Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/zZzjrx4S16jMsYp_Ww4nR7IOajQ.roa
File: zZzjrx4S16jMsYp_Ww4nR7IOajQ.roa (raw, json)
Hash identifier: 6g7V1GNlfGoMDUv9XJ1qI/gBn17abx4LPQukbrPBu+U=
Subject key identifier: CD:9C:E3:AF:1E:12:D7:A8:CC:B1:8A:7F:5B:0E:27:47:B2:0E:6A:34
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0182B002547A7CF7292804F6B7269759A7D1
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/zZzjrx4S16jMsYp_Ww4nR7IOajQ.roa
Signing time: Thu 18 Aug 2022 08:11:58 +0000
ROA not before: Thu 18 Aug 2022 08:11:58 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:182:3f1d:a803/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:182:7cb2:99d4/128 maxlen: 128
2001:67c:64:ffff:0:182:383f:6b78/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:b0:02:54:7a:7c:f7:29:28:04:f6:b7:26:97:59:a7:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Aug 18 08:11:58 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=cd9ce3af1e12d7a8ccb18a7f5b0e2747b20e6a34
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:cd:00:e2:c2:db:11:37:84:26:3c:42:21:f8:
6f:76:56:3f:8f:52:d1:55:8e:f4:54:9f:bf:72:c6:
72:c0:4d:d9:be:88:d7:41:17:d6:5a:f2:35:84:c4:
40:7f:1d:0a:81:16:a0:cc:51:b2:4e:ca:96:70:67:
76:03:e7:00:78:f9:49:3f:f1:37:ba:e8:dc:2a:b6:
0a:34:18:68:87:a4:60:b5:36:73:a9:67:31:14:de:
6a:9e:b0:8b:92:52:d5:91:61:cb:dc:2c:e6:35:48:
55:a5:cd:cd:9a:d6:de:24:33:fa:fe:18:e5:aa:c9:
f5:65:e0:26:1b:84:fc:4e:de:99:49:a0:23:a2:0d:
04:af:0c:ed:ae:7c:1f:e9:c4:f6:bf:a5:31:ab:5a:
4e:55:5d:5a:6f:75:ac:0c:cd:ff:fa:a0:ab:12:6a:
e2:84:35:b0:a1:da:53:24:6d:97:ae:7c:04:03:39:
72:56:d4:27:ac:df:55:9a:04:9d:ae:ef:5e:5d:91:
ee:43:94:a6:94:6d:3a:a7:4d:93:08:75:66:e9:74:
e2:ab:b3:b1:d4:4e:0d:f2:a6:7a:ba:fe:b4:57:82:
82:38:08:e3:4d:9a:6e:6a:67:be:38:22:0a:0f:ab:
10:1e:46:90:22:51:79:30:f1:6a:d8:68:37:b3:3c:
33:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:9C:E3:AF:1E:12:D7:A8:CC:B1:8A:7F:5B:0E:27:47:B2:0E:6A:34
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/zZzjrx4S16jMsYp_Ww4nR7IOajQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
a3:f0:a2:10:2e:23:f3:46:4e:34:57:d5:78:ae:a6:cd:a1:b7:
9e:e1:ec:53:f1:f5:5e:ff:7a:e1:ad:11:c4:fd:5b:ef:e6:51:
8d:8f:bc:d2:3e:f7:d0:6c:95:a1:ae:48:ca:2b:67:2a:dd:ef:
64:00:62:53:4b:36:6b:19:cd:9a:41:db:6d:34:dc:59:20:97:
58:7b:94:19:07:1f:f8:26:b5:7e:75:44:61:5e:25:03:8e:db:
58:33:ba:76:5a:d1:f2:d0:e9:70:71:da:d9:0f:61:b3:e1:c4:
4a:78:83:fe:87:2c:69:ec:0b:c6:93:ac:c4:ef:30:77:3f:ea:
54:ed:6c:df:92:13:c7:5a:92:3b:4c:23:66:a1:46:76:c4:56:
9e:5e:f7:46:f2:0e:f4:da:23:92:71:bf:da:a3:bd:78:61:73:
e8:85:bc:5e:7a:f5:a9:11:a3:0f:13:6b:c1:ca:48:74:89:ba:
33:fc:09:88:3f:d1:32:65:8f:85:14:b3:99:f3:73:a9:a3:60:
f6:00:a8:cf:5c:5f:d7:a8:3c:30:03:97:c3:9e:e0:1f:cb:40:
3c:95:92:17:57:41:84:b6:d4:d3:2b:43:b7:94:e4:cf:fc:c0:
40:03:25:41:97:36:3b:60:e1:b0:7e:32:d9:c5:87:51:bc:45:
f8:6f:ea:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 2 07:01:09 2025 by rpki-client