Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/zWxX-fLtbe-5x1VkAGz6pyX9bOI.roa
File: zWxX-fLtbe-5x1VkAGz6pyX9bOI.roa (raw, json)
Hash identifier: IwZv4UmaQyEkJ/bAeGZpfzf2ivWh/Pk2WeGOx6K0K3o=
Subject key identifier: CD:6C:57:F9:F2:ED:6D:EF:B9:C7:55:64:00:6C:FA:A7:25:FD:6C:E2
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0183DE5C9EFC479D7F7E7FEE1F47AF9DB286
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/zWxX-fLtbe-5x1VkAGz6pyX9bOI.roa
Signing time: Sun 16 Oct 2022 01:15:55 +0000
ROA not before: Sun 16 Oct 2022 01:15:55 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:de:5c:9e:fc:47:9d:7f:7e:7f:ee:1f:47:af:9d:b2:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Oct 16 01:15:55 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=cd6c57f9f2ed6defb9c75564006cfaa725fd6ce2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:4e:51:b2:5c:ff:92:07:15:ef:94:3d:73:c9:
eb:ec:b8:45:66:d5:e5:2d:4d:7b:5e:ad:6c:36:3c:
06:7b:28:d9:a2:e9:78:47:47:df:f7:7d:46:2c:0d:
7e:b2:4e:37:3b:4e:ad:de:c7:5b:15:2a:0c:46:b7:
f6:de:00:cd:f3:31:50:43:c1:a2:cb:c5:96:4c:c3:
31:ed:07:e3:1e:52:70:86:63:4f:13:10:25:32:1c:
37:86:9d:a7:84:78:ca:3c:6d:22:1a:f6:c6:29:16:
3b:61:ca:9b:8f:54:91:ef:a6:c9:fe:c3:68:a4:ab:
5d:11:af:b8:d8:6d:ab:ff:36:fd:04:19:ac:f4:cc:
8b:a0:50:64:74:7e:21:9a:89:31:41:b1:b4:3f:31:
19:b6:e8:c2:8a:7a:70:be:50:1e:d1:12:ca:cc:41:
15:6d:cd:7b:b8:c3:57:e4:bf:20:d1:25:28:ba:0b:
ad:1a:6e:5d:43:e4:83:41:df:1d:36:b5:99:ec:24:
21:72:8c:82:6c:5d:7c:09:16:9a:dc:6c:96:4a:e2:
74:29:2e:40:d5:25:24:9b:48:7b:49:72:5c:8f:47:
27:d8:7f:90:94:bc:90:00:a1:c8:ea:da:25:81:6f:
3f:67:b4:96:ef:1e:d4:d3:97:ec:3b:ff:84:87:aa:
cf:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:6C:57:F9:F2:ED:6D:EF:B9:C7:55:64:00:6C:FA:A7:25:FD:6C:E2
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/zWxX-fLtbe-5x1VkAGz6pyX9bOI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
3f:03:5b:54:2b:3e:91:58:20:0b:26:45:3e:70:7f:08:25:ad:
dc:88:aa:87:dc:5d:fa:fc:86:8e:60:ea:88:ef:a4:29:f3:22:
9f:7e:0a:2b:26:fc:01:0b:35:bc:ce:c8:3f:95:57:56:59:99:
11:46:f2:05:82:f0:34:9d:ac:ae:93:fd:33:4a:76:19:74:3c:
46:0c:b0:5f:dd:59:e4:1b:35:4b:ea:fb:7f:91:0e:dc:73:0b:
3a:6c:e7:59:9d:94:2b:4a:df:df:45:e1:7e:b1:f4:40:71:8a:
c0:b9:1f:7b:63:59:5c:69:8c:ae:37:00:05:d3:51:6d:ff:14:
af:b2:9d:1e:39:8e:d5:6b:99:45:f2:20:3a:dd:51:1b:55:60:
97:83:bb:18:5a:7f:e1:3a:5f:42:16:40:f3:b8:e7:ff:b3:c0:
3e:66:b5:bd:08:a3:40:ef:dd:0d:5e:e0:2f:5f:f6:ba:23:85:
37:29:7b:94:58:04:56:26:34:2d:89:39:2d:7b:f2:b3:76:e2:
b8:39:25:16:76:64:ce:2d:b0:ce:e8:4f:96:2f:50:6d:30:cf:
51:39:9a:7b:4a:fb:ea:d4:3e:8e:2e:a6:2a:59:5f:d3:2a:24:
06:03:8f:0d:65:3a:05:f6:54:fa:14:3b:e6:7b:80:10:ea:1f:
51:30:4a:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 2 04:03:29 2025 by rpki-client