Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/zZU3s-jiCGpq_13VZASIlR-tH_0.roa
File: zZU3s-jiCGpq_13VZASIlR-tH_0.roa (raw, json)
Hash identifier: /2wWmidXavm2jL0nQ+tlxY+uEUsjASj1CTacRNekfl4=
Subject key identifier: CD:95:37:B3:E8:E2:08:6A:6A:FF:5D:D5:64:04:88:95:1F:AD:1F:FD
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 018259551240BCCD9B05755B0D6BEB4158C6
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/zZU3s-jiCGpq_13VZASIlR-tH_0.roa
Signing time: Mon 01 Aug 2022 12:15:23 +0000
ROA not before: Mon 01 Aug 2022 12:15:23 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:182:3f1d:a803/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:182:383f:6b78/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:59:55:12:40:bc:cd:9b:05:75:5b:0d:6b:eb:41:58:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Aug 1 12:15:23 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=cd9537b3e8e2086a6aff5dd5640488951fad1ffd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:33:62:b0:1b:c6:64:36:d9:73:ab:a9:da:68:
eb:8c:f1:be:7a:11:e4:d5:3c:f7:ce:51:98:8f:12:
a0:a5:62:98:7b:99:42:69:c7:7f:be:56:87:4b:e8:
06:51:cc:f5:c3:02:9e:a9:ff:00:ed:1e:92:a9:d2:
6b:68:24:c8:08:bc:f4:76:f6:ab:dd:c3:09:ec:dd:
4c:97:da:d6:16:ec:ba:63:3c:15:72:71:ae:d9:5e:
5e:66:97:18:71:5b:9a:a4:0e:27:90:7a:ea:cd:f3:
6a:08:2e:a0:99:19:86:91:0c:ea:7a:a6:e2:d9:0d:
d9:a4:8e:1b:d6:85:55:1c:51:ca:03:2f:b5:4d:e9:
0d:ce:c1:c7:a7:69:44:9e:2e:99:d0:fa:c6:b2:36:
ee:ac:56:ee:ef:f2:09:64:b0:10:11:be:66:23:7b:
dd:8f:c6:0e:34:9a:ee:b2:2f:55:9a:d4:b9:d7:66:
2b:5b:66:8b:15:3d:48:3c:36:58:63:24:d7:a7:5e:
d8:cc:da:39:d3:35:de:37:d9:f3:8a:4c:8a:81:3a:
5c:d4:7e:63:ab:eb:a6:21:b7:3e:aa:50:e7:de:c8:
28:77:a3:c3:b9:a7:49:7c:6c:70:32:38:7e:b3:6a:
74:4a:d6:dc:0b:e2:6f:b5:81:21:23:0c:0a:85:6d:
89:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:95:37:B3:E8:E2:08:6A:6A:FF:5D:D5:64:04:88:95:1F:AD:1F:FD
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/zZU3s-jiCGpq_13VZASIlR-tH_0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
4c:f7:f8:2d:46:81:00:1a:2c:1f:16:bd:3c:2d:af:19:78:6c:
63:6c:73:99:16:b7:f4:9e:90:e9:2f:3f:15:0c:2f:4f:65:e6:
26:ef:84:1b:dd:82:d0:a2:5b:49:5f:71:75:5e:bc:23:ce:b2:
f7:bb:26:af:38:06:8f:bb:72:e4:bb:31:ab:db:10:af:e3:1a:
64:4d:8c:db:61:ee:7e:1d:8c:ce:26:1d:69:3f:6e:55:70:c5:
20:ff:2f:41:4e:f4:00:d2:b5:30:62:23:cb:d0:04:cc:29:78:
25:27:04:3c:3b:c1:54:38:4e:94:b8:64:a8:68:ce:8d:b4:24:
48:f9:7b:58:9a:ec:dd:b1:ba:bf:3b:88:cf:d7:f7:63:05:f6:
ce:cf:1c:0c:46:21:99:d5:95:6f:24:79:c6:5d:90:e9:8a:42:
6e:5b:56:75:ae:fd:51:1a:fc:59:c8:6e:16:23:81:c8:a3:a7:
71:e6:0d:73:2e:88:8c:5c:48:82:c3:10:ac:df:f6:d6:3f:c3:
06:0b:b6:f4:75:66:3b:3c:5f:33:fd:93:07:04:d8:50:85:e1:
a6:f8:c4:fb:73:2c:ca:36:bc:4f:a0:a1:10:16:3c:73:3a:5f:
08:9a:3f:80:a9:3e:b9:eb:03:31:c0:57:24:22:ff:05:3e:5a:
6d:9b:41:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 02:52:09 2025 by rpki-client