Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/zfM3qQbsILufGyE8IaMdcembbjo.roa
File: zfM3qQbsILufGyE8IaMdcembbjo.roa (raw, json)
Hash identifier: xbrigqYwQ0fe+fAXDyrx9na0di/GJT/6ZkIi/Q9Pqdk=
Subject key identifier: CD:F3:37:A9:06:EC:20:BB:9F:1B:21:3C:21:A3:1D:71:E9:9B:6E:3A
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0189506D5C469124D63861EA78A1F06A239A
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/zfM3qQbsILufGyE8IaMdcembbjo.roa
Signing time: Thu 13 Jul 2023 18:04:51 +0000
ROA not before: Thu 13 Jul 2023 18:04:51 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:189:506c:c52b/128 maxlen: 128
2001:67c:64:ffff:0:188:5fe2:b396/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:187:4695:a68a/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:188:7858:a003/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64:ffff:0:187:fa9a:b088/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:187:b2b8:a7dd/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:50:6d:5c:46:91:24:d6:38:61:ea:78:a1:f0:6a:23:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Jul 13 18:04:51 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=cdf337a906ec20bb9f1b213c21a31d71e99b6e3a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:e0:4b:f8:cd:eb:2b:9a:7d:ae:db:c1:c7:4f:
9d:80:23:0f:0f:0f:20:6f:65:be:8d:d5:35:8e:59:
71:b2:bc:56:09:b5:4c:81:2e:07:9b:83:fe:bc:63:
6d:01:03:7a:45:e3:19:41:06:0b:dd:c2:1f:31:fe:
50:98:9c:e0:2f:d0:24:90:6e:d1:ea:29:c2:27:75:
fd:b6:32:5f:f6:2b:75:9a:d9:3d:29:77:5a:4c:cb:
75:a8:d1:e8:a8:50:d4:3b:d3:2c:4d:fe:d3:d3:e5:
68:d4:6b:db:60:5d:12:76:52:48:30:61:ba:c7:ab:
eb:59:bd:cb:e2:3d:50:1c:6f:c6:6a:ee:f3:43:56:
92:ed:eb:57:69:d9:c5:bf:54:a6:c1:2e:bc:63:e0:
75:2d:ef:a8:9b:be:f4:47:25:bf:f2:5d:b7:2b:6d:
dc:79:eb:e9:e6:39:a8:49:50:2f:17:6a:ce:ed:8c:
b8:fa:79:d0:38:a9:93:0a:21:60:a3:73:aa:c7:0e:
23:58:19:65:ed:42:50:d4:aa:a7:fc:a0:d6:d7:3d:
2b:40:9c:fc:2d:8b:ab:83:c5:d6:41:9e:15:1e:d3:
c8:61:ac:5a:ad:14:be:06:01:d7:3a:9e:c7:0d:6f:
60:5c:cb:8d:78:8d:82:1c:07:4b:23:a9:4f:ce:61:
51:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:F3:37:A9:06:EC:20:BB:9F:1B:21:3C:21:A3:1D:71:E9:9B:6E:3A
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/zfM3qQbsILufGyE8IaMdcembbjo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
41:85:ae:fd:e5:61:91:47:25:af:1b:b5:72:4f:c8:80:f3:2a:
39:89:91:bc:57:14:67:03:ce:6a:ca:2e:82:d9:4c:f7:bc:a6:
b8:9f:9f:f6:d2:86:5d:2b:f2:e3:ec:1e:da:26:ca:6b:84:54:
f9:02:9d:d3:ea:79:d7:7e:82:69:7d:9b:cc:f8:62:2f:a3:6e:
b0:10:d5:e8:cb:9c:dd:d9:17:a8:6b:ca:fc:79:42:f6:50:95:
e8:d0:bc:65:63:87:af:97:b8:ca:c8:16:af:00:e0:46:27:fc:
d6:60:f8:40:c3:7d:a6:e7:2c:ae:4e:b8:3f:28:40:f8:d3:12:
76:fd:dc:b7:be:79:28:c1:8e:df:34:ab:cd:a3:c3:6e:8c:cc:
c9:60:62:12:80:3c:65:f4:04:a9:e7:0e:bb:12:9c:d7:ef:25:
3f:d2:70:68:f8:6f:f7:86:1c:7e:d8:d9:fe:26:a7:1b:1b:82:
d2:c3:4f:a9:c2:3c:30:f4:56:1c:0b:89:6e:82:dd:03:a6:9f:
8f:60:ba:5a:bf:8e:9c:78:19:70:e2:b4:4e:05:47:bd:47:44:
72:50:7f:b6:95:67:80:7d:eb:a3:d3:fc:42:3c:cd:c0:cc:3f:
e8:22:7d:4b:af:3e:72:fb:93:e9:6b:2f:cb:2b:d3:52:7b:b2:
b2:6d:3a:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 00:01:17 2025 by rpki-client