Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/zxmMgEXrnGymAH9DivRusdLV3yc.roa
File: zxmMgEXrnGymAH9DivRusdLV3yc.roa (raw, json)
Hash identifier: g5+UW4stJCFYTpKF5VIXFB4bg0F24J6yMudGfOfQ4dE=
Subject key identifier: CF:19:8C:80:45:EB:9C:6C:A6:00:7F:43:8A:F4:6E:B1:D2:D5:DF:27
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 01871D310E3001B6102E58E19CCF503E2387
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/zxmMgEXrnGymAH9DivRusdLV3yc.roa
Signing time: Sun 26 Mar 2023 09:12:46 +0000
ROA not before: Sun 26 Mar 2023 09:12:46 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:1d:31:0e:30:01:b6:10:2e:58:e1:9c:cf:50:3e:23:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Mar 26 09:12:46 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=cf198c8045eb9c6ca6007f438af46eb1d2d5df27
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:73:f7:44:15:af:94:6b:f6:6e:d9:0e:a4:d4:
20:21:43:02:7f:39:8e:b4:45:69:c7:71:5f:c6:a1:
b1:f7:fa:7b:03:00:a6:5d:f2:23:fa:1a:11:c8:e6:
30:c3:56:1d:00:81:00:a7:f2:e7:10:56:d8:26:53:
10:de:f1:a7:f4:5f:7c:15:9b:26:35:99:af:2e:4e:
08:73:b3:48:18:32:bb:ae:f8:a2:59:97:71:3e:75:
a2:0d:b7:bb:7e:06:4b:58:96:d4:70:20:04:b3:67:
86:2a:f8:f7:f0:20:3b:31:05:9e:19:2e:57:03:b1:
85:9e:7d:7e:23:29:61:86:f6:e2:a4:ca:c1:bc:c4:
6b:e6:3d:d8:04:f5:d0:8a:37:7f:cf:07:44:6c:31:
3a:b8:63:b0:d5:56:0b:02:c1:64:b8:e0:10:08:db:
f0:c4:da:5a:e9:25:a1:4f:1a:0a:e6:c4:4b:c8:ee:
44:8b:d4:a2:be:71:3c:63:c7:cb:b3:2b:27:43:e7:
2e:01:80:be:ae:cf:2b:fb:26:50:91:0e:25:11:68:
d4:d5:73:63:42:e4:e1:a5:d6:fc:55:9c:65:21:51:
2b:f4:07:87:b3:ef:b0:8f:1a:53:d2:84:e6:97:a2:
13:54:f2:9e:f7:2b:a7:f0:0e:26:b8:45:b6:e4:70:
5b:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:19:8C:80:45:EB:9C:6C:A6:00:7F:43:8A:F4:6E:B1:D2:D5:DF:27
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/zxmMgEXrnGymAH9DivRusdLV3yc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
a6:22:ea:7f:80:d2:a0:5f:13:1e:9d:fb:ac:95:aa:d3:b3:3b:
8d:59:13:cb:9f:7a:c9:89:ab:7d:59:9e:d9:b0:8e:ac:97:4d:
5b:3e:03:2c:74:ed:df:eb:64:40:db:1d:4d:45:69:4d:50:d9:
6c:dd:c7:37:c8:66:77:5a:cf:f6:91:e6:24:62:93:d4:66:9f:
a1:14:22:c8:84:19:d2:3a:c1:18:3c:1d:de:50:a6:a1:70:6a:
9e:59:bc:62:f9:16:8f:f4:ae:87:f7:f6:76:b9:8e:91:5c:7d:
28:50:ec:df:1f:e6:08:bb:ff:46:d0:f4:88:c9:de:6d:8b:f2:
bb:8d:b4:41:d2:54:55:a6:6a:bb:61:ad:6f:8a:dc:4e:46:90:
cd:0f:5d:63:ad:69:ba:55:66:56:fc:0c:65:d9:de:0c:30:91:
37:ca:17:51:2d:f0:20:12:b8:41:8d:9e:d5:14:aa:eb:ad:ed:
4c:3e:d3:dd:65:63:b6:29:05:a5:81:54:90:6e:0f:eb:5f:af:
84:99:d8:0f:33:df:df:ff:a0:37:b8:29:bc:84:46:73:a3:b3:
cd:f9:99:ca:a5:1b:66:67:e6:2b:0f:ce:b3:57:fd:40:60:3c:
69:4a:4c:e9:42:93:87:04:88:89:89:3b:ab:d8:6c:27:44:9e:
01:98:64:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 04:50:45 2025 by rpki-client