Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/zs0jhzkSDfNTDoZh-PpzsGjE6Pw.roa
File: zs0jhzkSDfNTDoZh-PpzsGjE6Pw.roa (raw, json)
Hash identifier: P1ha2ItdLVg3mrrdTnFmrpfddzC2a96C9BdL/4RrEiw=
Subject key identifier: CE:CD:23:87:39:12:0D:F3:53:0E:86:61:F8:FA:73:B0:68:C4:E8:FC
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0184DAE71784F26A8E4D727AAF610A79DF98
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/zs0jhzkSDfNTDoZh-PpzsGjE6Pw.roa
Signing time: Sun 04 Dec 2022 02:11:28 +0000
ROA not before: Sun 04 Dec 2022 02:11:28 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:da:e7:17:84:f2:6a:8e:4d:72:7a:af:61:0a:79:df:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Dec 4 02:11:28 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=cecd238739120df3530e8661f8fa73b068c4e8fc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:b3:f4:f6:a8:21:fd:1d:89:f8:56:47:90:e7:
f8:41:77:0b:f2:ef:01:9d:1e:3d:31:8c:af:87:e1:
e4:19:fe:14:c5:ca:5a:7a:bc:88:b3:e9:42:cc:ef:
86:69:82:1b:36:f6:55:07:3d:77:f3:59:2b:ee:e8:
8c:20:7f:b6:42:01:cf:f6:77:5d:d8:d2:60:4d:20:
5a:52:02:7f:4a:a9:67:87:b4:99:8a:db:62:fd:77:
b5:9c:5c:21:7b:8d:7f:ff:45:fc:7f:77:94:af:9b:
f6:4f:0b:fb:4e:b3:8c:a6:6c:a0:a4:93:96:f8:91:
88:ed:8c:95:b8:fa:b7:a7:fb:c2:f3:8e:8c:c9:4e:
3f:fa:66:e3:2d:7b:62:20:a7:5b:42:c3:05:ab:23:
cb:bf:8b:97:a3:c2:72:02:49:15:a9:ae:fd:e0:ac:
ee:9f:9b:e0:16:ab:c8:fc:29:d5:6c:eb:bd:29:54:
09:7b:d2:ab:c3:32:ca:b5:f5:d1:e3:d7:47:d9:53:
08:7e:a9:e3:e5:43:24:c9:19:86:3f:26:aa:f7:a3:
64:01:a1:57:54:62:d8:41:72:79:f5:dd:e1:5f:2b:
a8:3b:ed:08:ad:cd:a7:3b:8e:ee:60:fb:72:e1:f4:
0f:80:1c:5b:0b:79:e4:67:fa:6a:b8:d7:18:59:69:
86:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:CD:23:87:39:12:0D:F3:53:0E:86:61:F8:FA:73:B0:68:C4:E8:FC
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/zs0jhzkSDfNTDoZh-PpzsGjE6Pw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
44:5b:58:ef:4c:f3:a0:d5:7a:d3:19:3e:61:f7:c6:34:90:47:
42:45:4c:df:5e:b0:dc:17:73:53:42:d9:da:ef:e0:e4:8f:74:
aa:2d:c0:3b:f8:55:7e:bb:8c:95:cb:6b:ce:30:4c:73:7d:f3:
07:6b:64:dc:e6:da:74:6c:d5:f0:5e:25:4a:3a:51:57:a0:04:
95:fc:03:49:70:5f:f3:08:ed:2b:88:33:47:37:f4:de:af:99:
24:97:84:db:b7:37:b5:c2:11:44:ae:f0:ee:f1:2c:26:d2:ee:
0f:1e:da:67:0d:05:f0:2d:c6:77:37:bb:0b:63:67:d7:61:4f:
60:75:74:d5:3e:ca:ad:17:a7:70:9e:eb:43:7b:22:53:30:5c:
1a:87:d6:2e:db:91:1a:0f:1f:4f:44:3a:7d:f1:56:fc:22:e2:
76:e9:2f:d6:7c:99:92:0c:59:90:48:57:5f:af:85:b5:8f:57:
bf:c8:f4:06:4e:60:55:58:17:fe:ae:07:e9:45:e7:45:96:cd:
02:38:7f:6c:11:86:6e:f7:60:28:12:82:3d:79:aa:ea:91:80:
c3:11:ab:94:5a:c2:1e:49:93:c8:26:0a:3b:7c:4e:ff:7c:ca:
4d:8f:f9:c7:7d:7b:ec:20:46:01:8d:fa:57:32:62:c3:53:64:
ce:22:55:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 2 00:05:33 2025 by rpki-client