Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/zahHVGyyWsX5XhpeS8pZn_jb9k8.roa
File: zahHVGyyWsX5XhpeS8pZn_jb9k8.roa (raw, json)
Hash identifier: DEkRo9p0FcOLM+JBu8/fNcWQbtN9rjtp0xCGfTJ3Ld4=
Subject key identifier: CD:A8:47:54:6C:B2:5A:C5:F9:5E:1A:5E:4B:CA:59:9F:F8:DB:F6:4F
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0187052780090307822C71FF690B2FE63AAC
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/zahHVGyyWsX5XhpeS8pZn_jb9k8.roa
Signing time: Tue 21 Mar 2023 17:11:27 +0000
ROA not before: Tue 21 Mar 2023 17:11:27 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:05:27:80:09:03:07:82:2c:71:ff:69:0b:2f:e6:3a:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Mar 21 17:11:27 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=cda847546cb25ac5f95e1a5e4bca599ff8dbf64f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:b1:71:e0:73:4e:13:3b:d0:2a:9d:62:61:04:
a4:68:7b:3a:2b:c3:6f:cd:9e:a8:b3:2e:b7:3f:ff:
5f:06:a4:08:86:be:15:f8:de:44:78:75:7f:a6:4d:
20:64:51:8d:1c:63:c8:93:63:e0:88:62:9d:52:10:
1d:17:2e:b2:c7:8a:59:74:cf:14:0b:2a:f1:c2:6f:
d2:7d:d6:57:63:ae:37:4b:5b:72:f6:9a:a1:79:a2:
1b:cd:fe:bc:4e:a4:07:a7:91:3e:0e:4b:26:f2:90:
84:0f:71:68:e2:3f:56:b4:0b:8b:4b:93:95:c4:32:
11:14:79:47:f6:e6:90:74:0c:3c:fc:32:ce:ff:0d:
13:70:00:19:88:bf:72:0e:52:d2:a7:1a:e3:e5:76:
cd:b9:a8:84:72:5e:61:ea:c7:64:93:6e:45:1d:08:
aa:75:c1:43:aa:3f:5b:40:88:ca:7c:88:23:3c:91:
55:7c:9f:23:80:66:69:d3:6c:18:0f:f5:a8:a5:d9:
d7:4d:aa:73:d6:91:5d:18:84:be:10:85:52:ca:84:
47:97:95:dd:d7:9f:a0:4d:ba:72:a4:9d:7e:f4:1e:
b9:58:ea:a4:94:50:73:9e:fe:b6:f9:b8:a2:7a:31:
03:e2:0e:eb:8a:0a:d8:cb:54:c8:ad:88:27:f1:8b:
e2:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:A8:47:54:6C:B2:5A:C5:F9:5E:1A:5E:4B:CA:59:9F:F8:DB:F6:4F
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/zahHVGyyWsX5XhpeS8pZn_jb9k8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
8c:3b:13:97:10:ce:70:14:95:4d:59:e0:f1:d1:da:44:fa:a6:
76:91:5a:23:79:be:35:ce:f6:92:8a:37:bb:9f:a7:ed:3b:71:
eb:63:8c:5b:67:d9:0c:dd:ce:44:eb:af:81:3f:9c:b0:48:42:
41:a2:f0:b4:f2:9d:85:02:1c:2b:c5:21:8c:06:c9:13:99:91:
e3:24:2d:5d:11:30:b3:7d:de:4a:89:ba:41:a7:e9:f9:b3:68:
a2:01:8f:5c:b0:59:11:f4:fa:6d:9c:3f:47:5d:93:a4:b7:e5:
6c:e1:30:1e:4c:f3:3a:b6:30:b0:f7:9a:82:09:90:56:ff:82:
2e:b3:05:52:e0:51:85:d0:5a:59:c8:31:f8:ef:4a:b8:93:af:
52:36:54:55:87:9e:8a:1b:21:0e:96:28:04:c9:4c:3c:bb:e4:
34:3b:4e:7d:94:48:ad:33:5e:70:8e:83:0b:ed:6d:21:93:29:
95:3f:15:8b:a9:1d:63:84:db:95:a7:32:ee:6f:e9:4b:c3:bf:
6d:14:af:04:7e:de:62:60:a7:af:3d:c4:1d:3f:21:2c:3c:00:
f1:e2:e3:7e:f0:73:0c:0e:55:49:88:f1:fb:87:34:1f:16:0b:
f2:11:cd:78:57:02:79:85:bf:74:6e:4b:92:ae:ae:70:bc:77:
9b:d2:fa:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 04:13:24 2025 by rpki-client