:25:a8:8b:a6:
cb:47:8f:1b:c6:06:f7:de:fd:be:a5:a6:86:85:53:
c0:f2:b9:cd:1a:67:e1:0c:d1:0b:b8:a1:dd:02:82:
25:05:81:f5:10:da:49:90:00:fc:2e:9b:e6:70:47:
b9:40:bb:0e:50:78:08:3b:1d:ae:6d:30:81:f7:a3:
b3:27:d5:d3:87:a6:a2:39:00:d9:21:aa:ff:51:1f:
c5:12:5a:fa:2e:01:e6:1d:e5:f5:a5:76:48:91:3d:
76:a4:1d:c8:89:40:e6:de:cb:13:45:46:2b:b9:c1:
96:18:c0:a3:b4:95:12:be:bb:9a:db:7f:68:01:14:
39:68:c9:59:59:0d:83:ae:75:65:82:80:ca:65:ad:
e5:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:26:EA:7A:57:CC:37:C9:C6:00:31:BC:3B:2C:9D:B7:D3:D6:75:D3
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/zSbqelfMN8nGADG8Oyydt9PWddM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
4f:2f:6e:2f:f9:eb:b3:49:76:78:23:e5:b4:ba:94:3b:4d:ba:
fd:90:43:3f:2b:f7:af:9d:88:67:22:cd:e5:78:73:12:6e:a8:
a5:ff:dc:34:d2:18:f1:a1:bf:d6:82:f7:97:23:29:ec:40:1a:
4a:64:5d:7b:fb:c1:98:0c:0b:87:2a:b3:d2:5c:02:0d:c3:d7:
10:ff:38:c6:c3:65:77:48:cb:79:04:de:2b:41:a1:20:ac:6c:
18:2e:85:d5:fa:f8:9f:ad:1b:02:ce:b5:13:fd:bf:74:e5:f7:
ca:66:5a:3d:40:90:d1:97:01:13:c5:2b:bb:3d:71:3c:e4:cb:
7a:ff:e1:81:9a:b4:d2:f1:1c:cd:69:bb:41:0b:52:c5:b6:e5:
1a:c5:16:a1:45:99:dd:be:1b:70:24:0c:1d:2f:d6:8c:54:84:
ed:b2:4d:f6:37:89:7e:ae:d0:ae:f2:ec:e1:81:42:8d:19:c5:
3f:b8:2e:29:ce:27:04:5f:4b:eb:c8:aa:cd:9b:28:c3:92:50:
30:0b:81:12:8a:44:4e:92:98:36:13:d7:b1:85:fc:96:81:ff:
35:55:6e:4d:a7:b7:49:39:93:e7:d9:ff:0f:6f:0d:da:61:19:
87:31:df:e2:6b:82:d5:08:43:29:c8:07:7b:f6:a6:c7:44:41:
88:4e:da:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 5 08:53:54 2025 by rpki-client