Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/zcEw5tJu6OYif1CiuefvjPi15AY.roa
File: zcEw5tJu6OYif1CiuefvjPi15AY.roa (raw, json)
Hash identifier: Ww/fbaQBtQ6B+oP+yX6a50yQPyo8W6cH38u1nuuTuuQ=
Subject key identifier: CD:C1:30:E6:D2:6E:E8:E6:22:7F:50:A2:B9:E7:EF:8C:F8:B5:E4:06
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 01872DB685853DE39D2E532E0D8462B43007
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/zcEw5tJu6OYif1CiuefvjPi15AY.roa
Signing time: Wed 29 Mar 2023 14:12:29 +0000
ROA not before: Wed 29 Mar 2023 14:12:29 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:2d:b6:85:85:3d:e3:9d:2e:53:2e:0d:84:62:b4:30:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Mar 29 14:12:29 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=cdc130e6d26ee8e6227f50a2b9e7ef8cf8b5e406
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:f1:c1:23:b6:d7:6f:60:ca:33:f8:16:d9:ec:
0c:42:36:cd:9a:d9:0e:53:42:47:9d:35:aa:63:a0:
2d:c9:62:a2:ec:14:03:f7:fd:aa:d0:75:75:21:97:
79:95:d7:64:75:c0:8d:d0:9f:53:de:22:38:5f:09:
cf:d7:78:fe:37:c9:fe:75:9b:d6:2c:51:36:eb:f4:
eb:24:6f:8a:16:15:fe:ad:d5:4d:0e:57:d9:2e:4e:
87:35:0c:21:ac:3b:10:18:1a:6a:ab:a3:e2:47:ee:
4e:9d:d4:71:49:a0:0e:50:de:7b:d6:67:c2:32:b7:
5b:b1:9d:b2:92:6a:5e:2f:95:ce:f1:bd:80:f8:b5:
f3:55:21:7b:8d:db:ad:b3:84:74:97:2c:1a:49:db:
7a:16:13:86:88:af:19:b9:71:31:be:e0:9f:39:77:
1b:c5:e4:62:c3:7c:26:e8:62:66:b7:db:61:46:ab:
5b:19:01:6c:e5:04:7b:b2:f0:0e:0a:a0:98:59:65:
e6:89:0f:de:a3:39:1f:0f:76:b9:bd:46:b6:b1:a1:
49:c2:69:cd:9c:ae:ec:ad:1f:f3:a6:9b:3f:af:cc:
e0:71:a8:fd:2c:a7:a2:6d:33:20:69:3b:73:1f:a0:
a2:76:3c:d7:1b:6b:1d:cc:e1:ba:61:75:d6:e6:c5:
62:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:C1:30:E6:D2:6E:E8:E6:22:7F:50:A2:B9:E7:EF:8C:F8:B5:E4:06
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/zcEw5tJu6OYif1CiuefvjPi15AY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
4e:f0:55:5c:ad:5b:b8:6b:de:59:31:42:31:26:ac:26:81:56:
cf:04:b3:91:73:67:23:9a:3a:dd:60:c1:b0:5f:90:f3:cd:29:
78:00:8e:4c:59:3f:a4:76:a3:2f:17:10:3b:e3:66:66:9e:77:
76:a0:b2:79:40:8d:21:cd:30:0c:28:24:95:48:cf:c6:a9:40:
fe:76:c2:92:3c:0e:2f:58:33:2e:6e:71:fd:fa:99:f8:3e:4f:
48:2b:37:67:02:ea:25:e5:f5:51:22:f3:3a:4c:a0:83:fe:53:
f0:3d:0a:f3:2c:c5:5c:b6:70:8e:e3:e6:f4:a0:0b:56:bf:50:
2e:d7:f5:70:c7:85:aa:dd:3b:f3:97:56:86:c7:c1:41:b9:b4:
96:22:51:58:2e:3c:c8:ab:f4:25:e1:fc:6c:26:b1:ee:c8:8e:
cf:ee:3b:8b:2d:00:bf:37:61:7d:23:26:e4:73:8c:e2:73:de:
2d:01:06:8a:59:e8:c6:dc:15:cd:81:a8:e8:96:fc:e2:41:f0:
1f:e3:39:19:39:4c:f6:43:66:1f:a4:82:3d:78:a6:65:30:82:
af:de:7c:c4:b5:41:c2:ec:eb:e9:8b:10:67:7e:c0:9e:86:c2:
a4:b2:6c:e0:6b:03:92:c4:fe:f1:c9:cf:31:0b:00:0b:48:f6:
3d:71:d1:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 04:27:46 2025 by rpki-client